City: unknown
Region: unknown
Country: United States
Internet Service Provider: Amazon Technologies Inc.
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackspambots | Sending out Netflix spam from IP 54.240.14.174 (amazon.com / amazonaws.com) I have NEVER been a Netflix customer and never asked for this junk. The website spammed out is https://www.netflix.com/signup/creditoption?nftoken=BQAbAAEBEA77T6CHfer3tv8qolkSAduAkLFC%2FFYUyiUS4Sdi62TDOAptLP7WiMxUQK74rIuN%2BRXrWDnwU8vxCNSC2khWG0ZmflN2tsqMsqNHMDWRdKmlf6XFVqwlgd%2BFLY2Nz88IH4y3pcuOeFYD5X9L4G9ZZfbRHvrmZF%2FjsAyUI1f5mpTFg3eEFWfNQayYDiVrbb%2FU65EF%2B0XXrVI0T4jKa2zmCB8w5g%3D%3D&lnktrk=EMP&g=AEF2F71097E503EBEB44921E2720235C64526E40&lkid=URL_SIGNUP_CREDIT IPs: 54.69.16.110, 54.70.73.70, 54.149.101.155, 54.201.91.38, 54.213.182.74, 52.37.77.112, 52.41.20.47, 52.41.193.16 (amazon.com / amazonaws.com) amazon are pure scumbags who allow their customers to send out spam and do nothing about it! Report via email and website at https://support.aws.amazon.com/#/contacts/report-abuse |
2019-09-26 17:32:18 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 52.37.77.98 | attack | 10/23/2019-07:08:19.685071 52.37.77.98 Protocol: 6 SURICATA TLS invalid record/traffic |
2019-10-23 17:21:46 |
| 52.37.77.98 | attackbots | 10/20/2019-06:59:07.265649 52.37.77.98 Protocol: 6 SURICATA TLS invalid record/traffic |
2019-10-20 19:16:18 |
| 52.37.77.98 | attackspambots | 10/17/2019-18:44:02.135696 52.37.77.98 Protocol: 6 SURICATA TLS invalid record/traffic |
2019-10-18 00:44:57 |
| 52.37.77.98 | attackbotsspam | 10/16/2019-05:24:02.019609 52.37.77.98 Protocol: 6 SURICATA TLS invalid record/traffic |
2019-10-16 17:03:14 |
| 52.37.77.98 | attack | 10/15/2019-21:59:07.653389 52.37.77.98 Protocol: 6 SURICATA TLS invalid record/traffic |
2019-10-16 04:47:57 |
| 52.37.77.98 | attack | 10/15/2019-08:56:13.262699 52.37.77.98 Protocol: 6 SURICATA TLS invalid record/traffic |
2019-10-15 15:08:00 |
| 52.37.77.98 | attackbots | 10/12/2019-22:57:10.943099 52.37.77.98 Protocol: 6 SURICATA TLS invalid record/traffic |
2019-10-13 05:12:12 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.37.77.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25128
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.37.77.112. IN A
;; AUTHORITY SECTION:
. 424 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019092600 1800 900 604800 86400
;; Query time: 116 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 26 17:32:12 CST 2019
;; MSG SIZE rcvd: 116112.77.37.52.in-addr.arpa domain name pointer ec2-52-37-77-112.us-west-2.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
112.77.37.52.in-addr.arpa name = ec2-52-37-77-112.us-west-2.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 177.207.54.64 | attackspam | Automatic report - Port Scan Attack |
2019-07-22 19:28:10 |
| 139.255.83.210 | attack | Unauthorized connection attempt from IP address 139.255.83.210 on Port 445(SMB) |
2019-07-22 19:57:54 |
| 14.237.155.46 | attackspam | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-20 13:02:24,367 INFO [shellcode_manager] (14.237.155.46) no match, writing hexdump (202e4b256b0a5aa0821ae89886ba7e1f :2459707) - MS17010 (EternalBlue) |
2019-07-22 19:17:32 |
| 89.210.73.104 | attackbotsspam | Honeypot attack, port: 23, PTR: ppp089210073104.access.hol.gr. |
2019-07-22 19:39:51 |
| 202.124.138.156 | attackspambots | Unauthorized connection attempt from IP address 202.124.138.156 on Port 445(SMB) |
2019-07-22 20:02:05 |
| 116.89.50.107 | attack | Honeypot attack, port: 5555, PTR: 107.50.89.116.starhub.net.sg. |
2019-07-22 19:22:02 |
| 185.254.122.100 | attack | 22.07.2019 11:28:16 Connection to port 31206 blocked by firewall |
2019-07-22 19:46:55 |
| 117.2.166.20 | attackspambots | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-22 02:21:38,542 INFO [amun_request_handler] PortScan Detected on Port: 445 (117.2.166.20) |
2019-07-22 19:23:53 |
| 106.75.65.85 | attack | 22.07.2019 05:45:06 Connection to port 119 blocked by firewall |
2019-07-22 19:55:10 |
| 98.27.34.44 | attackspam | Honeypot attack, port: 445, PTR: cpe-98-27-34-44.triad.res.rr.com. |
2019-07-22 19:17:08 |
| 104.248.255.118 | attackbots | Jul 22 12:27:04 v22018076622670303 sshd\[25577\]: Invalid user test from 104.248.255.118 port 58100 Jul 22 12:27:04 v22018076622670303 sshd\[25577\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.255.118 Jul 22 12:27:06 v22018076622670303 sshd\[25577\]: Failed password for invalid user test from 104.248.255.118 port 58100 ssh2 ... |
2019-07-22 19:29:27 |
| 103.101.52.131 | attackspam | Excessive Port-Scanning |
2019-07-22 19:32:20 |
| 118.70.80.154 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-22 06:51:13,265 INFO [amun_request_handler] PortScan Detected on Port: 445 (118.70.80.154) |
2019-07-22 19:48:38 |
| 123.24.79.152 | attack | Unauthorized connection attempt from IP address 123.24.79.152 on Port 445(SMB) |
2019-07-22 20:03:22 |
| 41.32.233.181 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-20 14:58:52,296 INFO [shellcode_manager] (41.32.233.181) no match, writing hexdump (fa990ad1651d9abfe24c01c7edfd4a10 :12301) - SMB (Unknown) |
2019-07-22 20:03:53 |