City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.159.3.93
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24253
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;54.159.3.93. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020401 1800 900 604800 86400
;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 12:32:05 CST 2025
;; MSG SIZE rcvd: 10493.3.159.54.in-addr.arpa domain name pointer ec2-54-159-3-93.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
93.3.159.54.in-addr.arpa name = ec2-54-159-3-93.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 202.21.119.98 | attackbotsspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-01 02:23:19,714 INFO [amun_request_handler] PortScan Detected on Port: 445 (202.21.119.98) |
2019-07-01 17:33:38 |
| 42.116.19.254 | attackbots | Jul 1 03:34:17 sanyalnet-cloud-vps2 sshd[9034]: Connection from 42.116.19.254 port 46645 on 45.62.253.138 port 22 Jul 1 03:34:33 sanyalnet-cloud-vps2 sshd[9034]: Invalid user pian from 42.116.19.254 port 46645 Jul 1 03:34:33 sanyalnet-cloud-vps2 sshd[9034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.116.19.254 Jul 1 03:34:35 sanyalnet-cloud-vps2 sshd[9034]: Failed password for invalid user pian from 42.116.19.254 port 46645 ssh2 Jul 1 03:34:35 sanyalnet-cloud-vps2 sshd[9034]: Received disconnect from 42.116.19.254 port 46645:11: Bye Bye [preauth] Jul 1 03:34:35 sanyalnet-cloud-vps2 sshd[9034]: Disconnected from 42.116.19.254 port 46645 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=42.116.19.254 |
2019-07-01 18:27:37 |
| 74.208.27.191 | attackspam | Jul 1 07:50:22 cvbmail sshd\[5005\]: Invalid user kafka from 74.208.27.191 Jul 1 07:50:22 cvbmail sshd\[5005\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.208.27.191 Jul 1 07:50:24 cvbmail sshd\[5005\]: Failed password for invalid user kafka from 74.208.27.191 port 35972 ssh2 |
2019-07-01 17:20:39 |
| 122.154.109.234 | attackspam | Jul 1 14:20:36 tanzim-HP-Z238-Microtower-Workstation sshd\[9189\]: Invalid user buildpass from 122.154.109.234 Jul 1 14:20:36 tanzim-HP-Z238-Microtower-Workstation sshd\[9189\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.154.109.234 Jul 1 14:20:38 tanzim-HP-Z238-Microtower-Workstation sshd\[9189\]: Failed password for invalid user buildpass from 122.154.109.234 port 47872 ssh2 ... |
2019-07-01 17:49:56 |
| 203.77.252.178 | attack | Jul 1 05:28:41 mxgate1 postfix/postscreen[18855]: CONNECT from [203.77.252.178]:36751 to [176.31.12.44]:25 Jul 1 05:28:41 mxgate1 postfix/dnsblog[18856]: addr 203.77.252.178 listed by domain zen.spamhaus.org as 127.0.0.3 Jul 1 05:28:41 mxgate1 postfix/dnsblog[18856]: addr 203.77.252.178 listed by domain zen.spamhaus.org as 127.0.0.4 Jul 1 05:28:41 mxgate1 postfix/dnsblog[18857]: addr 203.77.252.178 listed by domain cbl.abuseat.org as 127.0.0.2 Jul 1 05:28:41 mxgate1 postfix/dnsblog[18859]: addr 203.77.252.178 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Jul 1 05:28:41 mxgate1 postfix/dnsblog[19350]: addr 203.77.252.178 listed by domain bl.spamcop.net as 127.0.0.2 Jul 1 05:28:41 mxgate1 postfix/dnsblog[18858]: addr 203.77.252.178 listed by domain b.barracudacentral.org as 127.0.0.2 Jul 1 05:28:42 mxgate1 postfix/postscreen[18855]: PREGREET 16 after 0.57 from [203.77.252.178]:36751: EHLO 021fy.com Jul 1 05:28:42 mxgate1 postfix/postscreen[18855]: DNSBL rank........ ------------------------------- |
2019-07-01 18:06:25 |
| 159.65.148.241 | attackspam | Tried sshing with brute force. |
2019-07-01 18:21:57 |
| 104.248.124.163 | attackbots | $f2bV_matches |
2019-07-01 18:14:20 |
| 116.203.59.74 | attack | Jul 1 11:03:23 MK-Soft-Root1 sshd\[19389\]: Invalid user renee from 116.203.59.74 port 50736 Jul 1 11:03:23 MK-Soft-Root1 sshd\[19389\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.203.59.74 Jul 1 11:03:25 MK-Soft-Root1 sshd\[19389\]: Failed password for invalid user renee from 116.203.59.74 port 50736 ssh2 ... |
2019-07-01 18:04:52 |
| 139.59.4.54 | attack | web-1 [ssh] SSH Attack |
2019-07-01 17:22:16 |
| 99.46.143.22 | attackspam | Jul 1 11:04:53 pornomens sshd\[13655\]: Invalid user sklopaketboss from 99.46.143.22 port 59228 Jul 1 11:04:53 pornomens sshd\[13655\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=99.46.143.22 Jul 1 11:04:55 pornomens sshd\[13655\]: Failed password for invalid user sklopaketboss from 99.46.143.22 port 59228 ssh2 ... |
2019-07-01 18:21:31 |
| 113.167.18.213 | attackbots | TCP port 445 (SMB) attempt blocked by firewall. [2019-07-01 05:46:55] |
2019-07-01 18:15:16 |
| 2.183.9.20 | attackspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-01 02:23:53,465 INFO [amun_request_handler] PortScan Detected on Port: 445 (2.183.9.20) |
2019-07-01 17:27:22 |
| 78.85.25.20 | attackbotsspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-01 03:29:34,417 INFO [shellcode_manager] (78.85.25.20) no match, writing hexdump (0bbc2944cc83e3b770b703e1ece19748 :5678) - SMB (Unknown) |
2019-07-01 17:23:48 |
| 199.58.86.211 | attackspambots | Automatic report - Web App Attack |
2019-07-01 17:21:46 |
| 134.175.151.155 | attackspam | Jul 1 11:47:42 meumeu sshd[22682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.151.155 Jul 1 11:47:44 meumeu sshd[22682]: Failed password for invalid user starbound from 134.175.151.155 port 37258 ssh2 Jul 1 11:49:40 meumeu sshd[22911]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.151.155 ... |
2019-07-01 18:07:51 |