City: Ashburn
Region: Virginia
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: Amazon.com, Inc.
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.237.83.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11506
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;54.237.83.54. IN A
;; AUTHORITY SECTION:
. 3352 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019081601 1800 900 604800 86400
;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 17 03:53:38 CST 2019
;; MSG SIZE rcvd: 11654.83.237.54.in-addr.arpa domain name pointer ec2-54-237-83-54.compute-1.amazonaws.com.Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
54.83.237.54.in-addr.arpa name = ec2-54-237-83-54.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 109.195.139.50 | attack | 23/tcp [2020-08-30]1pkt |
2020-08-31 05:20:26 |
| 222.186.42.213 | attackbotsspam | Aug 30 23:04:08 v22018053744266470 sshd[30623]: Failed password for root from 222.186.42.213 port 23061 ssh2 Aug 30 23:04:25 v22018053744266470 sshd[30642]: Failed password for root from 222.186.42.213 port 43644 ssh2 ... |
2020-08-31 05:13:11 |
| 3.231.160.231 | attackspam | 27017/tcp [2020-08-30]1pkt |
2020-08-31 05:41:34 |
| 35.195.162.205 | attackbots | Port Scan ... |
2020-08-31 05:16:31 |
| 111.229.167.91 | attackbots | Aug 30 22:24:16 ovpn sshd\[3731\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.167.91 user=root Aug 30 22:24:18 ovpn sshd\[3731\]: Failed password for root from 111.229.167.91 port 39210 ssh2 Aug 30 22:37:29 ovpn sshd\[6904\]: Invalid user status from 111.229.167.91 Aug 30 22:37:29 ovpn sshd\[6904\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.167.91 Aug 30 22:37:31 ovpn sshd\[6904\]: Failed password for invalid user status from 111.229.167.91 port 57312 ssh2 |
2020-08-31 05:11:28 |
| 167.71.224.234 | attackspam | various attack |
2020-08-31 05:40:00 |
| 104.155.163.244 | attackspambots | Aug 30 21:37:01 ms-srv sshd[33889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.155.163.244 Aug 30 21:37:03 ms-srv sshd[33889]: Failed password for invalid user hj from 104.155.163.244 port 58956 ssh2 |
2020-08-31 05:36:16 |
| 90.186.4.59 | attackbots | 90.186.4.59 (DE/Germany/dslb-090-186-004-059.090.186.pools.vodafone-ip.de), 3 distributed sshd attacks on account [pi] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Aug 30 16:37:04 internal2 sshd[27547]: Invalid user pi from 112.230.197.34 port 41672 Aug 30 16:12:16 internal2 sshd[8741]: Invalid user pi from 90.186.4.59 port 54660 Aug 30 16:12:16 internal2 sshd[8742]: Invalid user pi from 90.186.4.59 port 54664 IP Addresses Blocked: 112.230.197.34 (CN/China/-) |
2020-08-31 05:32:02 |
| 212.70.149.83 | attackbotsspam | Aug 30 23:32:00 galaxy event: galaxy/lswi: smtp: drs-web-gamma@uni-potsdam.de [212.70.149.83] authentication failure using internet password Aug 30 23:32:28 galaxy event: galaxy/lswi: smtp: dpm@uni-potsdam.de [212.70.149.83] authentication failure using internet password Aug 30 23:32:56 galaxy event: galaxy/lswi: smtp: dp-gw-preprod.amazon@uni-potsdam.de [212.70.149.83] authentication failure using internet password Aug 30 23:33:24 galaxy event: galaxy/lswi: smtp: dp-gw-na.amazon@uni-potsdam.de [212.70.149.83] authentication failure using internet password Aug 30 23:33:52 galaxy event: galaxy/lswi: smtp: downloader.disk@uni-potsdam.de [212.70.149.83] authentication failure using internet password ... |
2020-08-31 05:37:25 |
| 157.34.86.65 | attack | 445/tcp [2020-08-30]1pkt |
2020-08-31 05:30:59 |
| 45.142.120.93 | attack | 2020-08-30T15:39:39.203102linuxbox-skyline auth[42041]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=respaldo rhost=45.142.120.93 ... |
2020-08-31 05:42:42 |
| 112.230.197.34 | attack | 112.230.197.34 (CN/China/-), 3 distributed sshd attacks on account [pi] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Aug 30 16:37:04 internal2 sshd[27547]: Invalid user pi from 112.230.197.34 port 41672 Aug 30 16:12:16 internal2 sshd[8741]: Invalid user pi from 90.186.4.59 port 54660 Aug 30 16:12:16 internal2 sshd[8742]: Invalid user pi from 90.186.4.59 port 54664 IP Addresses Blocked: |
2020-08-31 05:34:14 |
| 221.147.139.227 | attackbotsspam | 29191/tcp [2020-08-30]1pkt |
2020-08-31 05:14:47 |
| 193.142.59.71 | attackspambots | (smtpauth) Failed SMTP AUTH login from 193.142.59.71 (NL/Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2020-08-30 17:34:42 dovecot_login authenticator failed for (NyFjjmvvd) [193.142.59.71]:64579: 535 Incorrect authentication data (set_id=pmvgaucha) 2020-08-30 17:35:15 dovecot_login authenticator failed for (NMpM3M) [193.142.59.71]:52834: 535 Incorrect authentication data (set_id=pmvgaucha) 2020-08-30 17:35:48 dovecot_login authenticator failed for (E2mlRhS) [193.142.59.71]:64272: 535 Incorrect authentication data (set_id=pmvgaucha) 2020-08-30 17:36:21 dovecot_login authenticator failed for (VnW0Zg) [193.142.59.71]:60405: 535 Incorrect authentication data (set_id=pmvgaucha) 2020-08-30 17:36:55 dovecot_login authenticator failed for (MdBi3q) [193.142.59.71]:61114: 535 Incorrect authentication data (set_id=pmvgaucha) |
2020-08-31 05:41:04 |
| 112.85.42.200 | attackspambots | Honeypot hit. |
2020-08-31 05:14:24 |