54.202.102.34 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
54.202.102.72	attack	Hit honeypot r.	2020-07-09 05:26:13

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.202.102.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10951
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;54.202.102.34.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019090400 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Sep 04 19:02:29 CST 2019
;; MSG SIZE  rcvd: 117

Host info

34.102.202.54.in-addr.arpa domain name pointer ec2-54-202-102-34.us-west-2.compute.amazonaws.com.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
34.102.202.54.in-addr.arpa	name = ec2-54-202-102-34.us-west-2.compute.amazonaws.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
120.92.91.176	attackbotsspam	May 7 19:13:17 home sshd[18697]: Failed password for root from 120.92.91.176 port 24328 ssh2 May 7 19:23:08 home sshd[20136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.91.176 May 7 19:23:10 home sshd[20136]: Failed password for invalid user alex from 120.92.91.176 port 60492 ssh2 ...	2020-05-08 01:38:19
139.59.231.103	attack	Automatic report - XMLRPC Attack	2020-05-08 01:13:01
184.22.156.222	attack	1588872181 - 05/07/2020 19:23:01 Host: 184.22.156.222/184.22.156.222 Port: 445 TCP Blocked	2020-05-08 01:41:36
41.72.61.43	attack	Bruteforce detected by fail2ban	2020-05-08 01:40:17
188.227.84.235	spam	Spoofed e-mail from this IP containing a harmful link. Disguised as a OneDrive e-mail	2020-05-08 00:55:27
112.171.26.46	attack	2020-05-07T17:23:59.402321shield sshd\[25041\]: Invalid user steam from 112.171.26.46 port 20988 2020-05-07T17:23:59.405954shield sshd\[25041\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.171.26.46 2020-05-07T17:24:01.625895shield sshd\[25041\]: Failed password for invalid user steam from 112.171.26.46 port 20988 ssh2 2020-05-07T17:31:15.980411shield sshd\[26897\]: Invalid user zls from 112.171.26.46 port 57322 2020-05-07T17:31:15.984078shield sshd\[26897\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.171.26.46	2020-05-08 01:35:11
212.64.60.187	attack	May 7 19:22:57 vpn01 sshd[21704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.60.187 May 7 19:22:58 vpn01 sshd[21704]: Failed password for invalid user asd from 212.64.60.187 port 33664 ssh2 ...	2020-05-08 01:46:18
179.124.34.8	attackbots	2020-05-07T19:25:47.523300 sshd[1881]: Invalid user test from 179.124.34.8 port 56775 2020-05-07T19:25:47.538633 sshd[1881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.124.34.8 2020-05-07T19:25:47.523300 sshd[1881]: Invalid user test from 179.124.34.8 port 56775 2020-05-07T19:25:49.248545 sshd[1881]: Failed password for invalid user test from 179.124.34.8 port 56775 ssh2 ...	2020-05-08 01:40:47
52.82.100.177	attackbotsspam	May 7 13:37:33 mail1 sshd\[14262\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.82.100.177 user=postgres May 7 13:37:35 mail1 sshd\[14262\]: Failed password for postgres from 52.82.100.177 port 44400 ssh2 May 7 13:53:36 mail1 sshd\[14458\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.82.100.177 user=root May 7 13:53:38 mail1 sshd\[14458\]: Failed password for root from 52.82.100.177 port 57024 ssh2 May 7 13:58:39 mail1 sshd\[14484\]: Invalid user build from 52.82.100.177 port 44860 May 7 13:58:39 mail1 sshd\[14484\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.82.100.177 ...	2020-05-08 01:03:47
178.195.69.51	attackbotsspam	[portscan] Port scan	2020-05-08 01:08:55
195.231.11.201	attackbotsspam	May 7 19:22:42 server sshd[20930]: Failed password for root from 195.231.11.201 port 37734 ssh2 May 7 19:23:01 server sshd[21041]: Failed password for root from 195.231.11.201 port 36078 ssh2 May 7 19:23:19 server sshd[21162]: Failed password for root from 195.231.11.201 port 34124 ssh2	2020-05-08 01:28:55
54.144.50.65	attackbotsspam	tcp 27017	2020-05-08 00:54:55
122.51.45.200	attack	May 7 17:16:37 ns382633 sshd\[880\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.45.200 user=root May 7 17:16:39 ns382633 sshd\[880\]: Failed password for root from 122.51.45.200 port 37234 ssh2 May 7 17:25:12 ns382633 sshd\[2530\]: Invalid user yogesh from 122.51.45.200 port 57470 May 7 17:25:12 ns382633 sshd\[2530\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.45.200 May 7 17:25:14 ns382633 sshd\[2530\]: Failed password for invalid user yogesh from 122.51.45.200 port 57470 ssh2	2020-05-08 01:13:18
61.177.172.128	attackspam	May 7 19:15:37 MainVPS sshd[22903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128 user=root May 7 19:15:39 MainVPS sshd[22903]: Failed password for root from 61.177.172.128 port 33375 ssh2 May 7 19:15:51 MainVPS sshd[22903]: error: maximum authentication attempts exceeded for root from 61.177.172.128 port 33375 ssh2 [preauth] May 7 19:15:37 MainVPS sshd[22903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128 user=root May 7 19:15:39 MainVPS sshd[22903]: Failed password for root from 61.177.172.128 port 33375 ssh2 May 7 19:15:51 MainVPS sshd[22903]: error: maximum authentication attempts exceeded for root from 61.177.172.128 port 33375 ssh2 [preauth] May 7 19:15:55 MainVPS sshd[23136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.128 user=root May 7 19:15:57 MainVPS sshd[23136]: Failed password for root from 61.177.172.128 port 64497 ss	2020-05-08 01:18:39
185.234.218.249	attackbots	May 7 19:30:31 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.234.218.249, lip=172.104.140.148, session=<+LGrPBKlKra56tr5> May 7 19:33:13 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.234.218.249, lip=172.104.140.148, session= May 7 19:35:01 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.234.218.249, lip=172.104.140.148, session= May 7 19:37:42 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.234.218.249, lip=172.104.140.148, session= May 7 19:39:29 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=185.234.218.249, lip=172.104.140.148, session=<6Qy8XBKlVuO56 ...	2020-05-08 01:48:12

Recently Reported IPs

103.28.37.137	138.204.26.110	182.100.67.11	123.8.59.86
184.13.228.143	187.36.56.5	77.139.157.205	71.173.31.23
171.229.76.16	200.20.232.241	43.6.242.88	111.241.87.226
157.89.68.154	222.205.138.41	121.113.12.198	114.238.13.208
255.238.199.95	229.249.238.227	138.159.245.103	216.23.143.195