City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.203.40.60
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50501
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;54.203.40.60. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025011400 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 14 21:19:24 CST 2025
;; MSG SIZE rcvd: 10560.40.203.54.in-addr.arpa domain name pointer ec2-54-203-40-60.us-west-2.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
60.40.203.54.in-addr.arpa name = ec2-54-203-40-60.us-west-2.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 104.248.136.19 | attack | Jul 2 18:04:21 host sshd[13973]: Failed password for root from 104.248.136.19 port 44042 ssh2 Jul 2 18:04:21 host sshd[13976]: Failed password for root from 104.248.136.19 port 44330 ssh2 Jul 2 18:04:21 host sshd[13967]: Failed password for root from 104.248.136.19 port 43946 ssh2 Jul 2 18:04:21 host sshd[13979]: Failed password for root from 104.248.136.19 port 44426 ssh2 |
2022-07-05 20:33:49 |
| 185.63.253.200 | normal | 2048 |
2022-06-06 15:39:13 |
| 185.63.253.200 | spambotsattackproxynormal | 185.63.253.200 |
2022-07-06 18:19:36 |
| 185.63.253.200 | proxy | agaee |
2022-06-09 10:55:07 |
| 177.107.43.34 | spam | Scam to pay bitcoins: Hi! Sadly, there are some bad news that you are about to hear. About few months ago I have gained a full access to all devices used by you for internet browsing. Shortly after, I started recording all internet activities done by you. Below is the sequence of events of how that happened: Earlier I purchased from hackers a unique access to diversified email accounts (at the moment, it is really easy to do using internet). As you can see, I managed to log in to your email account without breaking a sweat: |
2022-06-21 21:31:36 |
| 120.78.197.101 | normal | DNS服务器 |
2022-06-15 12:36:25 |
| 185.156.72.37 | attack | Brute-Force RDP attack, might attempt to crack your admin password. |
2022-06-17 18:46:51 |
| 194.5.53.244 | spambotsattackproxy | ... |
2022-07-03 23:06:22 |
| 185.63.253.00 | spambotsattackproxynormal | Log |
2022-07-06 18:10:59 |
| 2001:0002:14:5:1:2:bf35:2610 | spambotsattackproxynormal | Hel0 |
2022-06-21 14:32:34 |
| 2001:41d0:701:1100::49e1 | spambotsattackproxynormal | danger |
2022-07-01 19:25:38 |
| 167.99.199.98 | attack | Jul 3 05:29:37 hostname sshd[1529575]: pam_unix(sshd:auth): check pass; user unknown Jul 3 05:29:37 hostname sshd[1529575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.199.98 Jul 3 05:29:37 hostname sshd[1529571]: Invalid user bmp from 167.99.199.98 port 43148 Jul 3 05:29:37 hostname sshd[1529571]: pam_unix(sshd:auth): check pass; user unknown Jul 3 05:29:37 hostname sshd[1529571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.199.98 Jul 3 05:29:37 hostname sshd[1529578]: Invalid user centos from 167.99.199.98 port 44110 Jul 3 05:29:37 hostname sshd[1529578]: pam_unix(sshd:auth): check pass; user unknown Jul 3 05:29:37 hostname sshd[1529578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.199.98 Jul 3 05:29:37 hostname sshd[1529567]: Invalid user amandabackup from 167.99.199.98 port 42380 Jul 3 05:29:37 hostname sshd[1529567]: pam_unix(sshd:auth): check pass; user unknown Jul 3 05:29:37 hostname sshd[1529567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.199.98 Jul 3 05:29:37 hostname sshd[1529558]: Invalid user admin from 167.99.199.98 port 41420 |
2022-07-05 20:15:58 |
| 85.119.151.254 | spamattack | Scan port |
2022-06-20 12:58:42 |
| 222.107.222.182 | spambotsattackproxynormal | ddd |
2022-06-21 18:38:54 |
| 45.93.16.84 | attack | Attack, like DDOS, Brute-Force, Port Scan, Hack, etc. |
2022-06-20 14:31:49 |