54.177.139.6 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Amazon.com Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	2020-06-29T07:19:15+0200 Failed SSH Authentication/Brute Force Attack. (Server 9)	2020-06-29 17:01:54

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.177.139.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20916
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;54.177.139.6.			IN	A

;; AUTHORITY SECTION:
.			493	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020062900 1800 900 604800 86400

;; Query time: 92 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jun 29 17:01:50 CST 2020
;; MSG SIZE  rcvd: 116

Host info

6.139.177.54.in-addr.arpa domain name pointer ec2-54-177-139-6.us-west-1.compute.amazonaws.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
6.139.177.54.in-addr.arpa	name = ec2-54-177-139-6.us-west-1.compute.amazonaws.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
220.132.83.172	attackspambots	TCP (SYN) 220.132.83.172:3564 -> port 23, len 40	2020-05-20 06:38:06
128.14.209.230	attackbotsspam	[Tue May 19 20:33:54 2020] - DDoS Attack From IP: 128.14.209.230 Port: 34705	2020-05-20 06:05:52
213.232.105.188	attackspambots	Multiple Portscans detected	2020-05-20 06:36:00
84.205.181.134	attackbotsspam	TCP (SYN) 84.205.181.134:42176 -> port 25, len 60	2020-05-20 06:19:56
91.207.175.154	attackbots	TCP (SYN) 91.207.175.154:57239 -> port 53, len 40	2020-05-20 06:32:05
14.239.85.164	attackbots	TCP (SYN) 14.239.85.164:28798 -> port 81, len 44	2020-05-20 06:24:46
94.225.223.187	attack	Unauthorized connection attempt detected from IP address 94.225.223.187 to port 23	2020-05-20 06:15:39
27.37.163.128	attack	TCP (SYN) 27.37.163.128:4354 -> port 1433, len 40	2020-05-20 06:11:15
14.161.151.174	attack	TCP (SYN) 14.161.151.174:53174 -> port 445, len 52	2020-05-20 06:07:27
181.46.9.140	attackbots	TCP (SYN) 181.46.9.140:14156 -> port 445, len 52	2020-05-20 06:25:06
110.43.37.133	attack	Invalid user huwenbo from 110.43.37.133 port 1074	2020-05-20 06:23:19
61.164.115.242	attackbotsspam	May 18 10:55:26 statusweb1.srvfarm.net dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=61.164.115.242, lip=172.31.1.100, session= May 18 10:55:32 statusweb1.srvfarm.net dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=61.164.115.242, lip=172.31.1.100, session=<2DL8Uuil47A9pHPy> May 18 10:55:43 statusweb1.srvfarm.net dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 10 secs): user=, method=PLAIN, rip=61.164.115.242, lip=172.31.1.100, session= May 18 10:56:00 statusweb1.srvfarm.net dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 17 secs): user=, method=PLAIN, rip=61.164.115.242, lip=172.31.1.100, session= May 18 10:56:18 statusweb1.srvfarm.net dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 17 secs): user=, method=PLAIN, rip=61.164	2020-05-20 06:10:29
93.119.79.173	attackbotsspam	TCP (SYN) 93.119.79.173:59739 -> port 445, len 52	2020-05-20 06:16:15
74.82.47.17	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-05-20 06:35:11
180.248.233.220	attack	TCP (SYN) 180.248.233.220:55541 -> port 445, len 52	2020-05-20 06:26:50

Recently Reported IPs

39.59.74.222	2.42.63.164	192.141.168.192	149.202.187.142
177.124.15.33	134.122.115.168	49.232.136.245	112.78.211.46
111.132.5.132	168.205.16.135	2.250.2.129	61.62.157.136
151.90.46.54	223.206.235.124	180.94.149.1	112.76.175.97
220.190.187.246	223.135.39.228	36.78.184.46	15.206.237.126