城市(city): Ashburn
省份(region): Virginia
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 54.158.19.140 | attackspam | Aug 11 10:16:43 Ubuntu-1404-trusty-64-minimal sshd\[27130\]: Invalid user gabriel from 54.158.19.140 Aug 11 10:16:43 Ubuntu-1404-trusty-64-minimal sshd\[27130\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.158.19.140 Aug 11 10:16:45 Ubuntu-1404-trusty-64-minimal sshd\[27130\]: Failed password for invalid user gabriel from 54.158.19.140 port 32912 ssh2 Aug 11 10:26:59 Ubuntu-1404-trusty-64-minimal sshd\[32535\]: Invalid user usuario from 54.158.19.140 Aug 11 10:26:59 Ubuntu-1404-trusty-64-minimal sshd\[32535\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.158.19.140 |
2019-08-11 23:42:00 |
| 54.158.19.140 | attackbots | Aug 11 01:41:44 debian sshd\[10744\]: Invalid user gdesigns from 54.158.19.140 port 56574 Aug 11 01:41:44 debian sshd\[10744\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.158.19.140 Aug 11 01:41:46 debian sshd\[10744\]: Failed password for invalid user gdesigns from 54.158.19.140 port 56574 ssh2 ... |
2019-08-11 14:06:01 |
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 54.144.0.0 - 54.221.255.255
CIDR: 54.160.0.0/11, 54.216.0.0/14, 54.208.0.0/13, 54.192.0.0/12, 54.220.0.0/15, 54.144.0.0/12
NetName: AMAZON
NetHandle: NET-54-144-0-0-1
Parent: NET54 (NET-54-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon Technologies Inc. (AT-88-Z)
RegDate: 2014-10-23
Updated: 2021-02-10
Ref: https://rdap.arin.net/registry/ip/54.144.0.0
OrgName: Amazon Technologies Inc.
OrgId: AT-88-Z
Address: 410 Terry Ave N.
City: Seattle
StateProv: WA
PostalCode: 98109
Country: US
RegDate: 2011-12-08
Updated: 2024-01-24
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://rdap.arin.net/registry/entity/AT-88-Z
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.158.19.195
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41981
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;54.158.19.195. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026021801 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Feb 19 03:00:04 CST 2026
;; MSG SIZE rcvd: 106195.19.158.54.in-addr.arpa domain name pointer ec2-54-158-19-195.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
195.19.158.54.in-addr.arpa name = ec2-54-158-19-195.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 68.183.106.84 | attack | no |
2020-01-02 23:40:26 |
| 180.250.248.170 | attackspam | Jan 2 16:28:19 srv-ubuntu-dev3 sshd[71312]: Invalid user ident from 180.250.248.170 Jan 2 16:28:19 srv-ubuntu-dev3 sshd[71312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.248.170 Jan 2 16:28:19 srv-ubuntu-dev3 sshd[71312]: Invalid user ident from 180.250.248.170 Jan 2 16:28:22 srv-ubuntu-dev3 sshd[71312]: Failed password for invalid user ident from 180.250.248.170 port 56266 ssh2 Jan 2 16:31:22 srv-ubuntu-dev3 sshd[71565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.248.170 user=root Jan 2 16:31:24 srv-ubuntu-dev3 sshd[71565]: Failed password for root from 180.250.248.170 port 49626 ssh2 Jan 2 16:34:32 srv-ubuntu-dev3 sshd[71792]: Invalid user admin from 180.250.248.170 Jan 2 16:34:33 srv-ubuntu-dev3 sshd[71792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.248.170 Jan 2 16:34:32 srv-ubuntu-dev3 sshd[71792]: Invalid user a ... |
2020-01-02 23:51:47 |
| 159.203.30.120 | attack | firewall-block, port(s): 2383/tcp |
2020-01-02 23:28:33 |
| 222.186.175.202 | attackbots | Jan 2 16:13:33 MK-Soft-Root1 sshd[13962]: Failed password for root from 222.186.175.202 port 12276 ssh2 Jan 2 16:13:39 MK-Soft-Root1 sshd[13962]: Failed password for root from 222.186.175.202 port 12276 ssh2 ... |
2020-01-02 23:33:22 |
| 69.229.6.58 | attackbots | Jan 2 15:58:05 lnxweb61 sshd[26411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.229.6.58 |
2020-01-02 23:18:42 |
| 222.186.169.192 | attack | web-1 [ssh] SSH Attack |
2020-01-02 23:18:16 |
| 93.42.109.1 | attackspambots | web Attack on Website at 2020-01-02. |
2020-01-02 23:58:04 |
| 77.42.123.114 | attackbots | Automatic report - Port Scan Attack |
2020-01-02 23:28:21 |
| 58.56.140.62 | attack | Jan 2 15:56:57 MK-Soft-Root1 sshd[10292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.56.140.62 Jan 2 15:56:59 MK-Soft-Root1 sshd[10292]: Failed password for invalid user englebrecht from 58.56.140.62 port 15617 ssh2 ... |
2020-01-02 23:59:38 |
| 93.148.181.194 | attackspam | Jan 2 16:23:01 localhost sshd\[14368\]: Invalid user zhang from 93.148.181.194 port 47116 Jan 2 16:23:01 localhost sshd\[14368\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.148.181.194 Jan 2 16:23:03 localhost sshd\[14368\]: Failed password for invalid user zhang from 93.148.181.194 port 47116 ssh2 |
2020-01-02 23:35:18 |
| 117.35.201.2 | attackspambots | Jan 2 15:42:26 v22018086721571380 sshd[29547]: Failed password for invalid user yy from 117.35.201.2 port 50684 ssh2 |
2020-01-02 23:49:51 |
| 204.48.31.119 | attackbotsspam | [portscan] Port scan |
2020-01-02 23:45:46 |
| 206.81.8.14 | attackspambots | Jan 2 16:17:30 mout sshd[17623]: Invalid user ockerse from 206.81.8.14 port 54014 |
2020-01-02 23:19:22 |
| 94.191.92.4 | attackspambots | web Attack on Wordpress site at 2020-01-02. |
2020-01-02 23:56:00 |
| 96.88.26.212 | attackbots | Jan 2 16:02:48 cavern sshd[26314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.88.26.212 |
2020-01-02 23:20:16 |