City: Ashburn
Region: Virginia
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 54.162.46.90 | attackspam | "SSH brute force auth login attempt." |
2020-01-23 16:09:30 |
| 54.162.46.90 | attackbotsspam | Unauthorized connection attempt detected from IP address 54.162.46.90 to port 2220 [J] |
2020-01-13 09:11:49 |
| 54.162.46.90 | attackspambots | Unauthorized connection attempt detected from IP address 54.162.46.90 to port 2220 [J] |
2020-01-12 14:57:07 |
| 54.162.46.72 | attackspam | Received: from usgwjeh.amazon.com (54.162.46.72) by VE1EUR01FT056.mail.protection.outlook.com (10.152.3.115) with Microsoft SMTP Server id 15.20.2347.16 via Frontend Transport; OriginalChecksum:4F46683CFB43437719A7A7E3E2E7847B584CFB054E8ECCC64A175D53B9C4B899;UpperCasedChecksum:1F99EF67CC359D44943AF286B5D3CEE4DEA71E1FF39FF755218D173AF0C70133;SizeAsReceived:536;Count:9 From: Credit One Visa |
2019-10-15 04:43:36 |
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 54.144.0.0 - 54.221.255.255
CIDR: 54.220.0.0/15, 54.216.0.0/14, 54.192.0.0/12, 54.160.0.0/11, 54.208.0.0/13, 54.144.0.0/12
NetName: AMAZON
NetHandle: NET-54-144-0-0-1
Parent: NET54 (NET-54-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon Technologies Inc. (AT-88-Z)
RegDate: 2014-10-23
Updated: 2021-02-10
Ref: https://rdap.arin.net/registry/ip/54.144.0.0
OrgName: Amazon Technologies Inc.
OrgId: AT-88-Z
Address: 410 Terry Ave N.
City: Seattle
StateProv: WA
PostalCode: 98109
Country: US
RegDate: 2011-12-08
Updated: 2024-01-24
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://rdap.arin.net/registry/entity/AT-88-Z
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.162.46.121
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21119
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;54.162.46.121. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026032800 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 28 19:00:14 CST 2026
;; MSG SIZE rcvd: 106
121.46.162.54.in-addr.arpa domain name pointer ec2-54-162-46-121.compute-1.amazonaws.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
121.46.162.54.in-addr.arpa name = ec2-54-162-46-121.compute-1.amazonaws.com.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.52.86 | attackbotsspam | Feb 26 16:47:32 ny01 sshd[27292]: Failed password for root from 222.186.52.86 port 63135 ssh2 Feb 26 16:47:35 ny01 sshd[27292]: Failed password for root from 222.186.52.86 port 63135 ssh2 Feb 26 16:47:37 ny01 sshd[27292]: Failed password for root from 222.186.52.86 port 63135 ssh2 |
2020-02-27 06:03:07 |
| 45.136.108.85 | attackbots | $f2bV_matches |
2020-02-27 05:57:27 |
| 178.173.144.99 | attack | Port probing on unauthorized port 9530 |
2020-02-27 05:59:07 |
| 49.207.6.252 | attackbots | 2020-02-26 22:54:53,956 fail2ban.actions: WARNING [ssh] Ban 49.207.6.252 |
2020-02-27 06:18:01 |
| 223.71.167.165 | attackbotsspam | 223.71.167.165 was recorded 23 times by 7 hosts attempting to connect to the following ports: 9418,30005,49151,4343,60001,43,8334,2055,10162,1701,8112,28015,8010,37777,4063,444,85,50050,22222,2332. Incident counter (4h, 24h, all-time): 23, 152, 6917 |
2020-02-27 06:14:44 |
| 49.233.135.204 | attack | Feb 27 00:50:45 hosting sshd[3899]: Invalid user common from 49.233.135.204 port 52478 Feb 27 00:50:45 hosting sshd[3899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.135.204 Feb 27 00:50:45 hosting sshd[3899]: Invalid user common from 49.233.135.204 port 52478 Feb 27 00:50:47 hosting sshd[3899]: Failed password for invalid user common from 49.233.135.204 port 52478 ssh2 ... |
2020-02-27 06:16:11 |
| 164.132.107.245 | attackspambots | Feb 26 21:42:59 localhost sshd\[18452\]: Invalid user oracle from 164.132.107.245 port 45538 Feb 26 21:42:59 localhost sshd\[18452\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.107.245 Feb 26 21:43:01 localhost sshd\[18452\]: Failed password for invalid user oracle from 164.132.107.245 port 45538 ssh2 Feb 26 21:51:18 localhost sshd\[18604\]: Invalid user ro from 164.132.107.245 port 60244 Feb 26 21:51:18 localhost sshd\[18604\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.107.245 ... |
2020-02-27 05:52:49 |
| 93.91.16.178 | attackbots | Fail2Ban Ban Triggered (2) |
2020-02-27 05:59:47 |
| 193.233.73.25 | attack | scan z |
2020-02-27 06:10:25 |
| 178.128.57.147 | attackspam | Feb 26 22:51:09 vpn01 sshd[2588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.57.147 Feb 26 22:51:12 vpn01 sshd[2588]: Failed password for invalid user quest from 178.128.57.147 port 60626 ssh2 ... |
2020-02-27 06:00:17 |
| 220.174.24.4 | attackbotsspam | 2020-02-26T22:13:11.389172www postfix/smtpd[19389]: warning: unknown[220.174.24.4]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2020-02-26T22:33:18.236327www postfix/smtpd[32019]: warning: unknown[220.174.24.4]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 2020-02-26T22:51:15.333172www postfix/smtpd[32611]: warning: unknown[220.174.24.4]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-02-27 05:55:51 |
| 112.85.42.180 | attackspam | SSH bruteforce more then 50 syn to 22 port per 10 seconds. |
2020-02-27 05:56:52 |
| 92.63.194.91 | attackbotsspam | Port scan: Attack repeated for 24 hours |
2020-02-27 06:01:51 |
| 187.187.226.104 | attackbots | Email rejected due to spam filtering |
2020-02-27 06:02:38 |
| 203.109.118.116 | attackbotsspam | $f2bV_matches |
2020-02-27 05:50:42 |