Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Amazon Technologies Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Sending out Netflix spam from IP 54.240.14.174 
(amazon.com / amazonaws.com) 

I have NEVER been a Netflix customer and
never asked for this junk. 

The website spammed out is 

https://www.netflix.com/signup/creditoption?nftoken=BQAbAAEBEA77T6CHfer3tv8qolkSAduAkLFC%2FFYUyiUS4Sdi62TDOAptLP7WiMxUQK74rIuN%2BRXrWDnwU8vxCNSC2khWG0ZmflN2tsqMsqNHMDWRdKmlf6XFVqwlgd%2BFLY2Nz88IH4y3pcuOeFYD5X9L4G9ZZfbRHvrmZF%2FjsAyUI1f5mpTFg3eEFWfNQayYDiVrbb%2FU65EF%2B0XXrVI0T4jKa2zmCB8w5g%3D%3D&lnktrk=EMP&g=AEF2F71097E503EBEB44921E2720235C64526E40&lkid=URL_SIGNUP_CREDIT
IPs: 54.69.16.110, 54.70.73.70, 54.149.101.155,
54.201.91.38, 54.213.182.74, 52.37.77.112,
52.41.20.47, 52.41.193.16
(amazon.com / amazonaws.com) 

amazon are pure scumbags who allow their 
customers to send out spam and do nothing 
about it! 
Report via email and website at 
https://support.aws.amazon.com/#/contacts/report-abuse
2019-09-26 17:14:27
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.41.20.47
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24407
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.41.20.47.			IN	A

;; AUTHORITY SECTION:
.			567	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092600 1800 900 604800 86400

;; Query time: 50 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 26 17:14:24 CST 2019
;; MSG SIZE  rcvd: 115
Host info
47.20.41.52.in-addr.arpa domain name pointer ec2-52-41-20-47.us-west-2.compute.amazonaws.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
47.20.41.52.in-addr.arpa	name = ec2-52-41-20-47.us-west-2.compute.amazonaws.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
37.187.79.55 attackbots
Sep  4 05:00:18 web9 sshd\[15926\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.79.55  user=root
Sep  4 05:00:20 web9 sshd\[15926\]: Failed password for root from 37.187.79.55 port 40492 ssh2
Sep  4 05:04:34 web9 sshd\[16859\]: Invalid user vt from 37.187.79.55
Sep  4 05:04:34 web9 sshd\[16859\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.79.55
Sep  4 05:04:36 web9 sshd\[16859\]: Failed password for invalid user vt from 37.187.79.55 port 34170 ssh2
2019-09-04 23:09:08
183.109.79.253 attackspambots
Sep  4 04:27:05 hcbb sshd\[24873\]: Invalid user rogue from 183.109.79.253
Sep  4 04:27:05 hcbb sshd\[24873\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.109.79.253
Sep  4 04:27:06 hcbb sshd\[24873\]: Failed password for invalid user rogue from 183.109.79.253 port 63972 ssh2
Sep  4 04:32:19 hcbb sshd\[25356\]: Invalid user nexus from 183.109.79.253
Sep  4 04:32:19 hcbb sshd\[25356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.109.79.253
2019-09-04 22:46:57
162.247.74.27 attackspambots
Sep  4 16:12:55 ns341937 sshd[13614]: Failed password for root from 162.247.74.27 port 36122 ssh2
Sep  4 16:12:58 ns341937 sshd[13614]: Failed password for root from 162.247.74.27 port 36122 ssh2
Sep  4 16:13:00 ns341937 sshd[13614]: Failed password for root from 162.247.74.27 port 36122 ssh2
Sep  4 16:13:03 ns341937 sshd[13614]: Failed password for root from 162.247.74.27 port 36122 ssh2
...
2019-09-04 22:15:40
95.223.112.132 attackspam
Sep  3 12:08:43 itv-usvr-01 sshd[18224]: Invalid user pi from 95.223.112.132
Sep  3 12:08:43 itv-usvr-01 sshd[18226]: Invalid user pi from 95.223.112.132
Sep  3 12:08:43 itv-usvr-01 sshd[18224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.223.112.132
Sep  3 12:08:43 itv-usvr-01 sshd[18224]: Invalid user pi from 95.223.112.132
Sep  3 12:08:45 itv-usvr-01 sshd[18224]: Failed password for invalid user pi from 95.223.112.132 port 33030 ssh2
Sep  3 12:08:43 itv-usvr-01 sshd[18226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.223.112.132
Sep  3 12:08:43 itv-usvr-01 sshd[18226]: Invalid user pi from 95.223.112.132
Sep  3 12:08:45 itv-usvr-01 sshd[18226]: Failed password for invalid user pi from 95.223.112.132 port 33032 ssh2
2019-09-04 22:11:06
187.188.37.86 attackbotsspam
8000/tcp
[2019-09-04]1pkt
2019-09-04 22:22:01
220.121.58.55 attackbots
Sep  4 04:44:45 wbs sshd\[15401\]: Invalid user mpsingh from 220.121.58.55
Sep  4 04:44:45 wbs sshd\[15401\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.121.58.55
Sep  4 04:44:47 wbs sshd\[15401\]: Failed password for invalid user mpsingh from 220.121.58.55 port 52248 ssh2
Sep  4 04:50:00 wbs sshd\[15871\]: Invalid user gerard from 220.121.58.55
Sep  4 04:50:00 wbs sshd\[15871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.121.58.55
2019-09-04 23:01:16
198.199.78.169 attackspambots
Sep  4 13:52:29 localhost sshd\[13057\]: Invalid user shah from 198.199.78.169 port 39364
Sep  4 13:52:29 localhost sshd\[13057\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.199.78.169
Sep  4 13:52:31 localhost sshd\[13057\]: Failed password for invalid user shah from 198.199.78.169 port 39364 ssh2
Sep  4 13:58:16 localhost sshd\[13225\]: Invalid user ns from 198.199.78.169 port 55076
Sep  4 13:58:16 localhost sshd\[13225\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.199.78.169
...
2019-09-04 22:15:00
37.187.6.235 attack
Sep  4 09:09:34 aat-srv002 sshd[14612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.6.235
Sep  4 09:09:36 aat-srv002 sshd[14612]: Failed password for invalid user haupt from 37.187.6.235 port 35294 ssh2
Sep  4 09:14:15 aat-srv002 sshd[14753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.6.235
Sep  4 09:14:17 aat-srv002 sshd[14753]: Failed password for invalid user mati from 37.187.6.235 port 51316 ssh2
...
2019-09-04 22:31:32
211.151.95.139 attack
Sep  4 15:34:29 localhost sshd\[24088\]: Invalid user mbc from 211.151.95.139 port 51844
Sep  4 15:34:29 localhost sshd\[24088\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.151.95.139
Sep  4 15:34:31 localhost sshd\[24088\]: Failed password for invalid user mbc from 211.151.95.139 port 51844 ssh2
2019-09-04 22:26:25
89.248.168.107 attack
Sep  4 15:11:38   TCP Attack: SRC=89.248.168.107 DST=[Masked] LEN=40 TOS=0x08 PREC=0x20 TTL=246  PROTO=TCP SPT=48680 DPT=10125 WINDOW=1024 RES=0x00 SYN URGP=0
2019-09-04 23:22:26
186.42.103.181 attack
2019-09-04T14:16:42.583058abusebot-3.cloudsearch.cf sshd\[13407\]: Invalid user wesley from 186.42.103.181 port 45388
2019-09-04 22:44:10
180.166.192.66 attack
2019-09-04T21:11:25.798622enmeeting.mahidol.ac.th sshd\[1998\]: Invalid user openbraov from 180.166.192.66 port 33175
2019-09-04T21:11:25.817406enmeeting.mahidol.ac.th sshd\[1998\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.166.192.66
2019-09-04T21:11:28.598610enmeeting.mahidol.ac.th sshd\[1998\]: Failed password for invalid user openbraov from 180.166.192.66 port 33175 ssh2
...
2019-09-04 23:03:29
60.2.69.162 attackbots
" "
2019-09-04 22:38:48
164.132.51.91 attackspam
Sep  4 16:51:47 MainVPS sshd[23223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.51.91  user=root
Sep  4 16:51:49 MainVPS sshd[23223]: Failed password for root from 164.132.51.91 port 60514 ssh2
Sep  4 16:51:57 MainVPS sshd[23223]: Failed password for root from 164.132.51.91 port 60514 ssh2
Sep  4 16:51:47 MainVPS sshd[23223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.51.91  user=root
Sep  4 16:51:49 MainVPS sshd[23223]: Failed password for root from 164.132.51.91 port 60514 ssh2
Sep  4 16:51:57 MainVPS sshd[23223]: Failed password for root from 164.132.51.91 port 60514 ssh2
Sep  4 16:51:47 MainVPS sshd[23223]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.51.91  user=root
Sep  4 16:51:49 MainVPS sshd[23223]: Failed password for root from 164.132.51.91 port 60514 ssh2
Sep  4 16:51:57 MainVPS sshd[23223]: Failed password for root from 164.132.51.91 port 605
2019-09-04 23:04:00
103.248.14.90 attackspam
$f2bV_matches
2019-09-04 22:53:58

Recently Reported IPs

88.204.218.130 85.15.82.99 77.82.206.218 52.37.77.112
49.148.189.139 36.90.255.241 36.85.117.183 36.83.176.23
36.75.140.89 223.205.235.63 127.81.247.173 39.134.21.5
213.131.62.230 119.96.227.19 118.69.78.29 27.123.215.222
212.98.162.206 202.86.189.194 189.147.110.167 188.162.234.146