City: Ashburn
Region: Virginia
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.89.46.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11841
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;54.89.46.239. IN A
;; AUTHORITY SECTION:
. 413 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020080301 1800 900 604800 86400
;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Aug 04 11:15:40 CST 2020
;; MSG SIZE rcvd: 116239.46.89.54.in-addr.arpa domain name pointer ec2-54-89-46-239.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
239.46.89.54.in-addr.arpa name = ec2-54-89-46-239.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 139.99.40.44 | attack | Invalid user server from 139.99.40.44 port 39946 |
2020-06-13 14:12:53 |
| 157.245.159.126 | attack | 17460/tcp 14986/tcp 32365/tcp... [2020-04-13/06-12]167pkt,58pt.(tcp) |
2020-06-13 13:55:40 |
| 114.231.45.32 | attackbots | Jun 13 06:08:52 lnxmail61 postfix/smtpd[9029]: warning: unknown[114.231.45.32]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 13 06:08:54 lnxmail61 postfix/smtpd[9029]: lost connection after AUTH from unknown[114.231.45.32] Jun 13 06:09:13 lnxmail61 postfix/smtpd[9029]: warning: unknown[114.231.45.32]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 13 06:09:15 lnxmail61 postfix/smtpd[9029]: lost connection after AUTH from unknown[114.231.45.32] Jun 13 06:09:47 lnxmail61 postfix/smtpd[13632]: warning: unknown[114.231.45.32]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-06-13 14:22:35 |
| 104.174.61.206 | attackbots | Jun 12 18:21:03 sachi sshd\[24659\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpe-104-174-61-206.socal.res.rr.com user=root Jun 12 18:21:05 sachi sshd\[24659\]: Failed password for root from 104.174.61.206 port 47248 ssh2 Jun 12 18:26:58 sachi sshd\[25085\]: Invalid user ea from 104.174.61.206 Jun 12 18:26:58 sachi sshd\[25085\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpe-104-174-61-206.socal.res.rr.com Jun 12 18:27:00 sachi sshd\[25085\]: Failed password for invalid user ea from 104.174.61.206 port 48166 ssh2 |
2020-06-13 14:19:36 |
| 46.38.145.254 | attackbotsspam | Jun 13 08:15:42 ncomp postfix/smtpd[5580]: warning: unknown[46.38.145.254]: SASL LOGIN authentication failed: VXNlcm5hbWU6 Jun 13 08:17:31 ncomp postfix/smtpd[5580]: warning: unknown[46.38.145.254]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jun 13 08:19:12 ncomp postfix/smtpd[5580]: warning: unknown[46.38.145.254]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-06-13 14:21:44 |
| 221.249.140.17 | attack | Jun 13 07:47:27 server sshd[31950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.249.140.17 Jun 13 07:47:30 server sshd[31950]: Failed password for invalid user test from 221.249.140.17 port 48636 ssh2 Jun 13 07:52:21 server sshd[32416]: Failed password for root from 221.249.140.17 port 49772 ssh2 ... |
2020-06-13 14:23:39 |
| 106.52.236.23 | attack | 2020-06-13T04:08:43.315615shield sshd\[32336\]: Invalid user edwin from 106.52.236.23 port 35132 2020-06-13T04:08:43.319453shield sshd\[32336\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.236.23 2020-06-13T04:08:45.922632shield sshd\[32336\]: Failed password for invalid user edwin from 106.52.236.23 port 35132 ssh2 2020-06-13T04:10:01.294399shield sshd\[397\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.236.23 user=root 2020-06-13T04:10:03.937953shield sshd\[397\]: Failed password for root from 106.52.236.23 port 48744 ssh2 |
2020-06-13 14:04:15 |
| 112.85.42.176 | attackspam | Jun 13 08:29:06 vps sshd[239042]: Failed password for root from 112.85.42.176 port 48871 ssh2 Jun 13 08:29:09 vps sshd[239042]: Failed password for root from 112.85.42.176 port 48871 ssh2 Jun 13 08:29:12 vps sshd[239042]: Failed password for root from 112.85.42.176 port 48871 ssh2 Jun 13 08:29:16 vps sshd[239042]: Failed password for root from 112.85.42.176 port 48871 ssh2 Jun 13 08:29:20 vps sshd[239042]: Failed password for root from 112.85.42.176 port 48871 ssh2 ... |
2020-06-13 14:29:33 |
| 222.186.30.218 | attack | Jun 12 20:06:08 kapalua sshd\[5319\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.218 user=root Jun 12 20:06:10 kapalua sshd\[5319\]: Failed password for root from 222.186.30.218 port 62251 ssh2 Jun 12 20:06:13 kapalua sshd\[5319\]: Failed password for root from 222.186.30.218 port 62251 ssh2 Jun 12 20:06:16 kapalua sshd\[5319\]: Failed password for root from 222.186.30.218 port 62251 ssh2 Jun 12 20:06:18 kapalua sshd\[5340\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.218 user=root |
2020-06-13 14:07:08 |
| 103.104.127.6 | attack | 1592021391 - 06/13/2020 06:09:51 Host: 103.104.127.6/103.104.127.6 Port: 445 TCP Blocked |
2020-06-13 14:18:53 |
| 142.44.242.68 | attackbotsspam | SSH Brute-Force attacks |
2020-06-13 14:12:21 |
| 114.4.79.148 | attackbotsspam | 20/6/13@00:10:07: FAIL: Alarm-Network address from=114.4.79.148 20/6/13@00:10:08: FAIL: Alarm-Network address from=114.4.79.148 ... |
2020-06-13 13:58:21 |
| 222.186.30.35 | attackspam | Jun 13 02:03:40 NPSTNNYC01T sshd[2057]: Failed password for root from 222.186.30.35 port 51058 ssh2 Jun 13 02:03:50 NPSTNNYC01T sshd[2063]: Failed password for root from 222.186.30.35 port 32019 ssh2 ... |
2020-06-13 14:10:08 |
| 14.63.162.98 | attackbots | Jun 12 19:50:05 hpm sshd\[7812\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.162.98 user=root Jun 12 19:50:08 hpm sshd\[7812\]: Failed password for root from 14.63.162.98 port 37693 ssh2 Jun 12 19:53:28 hpm sshd\[8151\]: Invalid user xujiayu from 14.63.162.98 Jun 12 19:53:28 hpm sshd\[8151\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.162.98 Jun 12 19:53:30 hpm sshd\[8151\]: Failed password for invalid user xujiayu from 14.63.162.98 port 33797 ssh2 |
2020-06-13 14:11:55 |
| 106.12.180.166 | attackspambots | Jun 13 06:39:51 [host] sshd[21001]: pam_unix(sshd: Jun 13 06:39:53 [host] sshd[21001]: Failed passwor Jun 13 06:42:03 [host] sshd[21026]: Invalid user d |
2020-06-13 13:50:29 |