City: Frankfurt am Main
Region: Hessen
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 3.0.0.0 - 3.127.255.255
CIDR: 3.0.0.0/9
NetName: AT-88-Z
NetHandle: NET-3-0-0-0-1
Parent: NET3 (NET-3-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon Technologies Inc. (AT-88-Z)
RegDate: 2017-12-20
Updated: 2022-05-18
Ref: https://rdap.arin.net/registry/ip/3.0.0.0
OrgName: Amazon Technologies Inc.
OrgId: AT-88-Z
Address: 410 Terry Ave N.
City: Seattle
StateProv: WA
PostalCode: 98109
Country: US
RegDate: 2011-12-08
Updated: 2024-01-24
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://rdap.arin.net/registry/entity/AT-88-Z
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
# end
# start
NetRange: 3.64.0.0 - 3.79.255.255
CIDR: 3.64.0.0/12
NetName: AMAZON-FRA
NetHandle: NET-3-64-0-0-1
Parent: AT-88-Z (NET-3-0-0-0-1)
NetType: Reallocated
OriginAS:
Organization: A100 ROW GmbH (RG-123)
RegDate: 2020-10-22
Updated: 2020-10-22
Ref: https://rdap.arin.net/registry/ip/3.64.0.0
OrgName: A100 ROW GmbH
OrgId: RG-123
Address: Marcel-Breuer-Strasse 10
City: Munchen
StateProv:
PostalCode: 80807
Country: DE
RegDate: 2014-11-07
Updated: 2014-11-07
Ref: https://rdap.arin.net/registry/entity/RG-123
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 3.79.2.152
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31226
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;3.79.2.152. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025110800 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 08 23:16:53 CST 2025
;; MSG SIZE rcvd: 103b'152.2.79.3.in-addr.arpa domain name pointer ec2-3-79-2-152.eu-central-1.compute.amazonaws.com.
'Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
152.2.79.3.in-addr.arpa name = ec2-3-79-2-152.eu-central-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 37.187.100.50 | attackbotsspam | Sep 3 18:30:19 ns392434 sshd[22907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.100.50 user=proxy Sep 3 18:30:21 ns392434 sshd[22907]: Failed password for proxy from 37.187.100.50 port 54980 ssh2 Sep 3 18:37:52 ns392434 sshd[23257]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.100.50 user=root Sep 3 18:37:54 ns392434 sshd[23257]: Failed password for root from 37.187.100.50 port 42208 ssh2 Sep 3 18:44:44 ns392434 sshd[23536]: Invalid user zsq from 37.187.100.50 port 49890 Sep 3 18:44:44 ns392434 sshd[23536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.100.50 Sep 3 18:44:44 ns392434 sshd[23536]: Invalid user zsq from 37.187.100.50 port 49890 Sep 3 18:44:45 ns392434 sshd[23536]: Failed password for invalid user zsq from 37.187.100.50 port 49890 ssh2 Sep 3 18:50:57 ns392434 sshd[23657]: Invalid user aar from 37.187.100.50 port 57558 |
2020-09-04 04:44:48 |
| 162.247.74.204 | attack | Failed password for invalid user from 162.247.74.204 port 52290 ssh2 |
2020-09-04 05:05:29 |
| 5.188.84.115 | attackbots | fell into ViewStateTrap:wien2018 |
2020-09-04 05:07:27 |
| 125.160.17.32 | attackbotsspam | [N10.H2.VM2] Port Scanner Detected Blocked by UFW |
2020-09-04 04:45:00 |
| 106.13.98.132 | attackbotsspam | Sep 4 00:33:24 dhoomketu sshd[2846084]: Failed password for root from 106.13.98.132 port 59148 ssh2 Sep 4 00:36:50 dhoomketu sshd[2846124]: Invalid user redmine from 106.13.98.132 port 51578 Sep 4 00:36:50 dhoomketu sshd[2846124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.98.132 Sep 4 00:36:50 dhoomketu sshd[2846124]: Invalid user redmine from 106.13.98.132 port 51578 Sep 4 00:36:52 dhoomketu sshd[2846124]: Failed password for invalid user redmine from 106.13.98.132 port 51578 ssh2 ... |
2020-09-04 04:53:31 |
| 213.108.161.64 | attackspambots | Attempted Brute Force (dovecot) |
2020-09-04 04:45:25 |
| 36.89.213.100 | attack | Banned for a week because repeated abuses, for example SSH, but not only |
2020-09-04 04:58:26 |
| 142.93.154.174 | attackspambots | Sep 3 19:48:17 nuernberg-4g-01 sshd[8373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.154.174 Sep 3 19:48:19 nuernberg-4g-01 sshd[8373]: Failed password for invalid user cam from 142.93.154.174 port 40492 ssh2 Sep 3 19:53:09 nuernberg-4g-01 sshd[9921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.154.174 |
2020-09-04 04:47:58 |
| 118.40.220.64 | attack | Icarus honeypot on github |
2020-09-04 04:54:26 |
| 60.175.90.102 | attack | Icarus honeypot on github |
2020-09-04 04:42:11 |
| 202.153.37.195 | attackbotsspam | Sep 3 15:21:47 NPSTNNYC01T sshd[11577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.153.37.195 Sep 3 15:21:49 NPSTNNYC01T sshd[11577]: Failed password for invalid user nicole from 202.153.37.195 port 42744 ssh2 Sep 3 15:24:08 NPSTNNYC01T sshd[11725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.153.37.195 ... |
2020-09-04 04:47:41 |
| 222.186.175.202 | attackbotsspam | Failed password for invalid user from 222.186.175.202 port 44342 ssh2 |
2020-09-04 05:01:02 |
| 46.245.222.203 | attackbotsspam | 2020-09-03T22:25:38.123097lavrinenko.info sshd[577]: Failed password for root from 46.245.222.203 port 28129 ssh2 2020-09-03T22:29:30.682905lavrinenko.info sshd[957]: Invalid user jack from 46.245.222.203 port 22992 2020-09-03T22:29:30.693744lavrinenko.info sshd[957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.245.222.203 2020-09-03T22:29:30.682905lavrinenko.info sshd[957]: Invalid user jack from 46.245.222.203 port 22992 2020-09-03T22:29:32.726544lavrinenko.info sshd[957]: Failed password for invalid user jack from 46.245.222.203 port 22992 ssh2 ... |
2020-09-04 04:59:23 |
| 62.210.206.78 | attack | Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-03T20:04:11Z and 2020-09-03T20:10:28Z |
2020-09-04 04:52:42 |
| 185.220.102.4 | attackbots | [MK-VM3] SSH login failed |
2020-09-04 04:44:24 |