City: Ashburn
Region: Virginia
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 18.32.0.0 - 18.255.255.255
CIDR: 18.32.0.0/11, 18.128.0.0/9, 18.64.0.0/10
NetName: AT-88-Z
NetHandle: NET-18-32-0-0-1
Parent: NET18 (NET-18-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon Technologies Inc. (AT-88-Z)
RegDate: 2019-10-07
Updated: 2021-02-10
Ref: https://rdap.arin.net/registry/ip/18.32.0.0
OrgName: Amazon Technologies Inc.
OrgId: AT-88-Z
Address: 410 Terry Ave N.
City: Seattle
StateProv: WA
PostalCode: 98109
Country: US
RegDate: 2011-12-08
Updated: 2026-04-17
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://rdap.arin.net/registry/entity/AT-88-Z
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgDNSHandle: DNS1131-ARIN
OrgDNSName: DNS
OrgDNSPhone: +1-202-555-0000
OrgDNSEmail: ipmanagement+dns@amazon.com
OrgDNSRef: https://rdap.arin.net/registry/entity/DNS1131-ARIN
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 18.212.227.85
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24357
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;18.212.227.85. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026042801 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 29 05:00:25 CST 2026
;; MSG SIZE rcvd: 10685.227.212.18.in-addr.arpa domain name pointer ec2-18-212-227-85.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
85.227.212.18.in-addr.arpa name = ec2-18-212-227-85.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 69.229.6.31 | attack | Feb 4 18:02:18 plusreed sshd[932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.229.6.31 user=root Feb 4 18:02:20 plusreed sshd[932]: Failed password for root from 69.229.6.31 port 42748 ssh2 ... |
2020-02-05 07:08:46 |
| 79.31.232.23 | attackspambots | Telnet/23 MH Probe, BF, Hack - |
2020-02-05 07:04:27 |
| 61.177.172.128 | attackspambots | ... |
2020-02-05 07:28:40 |
| 128.199.33.116 | attackbotsspam | Feb 4 23:36:00 l02a sshd[5597]: Invalid user jira from 128.199.33.116 Feb 4 23:36:00 l02a sshd[5597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=wifi.is Feb 4 23:36:00 l02a sshd[5597]: Invalid user jira from 128.199.33.116 Feb 4 23:36:02 l02a sshd[5597]: Failed password for invalid user jira from 128.199.33.116 port 51692 ssh2 |
2020-02-05 07:43:38 |
| 95.165.153.49 | attackbots | Honeypot attack, port: 445, PTR: 95-165-153-49.static.spd-mgts.ru. |
2020-02-05 07:18:20 |
| 175.141.246.122 | attackspam | Feb 4 23:15:32 web8 sshd\[8947\]: Invalid user test from 175.141.246.122 Feb 4 23:15:32 web8 sshd\[8947\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.141.246.122 Feb 4 23:15:34 web8 sshd\[8947\]: Failed password for invalid user test from 175.141.246.122 port 40088 ssh2 Feb 4 23:19:45 web8 sshd\[11001\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.141.246.122 user=root Feb 4 23:19:47 web8 sshd\[11001\]: Failed password for root from 175.141.246.122 port 33916 ssh2 |
2020-02-05 07:30:49 |
| 60.29.31.194 | attack | Rude login attack (14 tries in 1d) |
2020-02-05 07:24:20 |
| 211.253.10.96 | attack | Feb 4 20:13:11 goofy sshd\[7268\]: Invalid user qi from 211.253.10.96 Feb 4 20:13:11 goofy sshd\[7268\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.253.10.96 Feb 4 20:13:13 goofy sshd\[7268\]: Failed password for invalid user qi from 211.253.10.96 port 56592 ssh2 Feb 4 20:18:15 goofy sshd\[7538\]: Invalid user goeglein from 211.253.10.96 Feb 4 20:18:15 goofy sshd\[7538\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.253.10.96 |
2020-02-05 07:16:12 |
| 194.102.204.10 | attackspambots | Unauthorized connection attempt detected from IP address 194.102.204.10 to port 2222 [J] |
2020-02-05 07:11:00 |
| 42.58.90.88 | attackbots | Unauthorized connection attempt detected from IP address 42.58.90.88 to port 23 [J] |
2020-02-05 07:12:25 |
| 222.186.175.155 | attackbotsspam | 2020-02-05T00:20:06.826184vps751288.ovh.net sshd\[15812\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.155 user=root 2020-02-05T00:20:08.344025vps751288.ovh.net sshd\[15812\]: Failed password for root from 222.186.175.155 port 60312 ssh2 2020-02-05T00:20:11.855596vps751288.ovh.net sshd\[15812\]: Failed password for root from 222.186.175.155 port 60312 ssh2 2020-02-05T00:20:14.916123vps751288.ovh.net sshd\[15812\]: Failed password for root from 222.186.175.155 port 60312 ssh2 2020-02-05T00:20:17.720287vps751288.ovh.net sshd\[15812\]: Failed password for root from 222.186.175.155 port 60312 ssh2 |
2020-02-05 07:24:54 |
| 49.232.5.122 | attackbots | Unauthorized connection attempt detected from IP address 49.232.5.122 to port 2220 [J] |
2020-02-05 07:10:06 |
| 161.189.83.105 | attack | Feb 4 23:20:14 pornomens sshd\[1599\]: Invalid user ts3 from 161.189.83.105 port 54717 Feb 4 23:20:14 pornomens sshd\[1599\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.189.83.105 Feb 4 23:20:16 pornomens sshd\[1599\]: Failed password for invalid user ts3 from 161.189.83.105 port 54717 ssh2 ... |
2020-02-05 07:11:31 |
| 185.234.219.102 | attackspam | Rude login attack (75 tries in 1d) |
2020-02-05 07:34:30 |
| 212.109.27.95 | attackspam | TCP port 1031: Scan and connection |
2020-02-05 07:32:48 |