54.93.35.219 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: A100 ROW GmbH

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Unsolicited bulk porn & phishing - varying ISPs (primarily Chinanet); repetitive redirects from blacklisted IP 92.63.192.124 & .151; spam volume up to 15/day. Spam link 4-gkb.ru = 92.63.192.151 NVFOPServer-net (previous IP 92.63.192.124) - repetitive redirects: - www.benaughty.com = 2.17.43.33, 2.17.43.17 Akamai - walkondates.com = 52.57.168.236, 52.58.193.171 Amazon - retargetcore.com = 52.29.68.89, 35.158.186.87 Amazon - t.insigit.com = 52.28.205.175, 54.93.35.219 Amazon - uf.noclef.com = 3.121.133.104, 52.59.105.243 Amazon Unsolicited bulk spam - unimplemented.likethin.eu, China Mobile Communications Corporation - 120.208.209.206 Sender domain harmsenheftrucks.nl = 136.144.206.196 TransIP BV	2019-10-12 22:25:34

Type

Details

Datetime

attackbots

Unsolicited bulk porn & phishing - varying ISPs (primarily Chinanet); repetitive redirects from blacklisted IP 92.63.192.124 & .151; spam volume up to 15/day.  

Spam link 4-gkb.ru = 92.63.192.151 NVFOPServer-net (previous IP 92.63.192.124) - repetitive redirects:
-	www.benaughty.com = 2.17.43.33, 2.17.43.17 Akamai
-	walkondates.com = 52.57.168.236, 52.58.193.171 Amazon
-	retargetcore.com = 52.29.68.89, 35.158.186.87 Amazon
-	t.insigit.com = 52.28.205.175, 54.93.35.219 Amazon
-	uf.noclef.com = 3.121.133.104, 52.59.105.243 Amazon

Unsolicited bulk spam - unimplemented.likethin.eu, China Mobile Communications Corporation - 120.208.209.206

Sender domain harmsenheftrucks.nl = 136.144.206.196 TransIP BV

2019-10-12 22:25:34

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.93.35.219
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60338
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;54.93.35.219.			IN	A

;; AUTHORITY SECTION:
.			336	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101200 1800 900 604800 86400

;; Query time: 359 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 12 22:25:28 CST 2019
;; MSG SIZE  rcvd: 116

Host info

219.35.93.54.in-addr.arpa domain name pointer ec2-54-93-35-219.eu-central-1.compute.amazonaws.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
219.35.93.54.in-addr.arpa	name = ec2-54-93-35-219.eu-central-1.compute.amazonaws.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
197.50.26.248	attackspambots	Automatic report - Port Scan Attack	2020-02-16 07:45:43
115.84.76.5	attackbots	Feb 16 00:31:10 andromeda sshd\[50485\]: Invalid user admin from 115.84.76.5 port 22792 Feb 16 00:31:10 andromeda sshd\[50485\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.84.76.5 Feb 16 00:31:11 andromeda sshd\[50485\]: Failed password for invalid user admin from 115.84.76.5 port 22792 ssh2	2020-02-16 07:32:45
142.4.207.155	attack	$f2bV_matches	2020-02-16 07:56:08
59.92.54.157	attackbotsspam	Automatic report - Port Scan Attack	2020-02-16 07:36:59
121.241.244.92	attackbotsspam	Feb 16 00:47:24 sd-53420 sshd\[26847\]: Invalid user git from 121.241.244.92 Feb 16 00:47:24 sd-53420 sshd\[26847\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.241.244.92 Feb 16 00:47:26 sd-53420 sshd\[26847\]: Failed password for invalid user git from 121.241.244.92 port 33647 ssh2 Feb 16 00:49:40 sd-53420 sshd\[27099\]: User root from 121.241.244.92 not allowed because none of user's groups are listed in AllowGroups Feb 16 00:49:40 sd-53420 sshd\[27099\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.241.244.92 user=root ...	2020-02-16 07:51:57
180.76.246.149	attackspam	Feb 12 23:06:40 pi sshd[17501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.246.149 user=root Feb 12 23:06:42 pi sshd[17501]: Failed password for invalid user root from 180.76.246.149 port 41722 ssh2	2020-02-16 07:30:50
112.26.7.145	attackbots	Brute force attempt	2020-02-16 07:53:07
109.100.38.48	attackspam	Automatic report - Banned IP Access	2020-02-16 07:19:30
201.182.223.59	attack	Feb 16 00:05:45 plex sshd[30395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.182.223.59 user=root Feb 16 00:05:47 plex sshd[30395]: Failed password for root from 201.182.223.59 port 44215 ssh2	2020-02-16 07:19:02
180.124.195.95	attack	Feb 15 23:19:31 grey postfix/smtpd\[29314\]: NOQUEUE: reject: RCPT from unknown\[180.124.195.95\]: 554 5.7.1 Service unavailable\; Client host \[180.124.195.95\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[180.124.195.95\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-16 07:44:03
119.252.143.68	attack	Feb 16 00:20:14 [host] sshd[25488]: Invalid user m Feb 16 00:20:14 [host] sshd[25488]: pam_unix(sshd: Feb 16 00:20:16 [host] sshd[25488]: Failed passwor	2020-02-16 07:36:25
14.231.22.166	attack	Unauthorized connection attempt detected from IP address 14.231.22.166 to port 445	2020-02-16 07:29:46
81.183.222.4	attackbotsspam	SSH invalid-user multiple login try	2020-02-16 07:23:36
81.22.132.99	attack	Unauthorised access (Feb 16) SRC=81.22.132.99 LEN=40 TTL=56 ID=30253 TCP DPT=23 WINDOW=35273 SYN	2020-02-16 07:19:53
93.79.133.208	attackbots	firewall-block, port(s): 8080/tcp	2020-02-16 07:17:38

Recently Reported IPs

11.96.58.111	142.93.211.227	38.169.42.15	230.213.225.63
162.16.192.18	33.44.181.241	167.135.98.195	50.57.231.9
42.235.128.23	53.216.230.249	252.25.134.151	99.5.84.240
159.185.40.119	132.133.121.91	136.239.88.194	59.245.97.178
156.221.0.186	118.37.194.40	2401:78c0::7004	95.80.252.189