City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.192.131.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65427
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;54.192.131.1. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020401 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 12:33:26 CST 2025
;; MSG SIZE rcvd: 1051.131.192.54.in-addr.arpa domain name pointer server-54-192-131-1.ord51.r.cloudfront.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
1.131.192.54.in-addr.arpa name = server-54-192-131-1.ord51.r.cloudfront.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 213.127.18.55 | attackspam | (sshd) Failed SSH login from 213.127.18.55 (NL/Netherlands/ip-213-127-18-55.ip.prioritytelecom.net): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jan 17 22:11:45 ubnt-55d23 sshd[18688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.127.18.55 user=root Jan 17 22:11:47 ubnt-55d23 sshd[18688]: Failed password for root from 213.127.18.55 port 19072 ssh2 |
2020-01-18 06:21:57 |
| 210.245.51.76 | attackbotsspam | proto=tcp . spt=53445 . dpt=25 . Found on Blocklist de (637) |
2020-01-18 06:14:26 |
| 176.124.232.41 | attack | Honeypot attack, port: 5555, PTR: PTR record not found |
2020-01-18 06:10:04 |
| 46.105.153.8 | attackspam | Honeypot attack, port: 445, PTR: ip8.ip-46-105-153.eu. |
2020-01-18 06:03:43 |
| 193.112.197.85 | attackspambots | 2020-01-17T16:43:20.036333xentho-1 sshd[603787]: Invalid user eka from 193.112.197.85 port 50922 2020-01-17T16:43:20.043872xentho-1 sshd[603787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.197.85 2020-01-17T16:43:20.036333xentho-1 sshd[603787]: Invalid user eka from 193.112.197.85 port 50922 2020-01-17T16:43:21.628518xentho-1 sshd[603787]: Failed password for invalid user eka from 193.112.197.85 port 50922 ssh2 2020-01-17T16:44:43.467074xentho-1 sshd[603809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.197.85 user=root 2020-01-17T16:44:45.779422xentho-1 sshd[603809]: Failed password for root from 193.112.197.85 port 34078 ssh2 2020-01-17T16:46:08.716215xentho-1 sshd[603833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.197.85 user=root 2020-01-17T16:46:11.033022xentho-1 sshd[603833]: Failed password for root from 193.112.197.85 po ... |
2020-01-18 06:08:52 |
| 152.136.96.32 | attack | Jan 17 22:19:34 MK-Soft-VM6 sshd[29153]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.96.32 Jan 17 22:19:35 MK-Soft-VM6 sshd[29153]: Failed password for invalid user quake from 152.136.96.32 port 40004 ssh2 ... |
2020-01-18 05:46:42 |
| 78.131.11.10 | attackspam | Unauthorized connection attempt detected from IP address 78.131.11.10 to port 22 [J] |
2020-01-18 05:59:32 |
| 14.140.192.7 | attackspam | Jan 18 00:11:58 server sshd\[12599\]: Invalid user binta from 14.140.192.7 Jan 18 00:11:58 server sshd\[12599\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.140.192.7 Jan 18 00:12:01 server sshd\[12599\]: Failed password for invalid user binta from 14.140.192.7 port 25966 ssh2 Jan 18 00:12:24 server sshd\[12711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.140.192.7 user=root Jan 18 00:12:26 server sshd\[12711\]: Failed password for root from 14.140.192.7 port 25567 ssh2 ... |
2020-01-18 05:49:35 |
| 184.82.198.213 | attackbotsspam | Jan 17 21:28:38 vtv3 sshd[29136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.82.198.213 Jan 17 21:28:40 vtv3 sshd[29136]: Failed password for invalid user liao from 184.82.198.213 port 53423 ssh2 Jan 17 21:30:50 vtv3 sshd[30581]: Failed password for root from 184.82.198.213 port 61391 ssh2 Jan 17 21:42:51 vtv3 sshd[3972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.82.198.213 Jan 17 21:42:53 vtv3 sshd[3972]: Failed password for invalid user test1 from 184.82.198.213 port 52179 ssh2 Jan 17 21:45:10 vtv3 sshd[5098]: Failed password for root from 184.82.198.213 port 60148 ssh2 Jan 17 21:57:04 vtv3 sshd[11129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.82.198.213 Jan 17 21:57:06 vtv3 sshd[11129]: Failed password for invalid user song from 184.82.198.213 port 50936 ssh2 Jan 17 21:59:21 vtv3 sshd[12061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid |
2020-01-18 06:01:41 |
| 92.118.37.99 | attackbots | Jan 17 22:08:37 h2177944 kernel: \[2493699.060546\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.99 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=41422 PROTO=TCP SPT=55743 DPT=23102 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 17 22:08:37 h2177944 kernel: \[2493699.060559\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.99 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=41422 PROTO=TCP SPT=55743 DPT=23102 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 17 22:26:00 h2177944 kernel: \[2494742.450221\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.99 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=13372 PROTO=TCP SPT=55743 DPT=15202 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 17 22:26:00 h2177944 kernel: \[2494742.450235\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.99 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=13372 PROTO=TCP SPT=55743 DPT=15202 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 17 22:38:00 h2177944 kernel: \[2495461.684165\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.99 DST=85.214.117.9 |
2020-01-18 05:50:38 |
| 62.73.127.10 | attackspam | proto=tcp . spt=42258 . dpt=25 . Found on Blocklist de (640) |
2020-01-18 06:02:37 |
| 222.186.30.31 | attack | 2020-01-17T23:11:21.724827scmdmz1 sshd[22575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.31 user=root 2020-01-17T23:11:24.416512scmdmz1 sshd[22575]: Failed password for root from 222.186.30.31 port 40574 ssh2 2020-01-17T23:11:26.411494scmdmz1 sshd[22575]: Failed password for root from 222.186.30.31 port 40574 ssh2 2020-01-17T23:11:21.724827scmdmz1 sshd[22575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.31 user=root 2020-01-17T23:11:24.416512scmdmz1 sshd[22575]: Failed password for root from 222.186.30.31 port 40574 ssh2 2020-01-17T23:11:26.411494scmdmz1 sshd[22575]: Failed password for root from 222.186.30.31 port 40574 ssh2 2020-01-17T23:11:21.724827scmdmz1 sshd[22575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.31 user=root 2020-01-17T23:11:24.416512scmdmz1 sshd[22575]: Failed password for root from 222.186.30.31 port 40574 ssh2 2020-01-1 |
2020-01-18 06:13:01 |
| 59.11.248.116 | attackspambots | KR__<177>1579295521 [1:2403390:54690] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 46 [Classification: Misc Attack] [Priority: 2] {TCP} 59.11.248.116:34908 |
2020-01-18 06:12:16 |
| 189.44.225.58 | attackbots | Honeypot attack, port: 445, PTR: 189-44-225-58.customer.tdatabrasil.net.br. |
2020-01-18 06:17:56 |
| 41.157.29.156 | attackbotsspam | Unauthorized connection attempt detected from IP address 41.157.29.156 to port 5555 [J] |
2020-01-18 06:09:49 |