City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 13.200.0.0 - 13.239.255.255
CIDR: 13.208.0.0/12, 13.224.0.0/12, 13.200.0.0/13
NetName: AT-88-Z
NetHandle: NET-13-200-0-0-1
Parent: NET13 (NET-13-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon Technologies Inc. (AT-88-Z)
RegDate: 2019-10-01
Updated: 2021-02-10
Ref: https://rdap.arin.net/registry/ip/13.200.0.0
OrgName: Amazon Technologies Inc.
OrgId: AT-88-Z
Address: 410 Terry Ave N.
City: Seattle
StateProv: WA
PostalCode: 98109
Country: US
RegDate: 2011-12-08
Updated: 2026-04-17
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://rdap.arin.net/registry/entity/AT-88-Z
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgDNSHandle: DNS1131-ARIN
OrgDNSName: DNS
OrgDNSPhone: +1-202-555-0000
OrgDNSEmail: ipmanagement+dns@amazon.com
OrgDNSRef: https://rdap.arin.net/registry/entity/DNS1131-ARIN
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
# end
# start
NetRange: 13.224.0.0 - 13.227.255.255
CIDR: 13.224.0.0/14
NetName: AMAZO-CF
NetHandle: NET-13-224-0-0-2
Parent: AT-88-Z (NET-13-200-0-0-1)
NetType: Reallocated
OriginAS:
Organization: Amazon.com, Inc. (AMAZON-4)
RegDate: 2020-05-19
Updated: 2021-02-10
Ref: https://rdap.arin.net/registry/ip/13.224.0.0
OrgName: Amazon.com, Inc.
OrgId: AMAZON-4
Address: 1918 8th Ave
City: SEATTLE
StateProv: WA
PostalCode: 98101-1244
Country: US
RegDate: 1995-01-23
Updated: 2022-09-30
Ref: https://rdap.arin.net/registry/entity/AMAZON-4
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 13.225.183.115
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1495
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;13.225.183.115. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026050700 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu May 07 23:34:09 CST 2026
;; MSG SIZE rcvd: 107
115.183.225.13.in-addr.arpa domain name pointer server-13-225-183-115.nrt12.r.cloudfront.net.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
115.183.225.13.in-addr.arpa name = server-13-225-183-115.nrt12.r.cloudfront.net.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 14.63.221.108 | attackspambots | SSH Brute Force |
2019-12-18 21:55:13 |
| 221.6.15.178 | attackbotsspam | Dec 17 02:09:51 srv01 sshd[12239]: Invalid user iwanyk from 221.6.15.178 Dec 17 02:09:51 srv01 sshd[12239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.6.15.178 Dec 17 02:09:54 srv01 sshd[12239]: Failed password for invalid user iwanyk from 221.6.15.178 port 2249 ssh2 Dec 17 02:09:54 srv01 sshd[12239]: Received disconnect from 221.6.15.178: 11: Bye Bye [preauth] Dec 17 02:23:56 srv01 sshd[12722]: Invalid user admin from 221.6.15.178 Dec 17 02:23:56 srv01 sshd[12722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.6.15.178 Dec 17 02:23:58 srv01 sshd[12722]: Failed password for invalid user admin from 221.6.15.178 port 2250 ssh2 Dec 17 02:23:59 srv01 sshd[12722]: Received disconnect from 221.6.15.178: 11: Bye Bye [preauth] Dec 17 02:30:40 srv01 sshd[13070]: Connection closed by 221.6.15.178 [preauth] Dec 17 02:37:35 srv01 sshd[13293]: Invalid user mfajre from 221.6.15.178 Dec 17........ ------------------------------- |
2019-12-18 22:25:20 |
| 218.92.0.172 | attackspambots | Dec 18 15:05:52 mail sshd[26889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.172 user=root Dec 18 15:05:54 mail sshd[26889]: Failed password for root from 218.92.0.172 port 20786 ssh2 ... |
2019-12-18 22:17:23 |
| 195.143.103.194 | attackspam | SSH Brute Force |
2019-12-18 22:25:41 |
| 178.128.81.125 | attackbotsspam | Invalid user user5 from 178.128.81.125 port 20297 |
2019-12-18 21:55:27 |
| 159.224.243.99 | attack | [portscan] Port scan |
2019-12-18 21:59:07 |
| 152.32.96.165 | attackbots | [portscan] tcp/23 [TELNET] *(RWIN=26467)(12181411) |
2019-12-18 22:29:53 |
| 154.126.173.31 | attack | Honeypot attack, port: 23, PTR: PTR record not found |
2019-12-18 22:16:06 |
| 106.12.11.160 | attack | $f2bV_matches_ltvn |
2019-12-18 21:52:45 |
| 157.230.7.100 | attackbotsspam | Dec 18 10:51:29 server sshd\[10585\]: Invalid user test from 157.230.7.100 Dec 18 10:51:29 server sshd\[10585\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.7.100 Dec 18 10:51:31 server sshd\[10585\]: Failed password for invalid user test from 157.230.7.100 port 33730 ssh2 Dec 18 11:01:53 server sshd\[13477\]: Invalid user arma1 from 157.230.7.100 Dec 18 11:01:53 server sshd\[13477\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.7.100 ... |
2019-12-18 22:11:32 |
| 182.61.138.112 | attack | Fail2Ban Ban Triggered |
2019-12-18 22:20:13 |
| 118.89.26.127 | attackspambots | 2019-12-18T12:24:28.876379abusebot-6.cloudsearch.cf sshd\[15688\]: Invalid user ouzts from 118.89.26.127 port 60416 2019-12-18T12:24:28.882562abusebot-6.cloudsearch.cf sshd\[15688\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.26.127 2019-12-18T12:24:30.652042abusebot-6.cloudsearch.cf sshd\[15688\]: Failed password for invalid user ouzts from 118.89.26.127 port 60416 ssh2 2019-12-18T12:29:53.434420abusebot-6.cloudsearch.cf sshd\[15691\]: Invalid user lolla from 118.89.26.127 port 38278 |
2019-12-18 22:16:19 |
| 118.25.213.82 | attack | SSH Brute-Force attacks |
2019-12-18 22:16:40 |
| 149.34.47.238 | attack | Automatic report - Port Scan Attack |
2019-12-18 22:05:26 |
| 111.68.46.68 | attackspambots | Dec 18 11:54:53 icinga sshd[13099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.68.46.68 Dec 18 11:54:55 icinga sshd[13099]: Failed password for invalid user verdure from 111.68.46.68 port 47570 ssh2 Dec 18 12:05:47 icinga sshd[23347]: Failed password for root from 111.68.46.68 port 42743 ssh2 ... |
2019-12-18 22:17:07 |