City: Ashburn
Region: Virginia
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#
NetRange: 54.144.0.0 - 54.221.255.255
CIDR: 54.216.0.0/14, 54.192.0.0/12, 54.208.0.0/13, 54.220.0.0/15, 54.160.0.0/11, 54.144.0.0/12
NetName: AMAZON
NetHandle: NET-54-144-0-0-1
Parent: NET54 (NET-54-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon Technologies Inc. (AT-88-Z)
RegDate: 2014-10-23
Updated: 2021-02-10
Ref: https://rdap.arin.net/registry/ip/54.144.0.0
OrgName: Amazon Technologies Inc.
OrgId: AT-88-Z
Address: 410 Terry Ave N.
City: Seattle
StateProv: WA
PostalCode: 98109
Country: US
RegDate: 2011-12-08
Updated: 2024-01-24
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://rdap.arin.net/registry/entity/AT-88-Z
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.163.101.158
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27480
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;54.163.101.158. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025111001 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Nov 11 05:02:01 CST 2025
;; MSG SIZE rcvd: 107158.101.163.54.in-addr.arpa domain name pointer ec2-54-163-101-158.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
158.101.163.54.in-addr.arpa name = ec2-54-163-101-158.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 185.175.93.27 | attackbots | 1 attempts last 24 Hours |
2019-10-05 01:19:19 |
| 40.115.232.210 | attackspambots | Oct 4 16:02:28 localhost sshd\[20551\]: Invalid user Voiture from 40.115.232.210 port 33020 Oct 4 16:02:28 localhost sshd\[20551\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.115.232.210 Oct 4 16:02:29 localhost sshd\[20551\]: Failed password for invalid user Voiture from 40.115.232.210 port 33020 ssh2 |
2019-10-05 01:24:15 |
| 178.128.154.236 | attack | fail2ban honeypot |
2019-10-05 01:00:20 |
| 49.234.46.125 | attackspambots | Oct 4 04:42:45 php1 sshd\[32567\]: Invalid user Privaten from 49.234.46.125 Oct 4 04:42:45 php1 sshd\[32567\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.46.125 Oct 4 04:42:47 php1 sshd\[32567\]: Failed password for invalid user Privaten from 49.234.46.125 port 38204 ssh2 Oct 4 04:47:33 php1 sshd\[755\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.46.125 user=root Oct 4 04:47:35 php1 sshd\[755\]: Failed password for root from 49.234.46.125 port 46156 ssh2 |
2019-10-05 01:20:37 |
| 89.248.172.16 | attack | 3120/tcp 801/tcp 3333/tcp... [2019-08-03/10-04]330pkt,282pt.(tcp),7pt.(udp) |
2019-10-05 01:09:41 |
| 77.40.11.88 | attackbots | 10/04/2019-18:33:33.332621 77.40.11.88 Protocol: 6 SURICATA SMTP tls rejected |
2019-10-05 01:07:27 |
| 71.6.199.23 | attackspam | 04.10.2019 16:23:14 Connection to port 3310 blocked by firewall |
2019-10-05 01:15:39 |
| 171.241.201.202 | attackbots | Oct 4 14:23:58 tuxlinux sshd[18756]: Invalid user admin from 171.241.201.202 port 58994 Oct 4 14:23:58 tuxlinux sshd[18756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.241.201.202 Oct 4 14:23:58 tuxlinux sshd[18756]: Invalid user admin from 171.241.201.202 port 58994 Oct 4 14:23:58 tuxlinux sshd[18756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.241.201.202 Oct 4 14:23:58 tuxlinux sshd[18756]: Invalid user admin from 171.241.201.202 port 58994 Oct 4 14:23:58 tuxlinux sshd[18756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.241.201.202 Oct 4 14:24:01 tuxlinux sshd[18756]: Failed password for invalid user admin from 171.241.201.202 port 58994 ssh2 ... |
2019-10-05 01:19:41 |
| 125.64.94.211 | attackbotsspam | 04.10.2019 16:06:19 Connection to port 5984 blocked by firewall |
2019-10-05 01:31:28 |
| 186.10.80.122 | attack | proto=tcp . spt=33212 . dpt=25 . (Listed on dnsbl-sorbs plus abuseat-org and barracuda) (504) |
2019-10-05 01:26:05 |
| 144.217.83.201 | attackspam | Oct 4 19:05:56 vps647732 sshd[19732]: Failed password for root from 144.217.83.201 port 59998 ssh2 ... |
2019-10-05 01:12:11 |
| 185.176.27.54 | attackbots | 10/04/2019-18:46:34.572452 185.176.27.54 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-10-05 01:35:01 |
| 5.36.225.159 | attack | Looking for /mage.zip, Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0 |
2019-10-05 01:30:42 |
| 175.29.188.9 | attackbotsspam | postfix |
2019-10-05 01:22:19 |
| 212.92.122.106 | attackspambots | 3389BruteforceStormFW22 |
2019-10-05 01:24:32 |