City: Boardman
Region: Oregon
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b'#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 18.32.0.0 - 18.255.255.255
CIDR: 18.32.0.0/11, 18.128.0.0/9, 18.64.0.0/10
NetName: AT-88-Z
NetHandle: NET-18-32-0-0-1
Parent: NET18 (NET-18-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon Technologies Inc. (AT-88-Z)
RegDate: 2019-10-07
Updated: 2021-02-10
Ref: https://rdap.arin.net/registry/ip/18.32.0.0
OrgName: Amazon Technologies Inc.
OrgId: AT-88-Z
Address: 410 Terry Ave N.
City: Seattle
StateProv: WA
PostalCode: 98109
Country: US
RegDate: 2011-12-08
Updated: 2024-01-24
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://rdap.arin.net/registry/entity/AT-88-Z
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#'
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 18.99.247.191
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61354
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;18.99.247.191. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026040700 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 07 18:40:54 CST 2026
;; MSG SIZE rcvd: 106
191.247.99.18.in-addr.arpa domain name pointer ec2-18-99-247-191.us-gov-west-1.compute.amazonaws.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
191.247.99.18.in-addr.arpa name = ec2-18-99-247-191.us-gov-west-1.compute.amazonaws.com.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 134.122.26.76 | attackspambots | Sep 16 03:30:32 marvibiene sshd[4595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.26.76 user=root Sep 16 03:30:33 marvibiene sshd[4595]: Failed password for root from 134.122.26.76 port 52082 ssh2 Sep 16 03:40:00 marvibiene sshd[4851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.26.76 user=root Sep 16 03:40:02 marvibiene sshd[4851]: Failed password for root from 134.122.26.76 port 44412 ssh2 |
2020-09-16 15:50:32 |
| 175.24.133.232 | attack | Sep 16 07:43:10 vmd17057 sshd[22563]: Failed password for root from 175.24.133.232 port 43290 ssh2 ... |
2020-09-16 15:43:45 |
| 45.137.22.108 | attackbotsspam | Sep 15 18:59:01 server postfix/smtpd[12697]: NOQUEUE: reject: RCPT from unknown[45.137.22.108]: 554 5.7.1 Service unavailable; Client host [45.137.22.108] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?45.137.22.108; from= |
2020-09-16 16:02:22 |
| 173.231.59.214 | attackbots | Brute force attack stopped by firewall |
2020-09-16 15:58:10 |
| 148.229.3.242 | attackspam | Sep 16 05:19:48 XXX sshd[19415]: Invalid user testuser3 from 148.229.3.242 port 54472 |
2020-09-16 15:49:56 |
| 123.136.128.13 | attackspambots | Sep 16 09:26:58 * sshd[20486]: Failed password for root from 123.136.128.13 port 33032 ssh2 |
2020-09-16 15:31:23 |
| 37.187.181.155 | attackbotsspam | Sep 16 09:46:53 vm1 sshd[8580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.181.155 Sep 16 09:46:56 vm1 sshd[8580]: Failed password for invalid user war from 37.187.181.155 port 59826 ssh2 ... |
2020-09-16 15:47:03 |
| 36.89.251.105 | attackbotsspam | Banned for a week because repeated abuses, for example SSH, but not only |
2020-09-16 15:25:49 |
| 51.79.164.74 | attack | 2020-09-16T08:39:40+0200 Failed SSH Authentication/Brute Force Attack. (Server 5) |
2020-09-16 15:39:02 |
| 192.99.11.177 | attackbots | 192.99.11.177 - - [16/Sep/2020:08:05:50 +0200] "POST /wp-login.php HTTP/1.0" 200 4794 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-16 15:48:54 |
| 91.250.242.12 | attackspam | port scan and connect, tcp 22 (ssh) |
2020-09-16 15:39:54 |
| 113.161.204.171 | attackspam | 1600189144 - 09/15/2020 18:59:04 Host: 113.161.204.171/113.161.204.171 Port: 445 TCP Blocked |
2020-09-16 16:00:49 |
| 124.105.87.254 | attackbotsspam | Automatic report - Banned IP Access |
2020-09-16 15:27:50 |
| 208.113.164.202 | attackspam | <6 unauthorized SSH connections |
2020-09-16 15:58:45 |
| 222.240.223.85 | attackbots | 2020-09-16T04:16:35.938515ollin.zadara.org sshd[364597]: Invalid user svn from 222.240.223.85 port 38196 2020-09-16T04:16:38.491000ollin.zadara.org sshd[364597]: Failed password for invalid user svn from 222.240.223.85 port 38196 ssh2 ... |
2020-09-16 15:56:28 |