52.90.132.195 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Amazon Technologies Inc.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Aug 23 17:52:58 nexus sshd[15442]: Invalid user norma from 52.90.132.195 port 60860 Aug 23 17:52:58 nexus sshd[15442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.90.132.195 Aug 23 17:53:00 nexus sshd[15442]: Failed password for invalid user norma from 52.90.132.195 port 60860 ssh2 Aug 23 17:53:00 nexus sshd[15442]: Received disconnect from 52.90.132.195 port 60860:11: Bye Bye [preauth] Aug 23 17:53:00 nexus sshd[15442]: Disconnected from 52.90.132.195 port 60860 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=52.90.132.195	2019-08-24 07:33:29

类型

评论内容

时间

attackspambots

Aug 23 17:52:58 nexus sshd[15442]: Invalid user norma from 52.90.132.195 port 60860
Aug 23 17:52:58 nexus sshd[15442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.90.132.195
Aug 23 17:53:00 nexus sshd[15442]: Failed password for invalid user norma from 52.90.132.195 port 60860 ssh2
Aug 23 17:53:00 nexus sshd[15442]: Received disconnect from 52.90.132.195 port 60860:11: Bye Bye [preauth]
Aug 23 17:53:00 nexus sshd[15442]: Disconnected from 52.90.132.195 port 60860 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=52.90.132.195

2019-08-24 07:33:29

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.90.132.195
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4691
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.90.132.195.			IN	A

;; AUTHORITY SECTION:
.			2836	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082301 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 24 07:33:24 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

195.132.90.52.in-addr.arpa domain name pointer ec2-52-90-132-195.compute-1.amazonaws.com.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
195.132.90.52.in-addr.arpa	name = ec2-52-90-132-195.compute-1.amazonaws.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
13.66.217.166	attack	Sep 25 06:55:40 cdc sshd[939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.66.217.166 user=root Sep 25 06:55:43 cdc sshd[939]: Failed password for invalid user root from 13.66.217.166 port 31160 ssh2	2020-09-25 14:09:26
61.231.18.238	attack	37215/tcp [2020-09-24]1pkt	2020-09-25 13:51:19
118.69.52.67	attackbotsspam	Unauthorised access (Sep 24) SRC=118.69.52.67 LEN=44 TOS=0x10 PREC=0x40 TTL=49 ID=6881 TCP DPT=23 WINDOW=39713 SYN	2020-09-25 14:22:12
123.233.191.57	attackspambots	23/tcp [2020-09-24]1pkt	2020-09-25 14:15:08
194.180.224.103	attackbotsspam	leo_www	2020-09-25 13:54:02
139.186.69.226	attack	"Unauthorized connection attempt on SSHD detected"	2020-09-25 13:44:36
67.205.162.223	attackspam	ET CINS Active Threat Intelligence Poor Reputation IP group 59 - port: 1916 proto: tcp cat: Misc Attackbytes: 60	2020-09-25 13:42:06
106.12.108.170	attackspambots	30395/tcp 23075/tcp 19587/tcp... [2020-07-30/09-25]11pkt,11pt.(tcp)	2020-09-25 13:46:59
114.34.18.124	attackbots	TCP (SYN) 114.34.18.124:31293 -> port 23, len 40	2020-09-25 14:22:50
187.210.27.2	attack	lfd: (smtpauth) Failed SMTP AUTH login from 187.210.27.2 (MX/Mexico/customer-187-210-27-2.uninet-ide.com.mx): 5 in the last 3600 secs - Wed Sep 5 12:58:19 2018	2020-09-25 13:48:58
106.53.2.176	attackbots	Sep 25 01:16:59 h2829583 sshd[30480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.2.176	2020-09-25 13:46:34
125.163.79.159	attackspam	Honeypot attack, port: 445, PTR: 159.subnet125-163-79.speedy.telkom.net.id.	2020-09-25 14:11:47
182.111.247.228	attack	email bruteforce	2020-09-25 14:00:23
54.38.156.28	attackbotsspam	Sep 25 04:43:59 l02a sshd[1042]: Invalid user student from 54.38.156.28 Sep 25 04:43:59 l02a sshd[1042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=vps-41b62bf2.vps.ovh.net Sep 25 04:43:59 l02a sshd[1042]: Invalid user student from 54.38.156.28 Sep 25 04:44:02 l02a sshd[1042]: Failed password for invalid user student from 54.38.156.28 port 50972 ssh2	2020-09-25 14:13:00
91.103.110.54	attackbotsspam	TCP (SYN) 91.103.110.54:52803 -> port 445, len 40	2020-09-25 13:36:12

最近上报的IP列表

17.75.210.174	2.201.112.151	88.73.78.167	80.235.61.91
93.99.25.219	14.135.120.64	174.138.31.237	95.130.12.33
113.237.167.220	23.100.125.65	223.237.14.77	186.224.186.146
117.218.31.215	200.44.254.34	175.157.49.17	212.190.175.40
4.32.231.17	98.249.181.117	117.121.97.95	188.27.186.65