Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Amazon Technologies Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
SSH authentication failure x 6 reported by Fail2Ban
...
2020-02-25 21:50:17
attackspam
(sshd) Failed SSH login from 54.89.78.142 (US/United States/ec2-54-89-78-142.compute-1.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Feb 25 00:01:30 elude sshd[6259]: Invalid user sftpuser from 54.89.78.142 port 34834
Feb 25 00:01:32 elude sshd[6259]: Failed password for invalid user sftpuser from 54.89.78.142 port 34834 ssh2
Feb 25 00:14:06 elude sshd[6952]: Invalid user riak from 54.89.78.142 port 13834
Feb 25 00:14:07 elude sshd[6952]: Failed password for invalid user riak from 54.89.78.142 port 13834 ssh2
Feb 25 00:23:07 elude sshd[7447]: Invalid user ut3 from 54.89.78.142 port 62044
2020-02-25 10:08:03
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.89.78.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42386
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;54.89.78.142.			IN	A

;; AUTHORITY SECTION:
.			530	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022401 1800 900 604800 86400

;; Query time: 93 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 25 10:07:58 CST 2020
;; MSG SIZE  rcvd: 116
Host info
142.78.89.54.in-addr.arpa domain name pointer ec2-54-89-78-142.compute-1.amazonaws.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
142.78.89.54.in-addr.arpa	name = ec2-54-89-78-142.compute-1.amazonaws.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
192.99.32.25 attackbotsspam
xmlrpc attack
2020-01-08 15:54:29
222.186.175.181 attackbotsspam
Jan  8 08:52:28 MK-Soft-Root1 sshd[31768]: Failed password for root from 222.186.175.181 port 38447 ssh2
Jan  8 08:52:32 MK-Soft-Root1 sshd[31768]: Failed password for root from 222.186.175.181 port 38447 ssh2
...
2020-01-08 16:02:22
211.60.78.195 attackspam
detected by Fail2Ban
2020-01-08 15:53:29
27.72.100.197 attackbotsspam
Unauthorized connection attempt detected from IP address 27.72.100.197 to port 445
2020-01-08 15:55:04
80.82.77.144 attack
ET DROP Dshield Block Listed Source group 1 - port: 34567 proto: TCP cat: Misc Attack
2020-01-08 16:08:50
5.196.87.174 attack
Automatic report - Banned IP Access
2020-01-08 15:50:44
222.120.53.8 attackbots
Unauthorized connection attempt detected from IP address 222.120.53.8 to port 2220 [J]
2020-01-08 15:53:12
125.164.181.2 attack
firewall-block, port(s): 445/tcp
2020-01-08 16:08:25
113.182.49.130 attack
1578459179 - 01/08/2020 05:52:59 Host: 113.182.49.130/113.182.49.130 Port: 445 TCP Blocked
2020-01-08 15:35:33
182.61.130.121 attackspam
Jan  8 08:20:04 legacy sshd[3187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.130.121
Jan  8 08:20:06 legacy sshd[3187]: Failed password for invalid user database2 from 182.61.130.121 port 35623 ssh2
Jan  8 08:23:56 legacy sshd[3369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.130.121
...
2020-01-08 15:58:42
117.4.105.219 attack
1578459139 - 01/08/2020 05:52:19 Host: 117.4.105.219/117.4.105.219 Port: 445 TCP Blocked
2020-01-08 15:56:51
187.207.177.139 attack
Jan  8 05:49:35 legacy sshd[26835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.207.177.139
Jan  8 05:49:37 legacy sshd[26835]: Failed password for invalid user tig3r from 187.207.177.139 port 47643 ssh2
Jan  8 05:52:53 legacy sshd[27065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.207.177.139
...
2020-01-08 15:39:46
182.16.168.67 attack
20/1/7@23:52:27: FAIL: Alarm-Network address from=182.16.168.67
20/1/7@23:52:27: FAIL: Alarm-Network address from=182.16.168.67
...
2020-01-08 15:49:41
201.222.80.45 attackspambots
Jan  8 07:18:22 ArkNodeAT sshd\[16175\]: Invalid user test from 201.222.80.45
Jan  8 07:18:22 ArkNodeAT sshd\[16175\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.222.80.45
Jan  8 07:18:24 ArkNodeAT sshd\[16175\]: Failed password for invalid user test from 201.222.80.45 port 1621 ssh2
2020-01-08 15:47:01
203.150.146.213 attackspam
Unauthorized connection attempt from IP address 203.150.146.213 on Port 445(SMB)
2020-01-08 15:39:21

Recently Reported IPs

18.240.126.166 192.19.195.87 104.251.72.55 180.188.16.60
111.139.137.166 112.14.148.104 165.22.113.14 160.85.92.13
110.247.151.15 132.180.123.55 62.224.86.211 209.112.201.155
104.168.174.226 116.241.88.124 64.191.133.238 200.178.173.130
183.81.57.229 208.102.4.45 119.29.16.190 113.110.54.226