城市(city): Ashburn
省份(region): Virginia
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 44.192.0.0 - 44.255.255.255
CIDR: 44.192.0.0/10
NetName: AMAZO-4
NetHandle: NET-44-192-0-0-1
Parent: NET44 (NET-44-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon.com, Inc. (AMAZO-4)
RegDate: 2019-07-18
Updated: 2019-07-18
Ref: https://rdap.arin.net/registry/ip/44.192.0.0
OrgName: Amazon.com, Inc.
OrgId: AMAZO-4
Address: Amazon Web Services, Inc.
Address: P.O. Box 81226
City: Seattle
StateProv: WA
PostalCode: 98108-1226
Country: US
RegDate: 2005-09-29
Updated: 2022-09-30
Comment: For details of this service please see
Comment: http://ec2.amazonaws.com
Ref: https://rdap.arin.net/registry/entity/AMAZO-4
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
# end
# start
NetRange: 44.192.0.0 - 44.223.255.255
CIDR: 44.192.0.0/11
NetName: AMAZON-IAD
NetHandle: NET-44-192-0-0-2
Parent: AMAZO-4 (NET-44-192-0-0-1)
NetType: Reallocated
OriginAS:
Organization: Amazon Data Services Northern Virginia (ADSN-1)
RegDate: 2019-08-01
Updated: 2019-08-01
Ref: https://rdap.arin.net/registry/ip/44.192.0.0
OrgName: Amazon Data Services Northern Virginia
OrgId: ADSN-1
Address: 13200 Woodland Park Road
City: Herndon
StateProv: VA
PostalCode: 20171
Country: US
RegDate: 2018-04-25
Updated: 2025-08-14
Ref: https://rdap.arin.net/registry/entity/ADSN-1
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 44.204.27.243
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46462
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;44.204.27.243. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025110501 1800 900 604800 86400
;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 06 05:00:29 CST 2025
;; MSG SIZE rcvd: 106243.27.204.44.in-addr.arpa domain name pointer ec2-44-204-27-243.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
243.27.204.44.in-addr.arpa name = ec2-44-204-27-243.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 106.13.56.72 | attackbotsspam | 2019-09-01T18:39:30.647139abusebot-4.cloudsearch.cf sshd\[1776\]: Invalid user robin from 106.13.56.72 port 55224 |
2019-09-02 03:00:12 |
| 222.180.199.138 | attackspam | Sep 1 20:43:51 dedicated sshd[10230]: Invalid user smhyun from 222.180.199.138 port 40918 |
2019-09-02 03:01:07 |
| 213.232.124.245 | attackbots | wp-login / xmlrpc attacks Firefox version 62.0 running on Linux Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0 |
2019-09-02 02:46:50 |
| 117.188.10.128 | attackbotsspam | Sep 1 21:42:34 tuotantolaitos sshd[13815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.188.10.128 Sep 1 21:42:36 tuotantolaitos sshd[13815]: Failed password for invalid user mx from 117.188.10.128 port 35878 ssh2 ... |
2019-09-02 02:48:16 |
| 140.143.45.22 | attackspambots | Sep 1 20:25:36 vps691689 sshd[23825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.45.22 Sep 1 20:25:38 vps691689 sshd[23825]: Failed password for invalid user loki from 140.143.45.22 port 58494 ssh2 ... |
2019-09-02 03:05:19 |
| 187.87.38.118 | attackbots | 2019-09-01T18:45:18.747401abusebot-2.cloudsearch.cf sshd\[22368\]: Invalid user marko from 187.87.38.118 port 40791 |
2019-09-02 03:08:48 |
| 165.22.125.61 | attackspam | Sep 1 20:23:12 vps647732 sshd[20179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.125.61 Sep 1 20:23:14 vps647732 sshd[20179]: Failed password for invalid user rock from 165.22.125.61 port 47628 ssh2 ... |
2019-09-02 02:43:24 |
| 162.243.165.39 | attackspambots | Sep 1 20:49:37 meumeu sshd[8684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.165.39 Sep 1 20:49:39 meumeu sshd[8684]: Failed password for invalid user kaiser from 162.243.165.39 port 57788 ssh2 Sep 1 20:53:24 meumeu sshd[9219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.165.39 ... |
2019-09-02 02:54:05 |
| 188.12.157.131 | attackspambots | Caught in portsentry honeypot |
2019-09-02 03:04:32 |
| 221.226.28.244 | attack | Sep 1 18:43:19 game-panel sshd[10302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.226.28.244 Sep 1 18:43:22 game-panel sshd[10302]: Failed password for invalid user diddy from 221.226.28.244 port 5959 ssh2 Sep 1 18:47:37 game-panel sshd[10459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.226.28.244 |
2019-09-02 03:01:30 |
| 51.75.25.164 | attackspambots | Sep 1 08:34:10 tdfoods sshd\[24234\]: Invalid user sandoze from 51.75.25.164 Sep 1 08:34:10 tdfoods sshd\[24234\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.ip-51-75-25.eu Sep 1 08:34:12 tdfoods sshd\[24234\]: Failed password for invalid user sandoze from 51.75.25.164 port 40346 ssh2 Sep 1 08:38:02 tdfoods sshd\[24566\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.ip-51-75-25.eu user=mysql Sep 1 08:38:04 tdfoods sshd\[24566\]: Failed password for mysql from 51.75.25.164 port 56172 ssh2 |
2019-09-02 02:40:03 |
| 222.186.15.110 | attackspam | Sep 1 21:16:08 [host] sshd[9492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.110 user=root Sep 1 21:16:10 [host] sshd[9492]: Failed password for root from 222.186.15.110 port 47033 ssh2 Sep 1 21:16:17 [host] sshd[9494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.110 user=root |
2019-09-02 03:17:05 |
| 122.158.229.134 | attack | Unauthorised access (Sep 1) SRC=122.158.229.134 LEN=40 TTL=49 ID=37971 TCP DPT=8080 WINDOW=61004 SYN Unauthorised access (Aug 30) SRC=122.158.229.134 LEN=40 TTL=49 ID=225 TCP DPT=8080 WINDOW=4843 SYN Unauthorised access (Aug 30) SRC=122.158.229.134 LEN=40 TTL=49 ID=2585 TCP DPT=8080 WINDOW=4843 SYN |
2019-09-02 02:54:56 |
| 36.92.95.10 | attack | Sep 1 20:03:56 mail sshd[11438]: Invalid user inma from 36.92.95.10 Sep 1 20:03:56 mail sshd[11438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.92.95.10 Sep 1 20:03:56 mail sshd[11438]: Invalid user inma from 36.92.95.10 Sep 1 20:03:59 mail sshd[11438]: Failed password for invalid user inma from 36.92.95.10 port 40048 ssh2 Sep 1 20:29:59 mail sshd[14582]: Invalid user wagner from 36.92.95.10 ... |
2019-09-02 02:42:57 |
| 51.91.37.197 | attack | Sep 1 08:19:29 auw2 sshd\[15780\]: Invalid user princess from 51.91.37.197 Sep 1 08:19:29 auw2 sshd\[15780\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip197.ip-51-91-37.eu Sep 1 08:19:31 auw2 sshd\[15780\]: Failed password for invalid user princess from 51.91.37.197 port 39630 ssh2 Sep 1 08:23:23 auw2 sshd\[16140\]: Invalid user mj from 51.91.37.197 Sep 1 08:23:23 auw2 sshd\[16140\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip197.ip-51-91-37.eu |
2019-09-02 02:41:55 |