54.69.252.208 - IPInfo

Basic Info

City: Boardman

Region: Oregon

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
54.69.252.240	attack	11/04/2019-22:29:02.844805 54.69.252.240 Protocol: 6 SURICATA TLS invalid record/traffic	2019-11-05 05:39:03
54.69.252.240	attackspam	11/03/2019-22:05:08.596978 54.69.252.240 Protocol: 6 SURICATA TLS invalid record/traffic	2019-11-04 05:06:38
54.69.252.240	attack	11/02/2019-06:44:20.333146 54.69.252.240 Protocol: 6 SURICATA TLS invalid record/traffic	2019-11-02 14:21:36
54.69.252.240	attackbots	10/30/2019-06:08:01.939936 54.69.252.240 Protocol: 6 SURICATA TLS invalid record/traffic	2019-10-30 15:28:13

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.69.252.208
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3615
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;54.69.252.208.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025121300 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Dec 13 18:31:02 CST 2025
;; MSG SIZE  rcvd: 106

Host info

208.252.69.54.in-addr.arpa domain name pointer ec2-54-69-252-208.us-west-2.compute.amazonaws.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
208.252.69.54.in-addr.arpa	name = ec2-54-69-252-208.us-west-2.compute.amazonaws.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
104.211.205.186	attackspam	Oct 7 07:54:10 MK-Soft-VM3 sshd[15833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.211.205.186 Oct 7 07:54:12 MK-Soft-VM3 sshd[15833]: Failed password for invalid user Pa$$w0rd12345 from 104.211.205.186 port 46236 ssh2 ...	2019-10-07 14:05:32
82.223.24.191	attackspambots	Oct 7 07:59:24 MK-Soft-VM6 sshd[22483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.223.24.191 Oct 7 07:59:26 MK-Soft-VM6 sshd[22483]: Failed password for invalid user &*(uioJKL from 82.223.24.191 port 46610 ssh2 ...	2019-10-07 14:08:24
64.202.187.48	attack	Oct 7 10:44:42 lcl-usvr-01 sshd[24009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.202.187.48 user=root Oct 7 10:48:20 lcl-usvr-01 sshd[25206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.202.187.48 user=root Oct 7 10:51:59 lcl-usvr-01 sshd[26383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.202.187.48 user=root	2019-10-07 13:59:29
45.125.61.115	attackspam	Honeypot attack, port: 23, PTR: PTR record not found	2019-10-07 13:43:45
111.231.132.94	attack	Oct 6 19:36:40 kapalua sshd\[15779\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.132.94 user=root Oct 6 19:36:42 kapalua sshd\[15779\]: Failed password for root from 111.231.132.94 port 42796 ssh2 Oct 6 19:41:22 kapalua sshd\[16293\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.132.94 user=root Oct 6 19:41:24 kapalua sshd\[16293\]: Failed password for root from 111.231.132.94 port 51446 ssh2 Oct 6 19:46:00 kapalua sshd\[16715\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.132.94 user=root	2019-10-07 14:03:55
153.36.242.143	attackbots	2019-10-07T05:52:13.980323abusebot.cloudsearch.cf sshd\[1209\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.242.143 user=root	2019-10-07 13:55:46
185.211.245.170	attack	IP: 185.211.245.170 ASN: AS202984 Chernyshov Aleksandr Aleksandrovich Port: Message Submission 587 Found in one or more Blacklists Date: 7/10/2019 5:41:59 AM UTC	2019-10-07 13:46:00
112.86.147.182	attackspam	Oct 7 06:52:18 www sshd\[45784\]: Invalid user Qwerty!@\# from 112.86.147.182 Oct 7 06:52:18 www sshd\[45784\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.86.147.182 Oct 7 06:52:20 www sshd\[45784\]: Failed password for invalid user Qwerty!@\# from 112.86.147.182 port 40376 ssh2 ...	2019-10-07 13:45:07
180.129.127.80	attackspambots	DATE:2019-10-07 05:52:28, IP:180.129.127.80, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)	2019-10-07 13:41:50
200.13.195.70	attackspam	2019-10-07T06:38:34.267012tmaserv sshd\[30194\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.13.195.70 user=root 2019-10-07T06:38:36.394980tmaserv sshd\[30194\]: Failed password for root from 200.13.195.70 port 43796 ssh2 2019-10-07T06:45:55.450603tmaserv sshd\[30498\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.13.195.70 user=root 2019-10-07T06:45:57.453974tmaserv sshd\[30498\]: Failed password for root from 200.13.195.70 port 43654 ssh2 2019-10-07T06:50:06.650016tmaserv sshd\[30716\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.13.195.70 user=root 2019-10-07T06:50:08.773976tmaserv sshd\[30716\]: Failed password for root from 200.13.195.70 port 54600 ssh2 ...	2019-10-07 14:12:37
159.65.4.86	attackbots	Oct 7 07:05:23 www1 sshd\[63256\]: Invalid user 123Qwerty from 159.65.4.86Oct 7 07:05:25 www1 sshd\[63256\]: Failed password for invalid user 123Qwerty from 159.65.4.86 port 48252 ssh2Oct 7 07:09:51 www1 sshd\[63620\]: Invalid user Purple@2017 from 159.65.4.86Oct 7 07:09:53 www1 sshd\[63620\]: Failed password for invalid user Purple@2017 from 159.65.4.86 port 58856 ssh2Oct 7 07:14:11 www1 sshd\[64120\]: Invalid user Isabel@321 from 159.65.4.86Oct 7 07:14:13 www1 sshd\[64120\]: Failed password for invalid user Isabel@321 from 159.65.4.86 port 41238 ssh2 ...	2019-10-07 13:47:16
159.65.144.233	attackbotsspam	Oct 7 06:51:51 www5 sshd\[43404\]: Invalid user butter from 159.65.144.233 Oct 7 06:51:51 www5 sshd\[43404\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.144.233 Oct 7 06:51:53 www5 sshd\[43404\]: Failed password for invalid user butter from 159.65.144.233 port 34485 ssh2 ...	2019-10-07 13:59:08
110.137.178.27	attackspambots	" "	2019-10-07 14:01:38
77.247.110.17	attackspambots	\[2019-10-07 01:03:20\] NOTICE\[1887\] chan_sip.c: Registration from '"1108" \' failed for '77.247.110.17:5301' - Wrong password \[2019-10-07 01:03:20\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-07T01:03:20.772-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1108",SessionID="0x7fc3ac5ddd88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.17/5301",Challenge="0ae1f25f",ReceivedChallenge="0ae1f25f",ReceivedHash="3acac39ac494001346f71777c380a1ed" \[2019-10-07 01:03:20\] NOTICE\[1887\] chan_sip.c: Registration from '"1108" \' failed for '77.247.110.17:5301' - Wrong password \[2019-10-07 01:03:20\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-07T01:03:20.884-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1108",SessionID="0x7fc3ac428948",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UD	2019-10-07 13:41:21
115.238.236.74	attack	Oct 6 19:50:17 sachi sshd\[4680\]: Invalid user Puzzle123 from 115.238.236.74 Oct 6 19:50:17 sachi sshd\[4680\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74 Oct 6 19:50:19 sachi sshd\[4680\]: Failed password for invalid user Puzzle123 from 115.238.236.74 port 35723 ssh2 Oct 6 19:55:21 sachi sshd\[5075\]: Invalid user 123California from 115.238.236.74 Oct 6 19:55:21 sachi sshd\[5075\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74	2019-10-07 14:01:14

Recently Reported IPs

74.7.242.56	47.242.39.51	165.154.201.189	157.230.174.77
45.170.249.237	44.221.70.185	11.154.43.160	163.227.181.42
192.3.138.26	14.48.162.252	159.223.193.66	39.191.209.30
205.210.31.76	130.131.162.82	107.173.157.131	100.26.253.63
47.92.221.75	39.98.49.253	49.192.97.6	112.248.101.152