City: Columbus
Region: Ohio
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 52.14.197.204 | attack | mue-Direct access to plugin not allowed |
2020-07-13 00:51:48 |
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 52.0.0.0 - 52.79.255.255
CIDR: 52.0.0.0/10, 52.64.0.0/12
NetName: AT-88-Z
NetHandle: NET-52-0-0-0-1
Parent: NET52 (NET-52-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon Technologies Inc. (AT-88-Z)
RegDate: 1991-12-19
Updated: 2024-02-05
Comment: Geofeed http://ip-ranges.amazonaws.com/geo-ip-feed.csv
Ref: https://rdap.arin.net/registry/ip/52.0.0.0
OrgName: Amazon Technologies Inc.
OrgId: AT-88-Z
Address: 410 Terry Ave N.
City: Seattle
StateProv: WA
PostalCode: 98109
Country: US
RegDate: 2011-12-08
Updated: 2026-04-17
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://rdap.arin.net/registry/entity/AT-88-Z
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgDNSHandle: DNS1131-ARIN
OrgDNSName: DNS
OrgDNSPhone: +1-202-555-0000
OrgDNSEmail: ipmanagement+dns@amazon.com
OrgDNSRef: https://rdap.arin.net/registry/entity/DNS1131-ARIN
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.14.197.136
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39588
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;52.14.197.136. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026101800 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 19 02:30:21 CST 2026
;; MSG SIZE rcvd: 106136.197.14.52.in-addr.arpa domain name pointer scan.apcosys.cc.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
136.197.14.52.in-addr.arpa name = scan.apcosys.cc.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 119.29.166.174 | attackspambots | 2019-08-22T17:28:24.014689abusebot-7.cloudsearch.cf sshd\[10606\]: Invalid user rpcuser from 119.29.166.174 port 45630 |
2019-08-23 01:35:23 |
| 162.252.57.102 | attackbotsspam | Aug 22 06:37:50 aiointranet sshd\[21798\]: Invalid user deploy from 162.252.57.102 Aug 22 06:37:50 aiointranet sshd\[21798\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.252.57.102 Aug 22 06:37:51 aiointranet sshd\[21798\]: Failed password for invalid user deploy from 162.252.57.102 port 54125 ssh2 Aug 22 06:42:21 aiointranet sshd\[22321\]: Invalid user kevin from 162.252.57.102 Aug 22 06:42:21 aiointranet sshd\[22321\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.252.57.102 |
2019-08-23 00:48:20 |
| 41.84.228.65 | attackspam | SSH 15 Failed Logins |
2019-08-23 01:32:14 |
| 91.121.142.225 | attackspam | Aug 22 04:03:42 php1 sshd\[6214\]: Invalid user 12345678 from 91.121.142.225 Aug 22 04:03:42 php1 sshd\[6214\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.142.225 Aug 22 04:03:44 php1 sshd\[6214\]: Failed password for invalid user 12345678 from 91.121.142.225 port 48374 ssh2 Aug 22 04:08:00 php1 sshd\[6597\]: Invalid user shubham from 91.121.142.225 Aug 22 04:08:00 php1 sshd\[6597\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.142.225 |
2019-08-23 01:28:55 |
| 139.59.59.187 | attackspambots | (sshd) Failed SSH login from 139.59.59.187 (-): 5 in the last 3600 secs |
2019-08-23 01:25:33 |
| 137.74.166.77 | attackspam | Aug 22 15:40:32 cp sshd[5873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.166.77 |
2019-08-23 01:00:11 |
| 124.156.185.149 | attack | Aug 22 17:29:49 [munged] sshd[23107]: Invalid user joeflores from 124.156.185.149 port 12150 Aug 22 17:29:49 [munged] sshd[23107]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.185.149 |
2019-08-23 00:59:26 |
| 211.75.51.34 | attackspambots | RDP Brute-Force (Grieskirchen RZ2) |
2019-08-23 01:43:29 |
| 149.56.45.171 | attackspambots | SSH Bruteforce attack |
2019-08-23 00:58:18 |
| 59.13.139.54 | attack | Invalid user iesse from 59.13.139.54 port 58902 |
2019-08-23 01:41:37 |
| 95.141.199.94 | attackspam | [portscan] Port scan |
2019-08-23 01:37:53 |
| 111.230.23.81 | attack | Aug 22 15:45:17 XXX sshd[39144]: Invalid user jenn from 111.230.23.81 port 34788 |
2019-08-23 01:26:56 |
| 219.91.141.114 | attackbots | Aug 22 13:12:50 xtremcommunity sshd\[32241\]: Invalid user ls from 219.91.141.114 port 18145 Aug 22 13:12:50 xtremcommunity sshd\[32241\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.91.141.114 Aug 22 13:12:52 xtremcommunity sshd\[32241\]: Failed password for invalid user ls from 219.91.141.114 port 18145 ssh2 Aug 22 13:17:57 xtremcommunity sshd\[32550\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.91.141.114 user=root Aug 22 13:18:00 xtremcommunity sshd\[32550\]: Failed password for root from 219.91.141.114 port 16929 ssh2 ... |
2019-08-23 01:18:28 |
| 84.7.93.169 | attackspam | Aug 22 12:26:30 ny01 sshd[15663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.7.93.169 Aug 22 12:26:32 ny01 sshd[15663]: Failed password for invalid user heim from 84.7.93.169 port 60216 ssh2 Aug 22 12:31:55 ny01 sshd[16261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.7.93.169 |
2019-08-23 01:46:10 |
| 210.21.226.2 | attack | Aug 21 22:36:31 tdfoods sshd\[15034\]: Invalid user harrison from 210.21.226.2 Aug 21 22:36:31 tdfoods sshd\[15034\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.21.226.2 Aug 21 22:36:34 tdfoods sshd\[15034\]: Failed password for invalid user harrison from 210.21.226.2 port 4772 ssh2 Aug 21 22:39:13 tdfoods sshd\[15361\]: Invalid user edu from 210.21.226.2 Aug 21 22:39:13 tdfoods sshd\[15361\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.21.226.2 |
2019-08-23 01:06:25 |