城市(city): Ashburn
省份(region): Virginia
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 54.144.0.0 - 54.221.255.255
CIDR: 54.208.0.0/13, 54.216.0.0/14, 54.144.0.0/12, 54.192.0.0/12, 54.160.0.0/11, 54.220.0.0/15
NetName: AMAZON
NetHandle: NET-54-144-0-0-1
Parent: NET54 (NET-54-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon Technologies Inc. (AT-88-Z)
RegDate: 2014-10-23
Updated: 2021-02-10
Ref: https://rdap.arin.net/registry/ip/54.144.0.0
OrgName: Amazon Technologies Inc.
OrgId: AT-88-Z
Address: 410 Terry Ave N.
City: Seattle
StateProv: WA
PostalCode: 98109
Country: US
RegDate: 2011-12-08
Updated: 2026-04-17
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://rdap.arin.net/registry/entity/AT-88-Z
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgDNSHandle: DNS1131-ARIN
OrgDNSName: DNS
OrgDNSPhone: +1-202-555-0000
OrgDNSEmail: ipmanagement+dns@amazon.com
OrgDNSRef: https://rdap.arin.net/registry/entity/DNS1131-ARIN
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
# end
# start
NetRange: 54.144.0.0 - 54.147.255.255
CIDR: 54.144.0.0/14
NetName: AMAZON-IAD
NetHandle: NET-54-144-0-0-2
Parent: AMAZON (NET-54-144-0-0-1)
NetType: Reallocated
OriginAS:
Organization: Amazon Data Services Northern Virginia (ADSN-1)
RegDate: 2018-07-20
Updated: 2018-07-20
Ref: https://rdap.arin.net/registry/ip/54.144.0.0
OrgName: Amazon Data Services Northern Virginia
OrgId: ADSN-1
Address: 13200 Woodland Park Road
City: Herndon
StateProv: VA
PostalCode: 20171
Country: US
RegDate: 2018-04-25
Updated: 2025-08-14
Ref: https://rdap.arin.net/registry/entity/ADSN-1
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.146.183.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30411
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;54.146.183.54. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026051401 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri May 15 05:00:30 CST 2026
;; MSG SIZE rcvd: 10654.183.146.54.in-addr.arpa domain name pointer ec2-54-146-183-54.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
54.183.146.54.in-addr.arpa name = ec2-54-146-183-54.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 82.223.197.152 | attack | Dec 15 16:53:51 ncomp sshd[7603]: Invalid user ubuntu from 82.223.197.152 Dec 15 16:53:51 ncomp sshd[7603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.223.197.152 Dec 15 16:53:51 ncomp sshd[7603]: Invalid user ubuntu from 82.223.197.152 Dec 15 16:53:54 ncomp sshd[7603]: Failed password for invalid user ubuntu from 82.223.197.152 port 33450 ssh2 |
2019-12-15 23:43:16 |
| 175.140.23.248 | attackspambots | Dec 15 16:01:09 thevastnessof sshd[2166]: Failed password for mail from 175.140.23.248 port 24957 ssh2 ... |
2019-12-16 00:02:30 |
| 213.173.109.249 | attack | Lines containing failures of 213.173.109.249 Dec 15 15:59:31 kmh-vmh-002-fsn07 sshd[10923]: Invalid user werdenberg from 213.173.109.249 port 54710 Dec 15 15:59:31 kmh-vmh-002-fsn07 sshd[10923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.173.109.249 Dec 15 15:59:33 kmh-vmh-002-fsn07 sshd[10923]: Failed password for invalid user werdenberg from 213.173.109.249 port 54710 ssh2 Dec 15 15:59:33 kmh-vmh-002-fsn07 sshd[10923]: Received disconnect from 213.173.109.249 port 54710:11: Bye Bye [preauth] Dec 15 15:59:33 kmh-vmh-002-fsn07 sshd[10923]: Disconnected from invalid user werdenberg 213.173.109.249 port 54710 [preauth] Dec 15 16:06:12 kmh-vmh-002-fsn07 sshd[20991]: Invalid user bkupexec from 213.173.109.249 port 49684 Dec 15 16:06:12 kmh-vmh-002-fsn07 sshd[20991]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.173.109.249 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html |
2019-12-15 23:36:03 |
| 78.178.8.152 | attack | Dec 15 17:53:09 debian-2gb-vpn-nbg1-1 kernel: [799960.857677] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=78.178.8.152 DST=78.46.192.101 LEN=52 TOS=0x00 PREC=0x00 TTL=113 ID=29896 DF PROTO=TCP SPT=38234 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 |
2019-12-16 00:17:53 |
| 42.114.242.79 | attackspambots | 1576421603 - 12/15/2019 15:53:23 Host: 42.114.242.79/42.114.242.79 Port: 445 TCP Blocked |
2019-12-16 00:09:08 |
| 103.193.174.234 | attackspam | Dec 15 16:49:51 meumeu sshd[8295]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.193.174.234 Dec 15 16:49:53 meumeu sshd[8295]: Failed password for invalid user temmerud from 103.193.174.234 port 39928 ssh2 Dec 15 16:56:58 meumeu sshd[9410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.193.174.234 ... |
2019-12-16 00:13:34 |
| 103.82.141.166 | attackspam | firewall-block, port(s): 1433/tcp |
2019-12-15 23:36:34 |
| 49.88.112.59 | attack | Dec1515:38:53server6sshd[29568]:refusedconnectfrom49.88.112.59\(49.88.112.59\)Dec1515:38:53server6sshd[29569]:refusedconnectfrom49.88.112.59\(49.88.112.59\)Dec1515:38:54server6sshd[29570]:refusedconnectfrom49.88.112.59\(49.88.112.59\)Dec1515:38:54server6sshd[29571]:refusedconnectfrom49.88.112.59\(49.88.112.59\)Dec1516:35:15server6sshd[823]:refusedconnectfrom49.88.112.59\(49.88.112.59\) |
2019-12-15 23:50:13 |
| 49.88.112.62 | attack | Dec 15 15:54:17 prox sshd[6046]: Failed password for root from 49.88.112.62 port 52446 ssh2 Dec 15 15:54:20 prox sshd[6046]: Failed password for root from 49.88.112.62 port 52446 ssh2 |
2019-12-15 23:58:37 |
| 222.186.52.78 | attack | Dec 15 22:24:51 webhost01 sshd[30402]: Failed password for root from 222.186.52.78 port 34946 ssh2 ... |
2019-12-15 23:34:55 |
| 79.153.146.31 | attackspambots | Dec 15 14:53:26 sshgateway sshd\[25414\]: Invalid user lehl from 79.153.146.31 Dec 15 14:53:26 sshgateway sshd\[25414\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.red-79-153-146.dynamicip.rima-tde.net Dec 15 14:53:28 sshgateway sshd\[25414\]: Failed password for invalid user lehl from 79.153.146.31 port 37446 ssh2 |
2019-12-16 00:05:03 |
| 128.199.162.108 | attack | Dec 15 05:48:14 wbs sshd\[6727\]: Invalid user rector from 128.199.162.108 Dec 15 05:48:14 wbs sshd\[6727\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.162.108 Dec 15 05:48:16 wbs sshd\[6727\]: Failed password for invalid user rector from 128.199.162.108 port 50928 ssh2 Dec 15 05:54:59 wbs sshd\[7346\]: Invalid user www from 128.199.162.108 Dec 15 05:54:59 wbs sshd\[7346\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.162.108 |
2019-12-15 23:59:06 |
| 109.130.255.121 | attack | DATE:2019-12-15 15:53:22, IP:109.130.255.121, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc) |
2019-12-16 00:10:50 |
| 188.165.24.200 | attackspambots | Dec 15 17:15:28 dedicated sshd[12331]: Invalid user bascom from 188.165.24.200 port 38804 |
2019-12-16 00:15:48 |
| 51.255.168.202 | attackspambots | Dec 15 15:44:10 ns3042688 sshd\[10879\]: Invalid user sdjiiptv from 51.255.168.202 Dec 15 15:44:11 ns3042688 sshd\[10879\]: Failed password for invalid user sdjiiptv from 51.255.168.202 port 49064 ssh2 Dec 15 15:49:05 ns3042688 sshd\[12616\]: Failed password for root from 51.255.168.202 port 55264 ssh2 Dec 15 15:54:02 ns3042688 sshd\[14444\]: Invalid user guest from 51.255.168.202 Dec 15 15:54:04 ns3042688 sshd\[14444\]: Failed password for invalid user guest from 51.255.168.202 port 32986 ssh2 ... |
2019-12-15 23:33:04 |