City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 54.144.0.0 - 54.221.255.255
CIDR: 54.192.0.0/12, 54.220.0.0/15, 54.216.0.0/14, 54.160.0.0/11, 54.208.0.0/13, 54.144.0.0/12
NetName: AMAZON
NetHandle: NET-54-144-0-0-1
Parent: NET54 (NET-54-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon Technologies Inc. (AT-88-Z)
RegDate: 2014-10-23
Updated: 2021-02-10
Ref: https://rdap.arin.net/registry/ip/54.144.0.0
OrgName: Amazon Technologies Inc.
OrgId: AT-88-Z
Address: 410 Terry Ave N.
City: Seattle
StateProv: WA
PostalCode: 98109
Country: US
RegDate: 2011-12-08
Updated: 2026-04-17
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://rdap.arin.net/registry/entity/AT-88-Z
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgDNSHandle: DNS1131-ARIN
OrgDNSName: DNS
OrgDNSPhone: +1-202-555-0000
OrgDNSEmail: ipmanagement+dns@amazon.com
OrgDNSRef: https://rdap.arin.net/registry/entity/DNS1131-ARIN
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
# end
# start
NetRange: 54.192.0.0 - 54.192.255.255
CIDR: 54.192.0.0/16
NetName: AMAZO-CF2
NetHandle: NET-54-192-0-0-2
Parent: AMAZON (NET-54-144-0-0-1)
NetType: Reallocated
OriginAS:
Organization: Amazon.com, Inc. (AMAZON-4)
RegDate: 2013-08-15
Updated: 2021-02-10
Ref: https://rdap.arin.net/registry/ip/54.192.0.0
OrgName: Amazon.com, Inc.
OrgId: AMAZON-4
Address: 1918 8th Ave
City: SEATTLE
StateProv: WA
PostalCode: 98101-1244
Country: US
RegDate: 1995-01-23
Updated: 2022-09-30
Ref: https://rdap.arin.net/registry/entity/AMAZON-4
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.192.18.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28195
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;54.192.18.114. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026050700 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu May 07 23:10:02 CST 2026
;; MSG SIZE rcvd: 106114.18.192.54.in-addr.arpa domain name pointer server-54-192-18-114.cgk51.r.cloudfront.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
114.18.192.54.in-addr.arpa name = server-54-192-18-114.cgk51.r.cloudfront.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 157.55.39.138 | attack | Automatic report - Web App Attack |
2019-06-24 06:54:10 |
| 92.119.160.80 | attackspambots | Jun 23 16:03:31 cac1d2 sshd\[9539\]: Invalid user admin from 92.119.160.80 port 25290 Jun 23 16:03:31 cac1d2 sshd\[9539\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.119.160.80 Jun 23 16:03:34 cac1d2 sshd\[9539\]: Failed password for invalid user admin from 92.119.160.80 port 25290 ssh2 ... |
2019-06-24 07:13:47 |
| 35.226.254.53 | attack | RDP Bruteforce |
2019-06-24 07:24:42 |
| 51.15.244.99 | attackspam | Jun 23 21:41:39 cvbmail sshd\[18289\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.244.99 user=root Jun 23 21:41:41 cvbmail sshd\[18289\]: Failed password for root from 51.15.244.99 port 40708 ssh2 Jun 23 22:04:54 cvbmail sshd\[18758\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.244.99 user=root |
2019-06-24 07:05:44 |
| 112.166.68.193 | attack | ssh failed login |
2019-06-24 06:51:18 |
| 88.214.26.10 | attackspambots | Jun 23 06:26:40 *** sshd[17555]: Failed password for invalid user admin from 88.214.26.10 port 46412 ssh2 Jun 23 07:09:35 *** sshd[17987]: Failed password for invalid user admin from 88.214.26.10 port 36638 ssh2 Jun 23 07:31:36 *** sshd[18113]: Failed password for invalid user admin from 88.214.26.10 port 49432 ssh2 Jun 23 07:58:30 *** sshd[18354]: Failed password for invalid user admin from 88.214.26.10 port 34476 ssh2 Jun 23 08:47:15 *** sshd[18922]: Failed password for invalid user admin from 88.214.26.10 port 36940 ssh2 Jun 23 09:08:45 *** sshd[19039]: Failed password for invalid user admin from 88.214.26.10 port 57194 ssh2 Jun 23 09:48:49 *** sshd[19450]: Failed password for invalid user admin from 88.214.26.10 port 57822 ssh2 Jun 23 10:14:28 *** sshd[19626]: Failed password for invalid user admin from 88.214.26.10 port 43178 ssh2 Jun 23 10:36:20 *** sshd[19858]: Failed password for invalid user admin from 88.214.26.10 port 49134 ssh2 Jun 23 11:08:38 *** sshd[20225]: Failed password for invalid user admi |
2019-06-24 07:14:22 |
| 192.42.116.16 | attackbotsspam | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.42.116.16 user=root Failed password for root from 192.42.116.16 port 42876 ssh2 Failed password for root from 192.42.116.16 port 42876 ssh2 Failed password for root from 192.42.116.16 port 42876 ssh2 Failed password for root from 192.42.116.16 port 42876 ssh2 |
2019-06-24 06:53:50 |
| 69.75.91.250 | attackspambots | Jun 23 22:05:54 dev postfix/smtpd\[31805\]: warning: rrcs-69-75-91-250.west.biz.rr.com\[69.75.91.250\]: SASL LOGIN authentication failed: authentication failure Jun 23 22:05:55 dev postfix/smtpd\[31805\]: warning: rrcs-69-75-91-250.west.biz.rr.com\[69.75.91.250\]: SASL LOGIN authentication failed: authentication failure Jun 23 22:05:56 dev postfix/smtpd\[31805\]: warning: rrcs-69-75-91-250.west.biz.rr.com\[69.75.91.250\]: SASL LOGIN authentication failed: authentication failure Jun 23 22:05:57 dev postfix/smtpd\[31805\]: warning: rrcs-69-75-91-250.west.biz.rr.com\[69.75.91.250\]: SASL LOGIN authentication failed: authentication failure Jun 23 22:05:58 dev postfix/smtpd\[31805\]: warning: rrcs-69-75-91-250.west.biz.rr.com\[69.75.91.250\]: SASL LOGIN authentication failed: authentication failure |
2019-06-24 06:50:09 |
| 222.252.16.190 | attackspambots | Jun 23 11:29:08 *** sshd[20440]: Failed password for invalid user admin from 222.252.16.190 port 42428 ssh2 |
2019-06-24 07:22:06 |
| 177.64.208.225 | attackspambots | DATE:2019-06-23_22:04:41, IP:177.64.208.225, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc) |
2019-06-24 07:11:26 |
| 114.143.107.194 | attack | SQL Injection |
2019-06-24 07:24:13 |
| 218.87.96.132 | attackspam | Trying ports that it shouldn't be. |
2019-06-24 07:06:37 |
| 154.65.33.198 | attackbots | Jun 23 22:58:31 MK-Soft-VM3 sshd\[8089\]: Invalid user ubnt from 154.65.33.198 port 59489 Jun 23 22:58:31 MK-Soft-VM3 sshd\[8089\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.65.33.198 Jun 23 22:58:33 MK-Soft-VM3 sshd\[8089\]: Failed password for invalid user ubnt from 154.65.33.198 port 59489 ssh2 ... |
2019-06-24 07:23:20 |
| 24.146.234.159 | attack | SSH login attempts brute force. |
2019-06-24 07:09:53 |
| 95.85.82.252 | attackspambots | [portscan] Port scan |
2019-06-24 07:00:36 |