City: unknown
Region: Virginia
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.164.39.143
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29630
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;54.164.39.143. IN A
;; AUTHORITY SECTION:
. 435 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022091502 1800 900 604800 86400
;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 16 09:45:48 CST 2022
;; MSG SIZE rcvd: 106143.39.164.54.in-addr.arpa domain name pointer ec2-54-164-39-143.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
143.39.164.54.in-addr.arpa name = ec2-54-164-39-143.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 14.177.167.92 | attackspambots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-31 11:42:00,216 INFO [amun_request_handler] PortScan Detected on Port: 445 (14.177.167.92) |
2019-08-01 04:11:38 |
| 52.29.81.56 | attackspam | Jul 31 21:51:48 MK-Soft-Root2 sshd\[7306\]: Invalid user kundan from 52.29.81.56 port 44540 Jul 31 21:51:48 MK-Soft-Root2 sshd\[7306\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.29.81.56 Jul 31 21:51:50 MK-Soft-Root2 sshd\[7306\]: Failed password for invalid user kundan from 52.29.81.56 port 44540 ssh2 ... |
2019-08-01 04:06:57 |
| 207.46.13.180 | attack | Automatic report - Banned IP Access |
2019-08-01 04:33:39 |
| 193.70.109.193 | attack | SSH bruteforce (Triggered fail2ban) |
2019-08-01 04:16:22 |
| 190.144.161.10 | attackspambots | Apr 12 23:58:23 ubuntu sshd[5178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.144.161.10 Apr 12 23:58:24 ubuntu sshd[5178]: Failed password for invalid user edouard from 190.144.161.10 port 52622 ssh2 Apr 13 00:04:41 ubuntu sshd[5372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.144.161.10 |
2019-08-01 04:42:03 |
| 172.104.124.64 | attackbotsspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-31 18:15:29,234 INFO [shellcode_manager] (172.104.124.64) found unknown/incomplete download URL: ('https://security.ipip.net)', 'https', '//', '//', None) (ARC Vulnerability) |
2019-08-01 04:05:07 |
| 157.33.127.59 | attackspambots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-31 11:41:48,184 INFO [amun_request_handler] PortScan Detected on Port: 445 (157.33.127.59) |
2019-08-01 04:18:54 |
| 190.145.138.19 | attack | Apr 18 13:13:32 ubuntu sshd[32018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.138.19 Apr 18 13:13:35 ubuntu sshd[32018]: Failed password for invalid user apps from 190.145.138.19 port 47708 ssh2 Apr 18 13:16:08 ubuntu sshd[32141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.138.19 Apr 18 13:16:09 ubuntu sshd[32141]: Failed password for invalid user Elvi from 190.145.138.19 port 45304 ssh2 |
2019-08-01 04:32:48 |
| 27.115.124.6 | attackspam | Don't really know what they are trying to achieve as the log shows a hex encoded request that I am not going to bother to decode. Interesting to note that 27.115.124.70 is also spinning up similar requests at about the same time. Are they friends? |
2019-08-01 04:46:08 |
| 178.128.107.61 | attackspam | Jul 31 22:38:46 meumeu sshd[15713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.107.61 Jul 31 22:38:49 meumeu sshd[15713]: Failed password for invalid user prince from 178.128.107.61 port 57010 ssh2 Jul 31 22:46:32 meumeu sshd[16549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.107.61 ... |
2019-08-01 04:47:38 |
| 204.48.19.178 | attackspambots | Jul 31 21:13:18 localhost sshd\[4663\]: Invalid user pi from 204.48.19.178 port 46882 Jul 31 21:13:18 localhost sshd\[4663\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=204.48.19.178 ... |
2019-08-01 04:28:26 |
| 91.121.220.97 | attackbots | Jul 31 22:10:13 nextcloud sshd\[30563\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.220.97 user=root Jul 31 22:10:15 nextcloud sshd\[30563\]: Failed password for root from 91.121.220.97 port 60324 ssh2 Jul 31 22:10:18 nextcloud sshd\[30695\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.220.97 user=root ... |
2019-08-01 04:44:19 |
| 71.189.47.10 | attack | 2019-07-31T19:42:34.889423abusebot-2.cloudsearch.cf sshd\[14080\]: Invalid user user1 from 71.189.47.10 port 6402 |
2019-08-01 04:06:05 |
| 180.126.229.230 | attackspambots | 19/7/31@14:48:20: FAIL: IoT-SSH address from=180.126.229.230 ... |
2019-08-01 04:42:34 |
| 178.32.215.89 | attack | Jul 31 15:51:27 debian sshd\[18138\]: Invalid user dummy from 178.32.215.89 port 38466 Jul 31 15:51:27 debian sshd\[18138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.32.215.89 Jul 31 15:51:29 debian sshd\[18138\]: Failed password for invalid user dummy from 178.32.215.89 port 38466 ssh2 ... |
2019-08-01 04:08:46 |