City: Ashburn
Region: Virginia
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 34.192.0.0 - 34.255.255.255
CIDR: 34.192.0.0/10
NetName: AT-88-Z
NetHandle: NET-34-192-0-0-1
Parent: NET34 (NET-34-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon Technologies Inc. (AT-88-Z)
RegDate: 2016-09-12
Updated: 2016-09-12
Ref: https://rdap.arin.net/registry/ip/34.192.0.0
OrgName: Amazon Technologies Inc.
OrgId: AT-88-Z
Address: 410 Terry Ave N.
City: Seattle
StateProv: WA
PostalCode: 98109
Country: US
RegDate: 2011-12-08
Updated: 2026-04-17
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://rdap.arin.net/registry/entity/AT-88-Z
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
OrgDNSHandle: DNS1131-ARIN
OrgDNSName: DNS
OrgDNSPhone: +1-202-555-0000
OrgDNSEmail: ipmanagement+dns@amazon.com
OrgDNSRef: https://rdap.arin.net/registry/entity/DNS1131-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 34.234.82.70
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2444
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;34.234.82.70. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026080602 1800 900 604800 86400
;; Query time: 5 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 07 08:30:50 CST 2026
;; MSG SIZE rcvd: 10570.82.234.34.in-addr.arpa domain name pointer ec2-34-234-82-70.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
70.82.234.34.in-addr.arpa name = ec2-34-234-82-70.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 106.12.140.168 | attackspambots | [ssh] SSH attack |
2020-07-08 05:43:15 |
| 49.235.39.217 | attackbotsspam | Jul 7 23:15:08 rancher-0 sshd[178647]: Invalid user fcweb from 49.235.39.217 port 48418 ... |
2020-07-08 05:31:17 |
| 106.53.108.16 | attackbots | Jul 8 07:14:02 web1 sshd[479]: Invalid user yhy from 106.53.108.16 port 35614 Jul 8 07:14:02 web1 sshd[479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.108.16 Jul 8 07:14:02 web1 sshd[479]: Invalid user yhy from 106.53.108.16 port 35614 Jul 8 07:14:03 web1 sshd[479]: Failed password for invalid user yhy from 106.53.108.16 port 35614 ssh2 Jul 8 07:18:41 web1 sshd[1764]: Invalid user airflow from 106.53.108.16 port 59124 Jul 8 07:18:41 web1 sshd[1764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.108.16 Jul 8 07:18:41 web1 sshd[1764]: Invalid user airflow from 106.53.108.16 port 59124 Jul 8 07:18:43 web1 sshd[1764]: Failed password for invalid user airflow from 106.53.108.16 port 59124 ssh2 Jul 8 07:23:08 web1 sshd[2947]: Invalid user server from 106.53.108.16 port 41726 ... |
2020-07-08 05:56:31 |
| 193.8.82.113 | attackspam | 20 attempts against mh-ssh on flow |
2020-07-08 06:02:15 |
| 212.237.57.252 | attackbots | Jul 7 23:28:45 PorscheCustomer sshd[3630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.57.252 Jul 7 23:28:47 PorscheCustomer sshd[3630]: Failed password for invalid user db2fenc1 from 212.237.57.252 port 45386 ssh2 Jul 7 23:32:28 PorscheCustomer sshd[3863]: Failed password for sys from 212.237.57.252 port 43044 ssh2 ... |
2020-07-08 05:53:04 |
| 221.219.211.110 | attackspambots | Brute-force attempt banned |
2020-07-08 05:36:03 |
| 88.218.17.54 | attackspam | Unauthorized connection attempt from IP address 88.218.17.54 on Port 3389(RDP) |
2020-07-08 05:51:16 |
| 121.166.187.187 | attackspambots | Jul 7 21:31:45 game-panel sshd[32287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.166.187.187 Jul 7 21:31:47 game-panel sshd[32287]: Failed password for invalid user zhanglf from 121.166.187.187 port 47998 ssh2 Jul 7 21:35:07 game-panel sshd[32454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.166.187.187 |
2020-07-08 05:44:26 |
| 103.145.12.168 | attack | Automatic report - Banned IP Access |
2020-07-08 05:37:14 |
| 123.13.210.89 | attackbotsspam | Jul 7 22:51:27 haigwepa sshd[19390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.13.210.89 Jul 7 22:51:30 haigwepa sshd[19390]: Failed password for invalid user victor from 123.13.210.89 port 27865 ssh2 ... |
2020-07-08 05:33:57 |
| 139.59.13.55 | attackbotsspam | Jul 7 20:10:03 localhost sshd[15788]: Invalid user helena from 139.59.13.55 port 47677 Jul 7 20:10:03 localhost sshd[15788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.13.55 Jul 7 20:10:03 localhost sshd[15788]: Invalid user helena from 139.59.13.55 port 47677 Jul 7 20:10:05 localhost sshd[15788]: Failed password for invalid user helena from 139.59.13.55 port 47677 ssh2 Jul 7 20:13:36 localhost sshd[16211]: Invalid user dujoey from 139.59.13.55 port 46794 ... |
2020-07-08 05:49:30 |
| 36.92.95.10 | attack | Jul 8 00:34:57 hosting sshd[13233]: Invalid user kawakami from 36.92.95.10 port 37295 ... |
2020-07-08 05:59:44 |
| 182.122.75.28 | attack | 20 attempts against mh-ssh on acorn |
2020-07-08 05:53:28 |
| 45.56.137.28 | attack | 45.56.137.28 - - [07/Jul/2020:22:16:45 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 45.56.137.28 - - [07/Jul/2020:22:16:46 +0100] "POST /wp-login.php HTTP/1.1" 200 5879 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 45.56.137.28 - - [07/Jul/2020:22:17:46 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" ... |
2020-07-08 05:31:31 |
| 141.98.10.208 | attack | Jul 7 22:58:09 mail postfix/smtpd\[22882\]: warning: unknown\[141.98.10.208\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jul 7 23:01:31 mail postfix/smtpd\[23098\]: warning: unknown\[141.98.10.208\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jul 7 23:35:47 mail postfix/smtpd\[23931\]: warning: unknown\[141.98.10.208\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Jul 7 23:45:36 mail postfix/smtpd\[24145\]: warning: unknown\[141.98.10.208\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ |
2020-07-08 05:45:55 |