城市(city): Ashburn
省份(region): Virginia
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 54.144.0.0 - 54.221.255.255
CIDR: 54.192.0.0/12, 54.144.0.0/12, 54.216.0.0/14, 54.220.0.0/15, 54.208.0.0/13, 54.160.0.0/11
NetName: AMAZON
NetHandle: NET-54-144-0-0-1
Parent: NET54 (NET-54-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon Technologies Inc. (AT-88-Z)
RegDate: 2014-10-23
Updated: 2021-02-10
Ref: https://rdap.arin.net/registry/ip/54.144.0.0
OrgName: Amazon Technologies Inc.
OrgId: AT-88-Z
Address: 410 Terry Ave N.
City: Seattle
StateProv: WA
PostalCode: 98109
Country: US
RegDate: 2011-12-08
Updated: 2024-01-24
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://rdap.arin.net/registry/entity/AT-88-Z
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
# end
# start
NetRange: 54.208.0.0 - 54.209.255.255
CIDR: 54.208.0.0/15
NetName: AMAZO-ZIAD4
NetHandle: NET-54-208-0-0-2
Parent: AMAZON (NET-54-144-0-0-1)
NetType: Reallocated
OriginAS:
Organization: Amazon.com, Inc. (AMAZO-4)
RegDate: 2013-03-19
Updated: 2021-02-10
Ref: https://rdap.arin.net/registry/ip/54.208.0.0
OrgName: Amazon.com, Inc.
OrgId: AMAZO-4
Address: Amazon Web Services, Inc.
Address: P.O. Box 81226
City: Seattle
StateProv: WA
PostalCode: 98108-1226
Country: US
RegDate: 2005-09-29
Updated: 2022-09-30
Comment: For details of this service please see
Comment: http://ec2.amazonaws.com
Ref: https://rdap.arin.net/registry/entity/AMAZO-4
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.209.126.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47231
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;54.209.126.68. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025110501 1800 900 604800 86400
;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 06 05:00:24 CST 2025
;; MSG SIZE rcvd: 10668.126.209.54.in-addr.arpa domain name pointer ec2-54-209-126-68.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
68.126.209.54.in-addr.arpa name = ec2-54-209-126-68.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 185.50.149.5 | attackbotsspam | Apr 20 20:57:56 mail postfix/smtpd\[26713\]: warning: unknown\[185.50.149.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Apr 20 22:02:14 mail postfix/smtpd\[27725\]: warning: unknown\[185.50.149.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Apr 20 22:02:32 mail postfix/smtpd\[27835\]: warning: unknown\[185.50.149.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Apr 20 22:05:47 mail postfix/smtpd\[27973\]: warning: unknown\[185.50.149.5\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ |
2020-04-21 04:14:53 |
| 111.241.166.78 | attackspambots | port scan and connect, tcp 81 (hosts2-ns) |
2020-04-21 04:18:06 |
| 45.5.0.7 | attackbots | 5x Failed Password |
2020-04-21 03:52:33 |
| 122.51.191.69 | attack | Apr 20 21:57:50 sso sshd[31228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.191.69 Apr 20 21:57:51 sso sshd[31228]: Failed password for invalid user test2 from 122.51.191.69 port 51432 ssh2 ... |
2020-04-21 04:11:23 |
| 180.175.11.7 | attackspam | Port probing on unauthorized port 1433 |
2020-04-21 04:20:47 |
| 149.202.56.194 | attack | SSH brute force attempt |
2020-04-21 04:03:35 |
| 190.107.25.2 | attackbots | (sshd) Failed SSH login from 190.107.25.2 (CO/Colombia/mail.segurtec.com.co): 5 in the last 3600 secs |
2020-04-21 04:07:39 |
| 35.185.140.225 | attackbotsspam | Invalid user dv from 35.185.140.225 port 55564 |
2020-04-21 03:56:20 |
| 141.98.80.32 | attackspambots | Apr 20 21:23:33 mail postfix/smtpd\[27212\]: warning: unknown\[141.98.80.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Apr 20 22:05:41 mail postfix/smtpd\[27808\]: warning: unknown\[141.98.80.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Apr 20 22:05:41 mail postfix/smtpd\[27835\]: warning: unknown\[141.98.80.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Apr 20 22:05:58 mail postfix/smtpd\[27975\]: warning: unknown\[141.98.80.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Apr 20 22:05:58 mail postfix/smtpd\[27974\]: warning: unknown\[141.98.80.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ |
2020-04-21 04:12:54 |
| 96.78.175.33 | attackbotsspam | Apr 20 21:50:00 h1745522 sshd[9859]: Invalid user centos from 96.78.175.33 port 49412 Apr 20 21:50:00 h1745522 sshd[9859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.78.175.33 Apr 20 21:50:00 h1745522 sshd[9859]: Invalid user centos from 96.78.175.33 port 49412 Apr 20 21:50:09 h1745522 sshd[9859]: Failed password for invalid user centos from 96.78.175.33 port 49412 ssh2 Apr 20 21:53:54 h1745522 sshd[9951]: Invalid user pv from 96.78.175.33 port 39154 Apr 20 21:53:54 h1745522 sshd[9951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.78.175.33 Apr 20 21:53:54 h1745522 sshd[9951]: Invalid user pv from 96.78.175.33 port 39154 Apr 20 21:53:56 h1745522 sshd[9951]: Failed password for invalid user pv from 96.78.175.33 port 39154 ssh2 Apr 20 21:57:49 h1745522 sshd[10083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.78.175.33 user=root Apr 20 21:57:56 h174 ... |
2020-04-21 04:07:06 |
| 125.91.109.126 | attackbotsspam | 2020-04-20T21:37:25.423546 sshd[10543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.91.109.126 user=root 2020-04-20T21:37:27.065448 sshd[10543]: Failed password for root from 125.91.109.126 port 54082 ssh2 2020-04-20T21:57:31.906151 sshd[10851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.91.109.126 user=root 2020-04-20T21:57:33.443756 sshd[10851]: Failed password for root from 125.91.109.126 port 33044 ssh2 ... |
2020-04-21 04:27:03 |
| 181.231.83.162 | attackspambots | IP blocked |
2020-04-21 04:20:17 |
| 34.96.147.135 | attackspam | Invalid user cb from 34.96.147.135 port 35596 |
2020-04-21 03:56:44 |
| 122.51.189.69 | attackbotsspam | Apr 20 22:22:01 vps647732 sshd[20641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.189.69 Apr 20 22:22:03 vps647732 sshd[20641]: Failed password for invalid user test from 122.51.189.69 port 52124 ssh2 ... |
2020-04-21 04:29:08 |
| 206.189.80.118 | attackspam | Apr 20 22:11:21 vps sshd[977479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.80.118 user=root Apr 20 22:11:23 vps sshd[977479]: Failed password for root from 206.189.80.118 port 51930 ssh2 Apr 20 22:14:14 vps sshd[989990]: Invalid user user from 206.189.80.118 port 39082 Apr 20 22:14:14 vps sshd[989990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.80.118 Apr 20 22:14:16 vps sshd[989990]: Failed password for invalid user user from 206.189.80.118 port 39082 ssh2 ... |
2020-04-21 04:16:07 |