City: Ashburn
Region: Virginia
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 52.84.0.0 - 52.95.255.255
CIDR: 52.84.0.0/14, 52.88.0.0/13
NetName: AT-88-Z
NetHandle: NET-52-84-0-0-1
Parent: NET52 (NET-52-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon Technologies Inc. (AT-88-Z)
RegDate: 1991-12-19
Updated: 2022-03-21
Ref: https://rdap.arin.net/registry/ip/52.84.0.0
OrgName: Amazon Technologies Inc.
OrgId: AT-88-Z
Address: 410 Terry Ave N.
City: Seattle
StateProv: WA
PostalCode: 98109
Country: US
RegDate: 2011-12-08
Updated: 2026-04-17
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://rdap.arin.net/registry/entity/AT-88-Z
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
OrgDNSHandle: DNS1131-ARIN
OrgDNSName: DNS
OrgDNSPhone: +1-202-555-0000
OrgDNSEmail: ipmanagement+dns@amazon.com
OrgDNSRef: https://rdap.arin.net/registry/entity/DNS1131-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.91.27.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50020
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;52.91.27.64. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026071403 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jul 15 08:30:27 CST 2026
;; MSG SIZE rcvd: 104
64.27.91.52.in-addr.arpa domain name pointer ec2-52-91-27-64.compute-1.amazonaws.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
64.27.91.52.in-addr.arpa name = ec2-52-91-27-64.compute-1.amazonaws.com.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 116.75.107.232 | attackbots | 20/9/11@12:55:04: FAIL: IoT-Telnet address from=116.75.107.232 ... |
2020-09-12 23:00:22 |
| 167.71.134.241 | attackspambots | detected by Fail2Ban |
2020-09-12 22:57:32 |
| 180.76.134.238 | attack | [SID2] Fail2ban detected 5 failed SSH login attempts within 30 minutes. This report was submitted automatically. |
2020-09-12 23:34:33 |
| 151.80.83.249 | attackspambots | ... |
2020-09-12 23:15:05 |
| 112.85.42.172 | attack | Sep 12 16:57:15 nextcloud sshd\[12582\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.172 user=root Sep 12 16:57:17 nextcloud sshd\[12582\]: Failed password for root from 112.85.42.172 port 39097 ssh2 Sep 12 16:57:27 nextcloud sshd\[12582\]: Failed password for root from 112.85.42.172 port 39097 ssh2 |
2020-09-12 22:58:28 |
| 88.80.20.86 | attack | Sep 12 11:23:27 marvibiene sshd[29907]: Failed password for root from 88.80.20.86 port 41495 ssh2 Sep 12 11:23:30 marvibiene sshd[29907]: Failed password for root from 88.80.20.86 port 41495 ssh2 Sep 12 11:23:33 marvibiene sshd[29907]: Failed password for root from 88.80.20.86 port 41495 ssh2 Sep 12 11:23:38 marvibiene sshd[29907]: Failed password for root from 88.80.20.86 port 41495 ssh2 |
2020-09-12 23:06:11 |
| 201.116.194.210 | attackspambots | 2020-09-12T09:12:08.010510linuxbox-skyline sshd[35341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.116.194.210 user=root 2020-09-12T09:12:09.730645linuxbox-skyline sshd[35341]: Failed password for root from 201.116.194.210 port 18539 ssh2 ... |
2020-09-12 23:19:54 |
| 122.51.176.55 | attackbots | Sep 12 10:01:00 root sshd[20811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.176.55 ... |
2020-09-12 23:01:46 |
| 222.99.52.216 | attackbotsspam | 2020-09-12T12:22:57.121025server.espacesoutien.com sshd[14599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.99.52.216 user=root 2020-09-12T12:22:59.619484server.espacesoutien.com sshd[14599]: Failed password for root from 222.99.52.216 port 62288 ssh2 2020-09-12T12:27:22.529167server.espacesoutien.com sshd[18057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.99.52.216 user=root 2020-09-12T12:27:25.073738server.espacesoutien.com sshd[18057]: Failed password for root from 222.99.52.216 port 19000 ssh2 ... |
2020-09-12 22:52:23 |
| 178.128.212.200 | attackbotsspam | Sep 12 16:26:52 datenbank sshd[70615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.212.200 user=root Sep 12 16:26:54 datenbank sshd[70615]: Failed password for root from 178.128.212.200 port 44728 ssh2 Sep 12 16:31:26 datenbank sshd[70620]: Invalid user admin from 178.128.212.200 port 54518 ... |
2020-09-12 22:53:45 |
| 154.54.249.16 | attackspambots | [Fri Sep 11 10:55:12.565070 2020] [authz_core:error] [pid 166787:tid 140680563250944] [client 154.54.249.16:60612] AH01630: client denied by server configuration: /home/vestibte/public_rsrc/ErrDocs/error.php [Fri Sep 11 10:55:13.335183 2020] [authz_core:error] [pid 166786:tid 140680420574976] [client 154.54.249.16:61266] AH01630: client denied by server configuration: /home/vestibte/public_html/PreventFalls.com/robots.txt [Fri Sep 11 10:55:13.338090 2020] [authz_core:error] [pid 166786:tid 140680420574976] [client 154.54.249.16:61266] AH01630: client denied by server configuration: /home/vestibte/public_rsrc/ErrDocs/error.php ... |
2020-09-12 22:57:53 |
| 64.30.126.33 | attackspambots |
|
2020-09-12 23:09:43 |
| 103.76.191.93 | attackbotsspam | Port Scan ... |
2020-09-12 23:00:45 |
| 142.93.66.165 | attackspambots | php WP PHPmyadamin ABUSE blocked for 12h |
2020-09-12 23:21:36 |
| 93.174.93.195 | attack | Port scan: Attack repeated for 24 hours |
2020-09-12 23:17:14 |