城市(city): Ashburn
省份(region): Virginia
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#
NetRange: 18.32.0.0 - 18.255.255.255
CIDR: 18.64.0.0/10, 18.128.0.0/9, 18.32.0.0/11
NetName: AT-88-Z
NetHandle: NET-18-32-0-0-1
Parent: NET18 (NET-18-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon Technologies Inc. (AT-88-Z)
RegDate: 2019-10-07
Updated: 2021-02-10
Ref: https://rdap.arin.net/registry/ip/18.32.0.0
OrgName: Amazon Technologies Inc.
OrgId: AT-88-Z
Address: 410 Terry Ave N.
City: Seattle
StateProv: WA
PostalCode: 98109
Country: US
RegDate: 2011-12-08
Updated: 2024-01-24
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://rdap.arin.net/registry/entity/AT-88-Z
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 18.212.55.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6702
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;18.212.55.14. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025101501 1800 900 604800 86400
;; Query time: 280 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 16 12:31:51 CST 2025
;; MSG SIZE rcvd: 10514.55.212.18.in-addr.arpa domain name pointer ec2-18-212-55-14.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
14.55.212.18.in-addr.arpa name = ec2-18-212-55-14.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 112.170.27.139 | attack | Jul 12 01:55:37 server sshd[24150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.170.27.139 ... |
2019-07-12 15:32:58 |
| 92.222.92.114 | attackspambots | Jul 12 08:38:07 mail sshd\[8766\]: Invalid user xbmc from 92.222.92.114 port 48644 Jul 12 08:38:07 mail sshd\[8766\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.92.114 Jul 12 08:38:09 mail sshd\[8766\]: Failed password for invalid user xbmc from 92.222.92.114 port 48644 ssh2 Jul 12 08:43:05 mail sshd\[9559\]: Invalid user test from 92.222.92.114 port 50474 Jul 12 08:43:05 mail sshd\[9559\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.92.114 |
2019-07-12 15:01:06 |
| 5.196.88.110 | attackspambots | SSH authentication failure x 6 reported by Fail2Ban ... |
2019-07-12 15:18:46 |
| 91.134.240.73 | attackspambots | Jul 12 02:49:40 vps200512 sshd\[9142\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.240.73 user=root Jul 12 02:49:42 vps200512 sshd\[9142\]: Failed password for root from 91.134.240.73 port 47528 ssh2 Jul 12 02:54:30 vps200512 sshd\[9279\]: Invalid user minecraft from 91.134.240.73 Jul 12 02:54:30 vps200512 sshd\[9279\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.240.73 Jul 12 02:54:32 vps200512 sshd\[9279\]: Failed password for invalid user minecraft from 91.134.240.73 port 48402 ssh2 |
2019-07-12 15:08:15 |
| 113.87.44.245 | attack | Jul 12 06:44:04 MK-Soft-VM4 sshd\[21896\]: Invalid user design from 113.87.44.245 port 55674 Jul 12 06:44:04 MK-Soft-VM4 sshd\[21896\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.87.44.245 Jul 12 06:44:06 MK-Soft-VM4 sshd\[21896\]: Failed password for invalid user design from 113.87.44.245 port 55674 ssh2 ... |
2019-07-12 15:05:37 |
| 87.99.77.104 | attack | Jul 12 08:54:49 minden010 sshd[535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.99.77.104 Jul 12 08:54:51 minden010 sshd[535]: Failed password for invalid user uno50 from 87.99.77.104 port 52542 ssh2 Jul 12 09:00:10 minden010 sshd[2553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.99.77.104 ... |
2019-07-12 15:17:22 |
| 112.198.194.243 | attackspam | Jul 12 01:58:55 aat-srv002 sshd[3745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.198.194.243 Jul 12 01:58:57 aat-srv002 sshd[3745]: Failed password for invalid user www from 112.198.194.243 port 34251 ssh2 Jul 12 02:05:21 aat-srv002 sshd[3968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.198.194.243 Jul 12 02:05:23 aat-srv002 sshd[3968]: Failed password for invalid user tushar from 112.198.194.243 port 63386 ssh2 ... |
2019-07-12 15:27:56 |
| 112.85.42.178 | attackbotsspam | 2019-07-12T06:44:37.267678centos sshd\[10855\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.178 user=root 2019-07-12T06:44:39.388105centos sshd\[10855\]: Failed password for root from 112.85.42.178 port 60812 ssh2 2019-07-12T06:44:42.126630centos sshd\[10855\]: Failed password for root from 112.85.42.178 port 60812 ssh2 |
2019-07-12 14:40:31 |
| 85.93.88.54 | attackbots | 2019-07-12T12:39:17.923641enmeeting.mahidol.ac.th sshd\[31810\]: Invalid user administrador from 85.93.88.54 port 33458 2019-07-12T12:39:17.942849enmeeting.mahidol.ac.th sshd\[31810\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=malta2403.startdedicated.net 2019-07-12T12:39:20.406647enmeeting.mahidol.ac.th sshd\[31810\]: Failed password for invalid user administrador from 85.93.88.54 port 33458 ssh2 ... |
2019-07-12 14:46:06 |
| 104.236.239.60 | attack | Jul 12 06:53:42 dev0-dcde-rnet sshd[31073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.239.60 Jul 12 06:53:44 dev0-dcde-rnet sshd[31073]: Failed password for invalid user wolfgang from 104.236.239.60 port 60378 ssh2 Jul 12 06:58:52 dev0-dcde-rnet sshd[31155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.239.60 |
2019-07-12 14:51:19 |
| 14.63.118.249 | attack | Lines containing failures of 14.63.118.249 Jul 12 03:23:31 shared12 sshd[21533]: Bad protocol version identification '' from 14.63.118.249 port 57406 Jul 12 03:23:38 shared12 sshd[21534]: Invalid user osboxes from 14.63.118.249 port 58140 Jul 12 03:23:39 shared12 sshd[21534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.118.249 Jul 12 03:23:41 shared12 sshd[21534]: Failed password for invalid user osboxes from 14.63.118.249 port 58140 ssh2 Jul 12 03:23:42 shared12 sshd[21534]: Connection closed by invalid user osboxes 14.63.118.249 port 58140 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.63.118.249 |
2019-07-12 15:22:01 |
| 199.127.56.236 | attack | I don't know who this is but they keep stalking me and it's been for months now and I just wish it would stop. I don't like it because it makes me uncomfortable. |
2019-07-12 14:53:02 |
| 113.121.241.100 | attackspambots | 2019-07-12T01:56:11.435793mail01 postfix/smtpd[25264]: warning: unknown[113.121.241.100]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-07-12T01:56:18.349792mail01 postfix/smtpd[4414]: warning: unknown[113.121.241.100]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2019-07-12T01:56:29.305165mail01 postfix/smtpd[11248]: warning: unknown[113.121.241.100]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-07-12 15:10:29 |
| 31.182.57.162 | attackbotsspam | Jul 12 09:08:52 eventyay sshd[20133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.182.57.162 Jul 12 09:08:54 eventyay sshd[20133]: Failed password for invalid user git from 31.182.57.162 port 65029 ssh2 Jul 12 09:14:29 eventyay sshd[21663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.182.57.162 ... |
2019-07-12 15:20:40 |
| 190.128.230.14 | attack | Jul 12 08:37:25 mail sshd\[8686\]: Invalid user postgres from 190.128.230.14 port 54978 Jul 12 08:37:25 mail sshd\[8686\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.128.230.14 Jul 12 08:37:26 mail sshd\[8686\]: Failed password for invalid user postgres from 190.128.230.14 port 54978 ssh2 Jul 12 08:44:44 mail sshd\[9886\]: Invalid user www from 190.128.230.14 port 56825 Jul 12 08:44:44 mail sshd\[9886\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.128.230.14 |
2019-07-12 14:57:13 |