City: unknown
Region: unknown
Country: United States
Internet Service Provider: Amazon Technologies Inc.
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attack | Sending out Netflix spam from IP 54.240.14.174 (amazon.com / amazonaws.com) I have NEVER been a Netflix customer and never asked for this junk. The website spammed out is https://www.netflix.com/signup/creditoption?nftoken=BQAbAAEBEA77T6CHfer3tv8qolkSAduAkLFC%2FFYUyiUS4Sdi62TDOAptLP7WiMxUQK74rIuN%2BRXrWDnwU8vxCNSC2khWG0ZmflN2tsqMsqNHMDWRdKmlf6XFVqwlgd%2BFLY2Nz88IH4y3pcuOeFYD5X9L4G9ZZfbRHvrmZF%2FjsAyUI1f5mpTFg3eEFWfNQayYDiVrbb%2FU65EF%2B0XXrVI0T4jKa2zmCB8w5g%3D%3D&lnktrk=EMP&g=AEF2F71097E503EBEB44921E2720235C64526E40&lkid=URL_SIGNUP_CREDIT IPs: 54.69.16.110, 54.70.73.70, 54.149.101.155, 54.201.91.38, 54.213.182.74, 52.37.77.112, 52.41.20.47, 52.41.193.16 (amazon.com / amazonaws.com) amazon are pure scumbags who allow their customers to send out spam and do nothing about it! Report via email and website at https://support.aws.amazon.com/#/contacts/report-abuse |
2019-09-26 19:17:35 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.70.73.70
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57886
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;54.70.73.70. IN A
;; AUTHORITY SECTION:
. 475 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019092600 1800 900 604800 86400
;; Query time: 502 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 26 19:17:29 CST 2019
;; MSG SIZE rcvd: 11570.73.70.54.in-addr.arpa domain name pointer ec2-54-70-73-70.us-west-2.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
70.73.70.54.in-addr.arpa name = ec2-54-70-73-70.us-west-2.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 218.95.124.89 | attack | Unauthorized connection attempt from IP address 218.95.124.89 on Port 445(SMB) |
2019-11-11 08:50:53 |
| 187.92.175.52 | attackbotsspam | Spamassassin_187.92.175.52 |
2019-11-11 08:53:54 |
| 42.231.162.216 | attack | Spamassassin_42.231.162.216 |
2019-11-11 09:02:24 |
| 222.252.52.177 | attackspambots | Unauthorized connection attempt from IP address 222.252.52.177 on Port 445(SMB) |
2019-11-11 09:02:54 |
| 34.73.84.183 | attack | Automated report (2019-11-11T00:00:43+00:00). Misbehaving bot detected at this address. |
2019-11-11 08:29:26 |
| 148.70.22.185 | attack | Nov 11 01:24:18 vps01 sshd[11008]: Failed password for news from 148.70.22.185 port 62025 ssh2 |
2019-11-11 08:44:45 |
| 14.98.37.10 | attackspambots | Unauthorized connection attempt from IP address 14.98.37.10 on Port 445(SMB) |
2019-11-11 08:35:10 |
| 177.72.80.46 | attackspam | postfix |
2019-11-11 08:42:39 |
| 185.51.92.84 | attack | Spamassassin_185.51.92.84 |
2019-11-11 08:57:25 |
| 139.199.113.140 | attackbotsspam | Nov 11 01:28:22 OPSO sshd\[15037\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.140 user=root Nov 11 01:28:23 OPSO sshd\[15037\]: Failed password for root from 139.199.113.140 port 39492 ssh2 Nov 11 01:32:27 OPSO sshd\[15823\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.140 user=root Nov 11 01:32:30 OPSO sshd\[15823\]: Failed password for root from 139.199.113.140 port 46228 ssh2 Nov 11 01:36:41 OPSO sshd\[16751\]: Invalid user moncrief from 139.199.113.140 port 52982 Nov 11 01:36:41 OPSO sshd\[16751\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.140 |
2019-11-11 08:46:00 |
| 121.239.88.217 | attackbotsspam | SASL broute force |
2019-11-11 09:05:06 |
| 130.193.112.146 | attackspambots | Spamassassin_130.193.112.146 |
2019-11-11 08:57:39 |
| 106.13.97.37 | attackspambots | $f2bV_matches |
2019-11-11 08:32:14 |
| 123.207.140.248 | attackbotsspam | Nov 10 14:14:28 hpm sshd\[4066\]: Invalid user pgsql from 123.207.140.248 Nov 10 14:14:28 hpm sshd\[4066\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.140.248 Nov 10 14:14:30 hpm sshd\[4066\]: Failed password for invalid user pgsql from 123.207.140.248 port 43903 ssh2 Nov 10 14:19:13 hpm sshd\[4488\]: Invalid user carignan from 123.207.140.248 Nov 10 14:19:13 hpm sshd\[4488\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.140.248 |
2019-11-11 08:33:59 |
| 31.173.138.204 | attack | Spamassassin_31.173.138.204 |
2019-11-11 08:52:15 |