City: Ashburn
Region: Virginia
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b'#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 54.224.0.0 - 54.255.255.255
CIDR: 54.224.0.0/11
NetName: AMAZON-2011L
NetHandle: NET-54-224-0-0-1
Parent: NET54 (NET-54-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon Technologies Inc. (AT-88-Z)
RegDate: 2012-03-01
Updated: 2021-02-10
Comment: -----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Ref: https://rdap.arin.net/registry/ip/54.224.0.0
OrgName: Amazon Technologies Inc.
OrgId: AT-88-Z
Address: 410 Terry Ave N.
City: Seattle
StateProv: WA
PostalCode: 98109
Country: US
RegDate: 2011-12-08
Updated: 2024-01-24
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://rdap.arin.net/registry/entity/AT-88-Z
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
# end
# start
NetRange: 54.234.0.0 - 54.235.255.255
CIDR: 54.234.0.0/15
NetName: AMAZO-ZIAD2
NetHandle: NET-54-234-0-0-1
Parent: AMAZON-2011L (NET-54-224-0-0-1)
NetType: Reallocated
OriginAS:
Organization: Amazon.com, Inc. (AMAZO-4)
RegDate: 2012-11-30
Updated: 2012-11-30
Ref: https://rdap.arin.net/registry/ip/54.234.0.0
OrgName: Amazon.com, Inc.
OrgId: AMAZO-4
Address: Amazon Web Services, Inc.
Address: P.O. Box 81226
City: Seattle
StateProv: WA
PostalCode: 98108-1226
Country: US
RegDate: 2005-09-29
Updated: 2022-09-30
Comment: For details of this service please see
Comment: http://ec2.amazonaws.com
Ref: https://rdap.arin.net/registry/entity/AMAZO-4
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2025, American Registry for Internet Numbers, Ltd.
#'; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.234.213.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2756
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;54.234.213.3. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025101700 1800 900 604800 86400
;; Query time: 30 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 17 21:31:10 CST 2025
;; MSG SIZE rcvd: 1053.213.234.54.in-addr.arpa domain name pointer ec2-54-234-213-3.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
3.213.234.54.in-addr.arpa name = ec2-54-234-213-3.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 187.162.137.19 | attackbotsspam | Oct 5 13:37:00 [host] sshd[18731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.162.137.19 user=root Oct 5 13:37:03 [host] sshd[18731]: Failed password for root from 187.162.137.19 port 45363 ssh2 Oct 5 13:41:05 [host] sshd[18933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.162.137.19 user=root |
2019-10-05 20:15:52 |
| 183.82.32.140 | attack | SMB Server BruteForce Attack |
2019-10-05 20:28:44 |
| 52.78.189.104 | attackspam | 2019-10-05T12:11:17.582669abusebot-3.cloudsearch.cf sshd\[24830\]: Invalid user Eternite from 52.78.189.104 port 58500 |
2019-10-05 20:22:41 |
| 66.249.155.245 | attackbotsspam | Oct 5 15:09:29 microserver sshd[34843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.249.155.245 user=root Oct 5 15:09:31 microserver sshd[34843]: Failed password for root from 66.249.155.245 port 44544 ssh2 Oct 5 15:13:46 microserver sshd[35454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.249.155.245 user=root Oct 5 15:13:48 microserver sshd[35454]: Failed password for root from 66.249.155.245 port 58026 ssh2 Oct 5 15:18:16 microserver sshd[36070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.249.155.245 user=root Oct 5 15:31:45 microserver sshd[37973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.249.155.245 user=root Oct 5 15:31:48 microserver sshd[37973]: Failed password for root from 66.249.155.245 port 55500 ssh2 Oct 5 15:36:11 microserver sshd[38597]: pam_unix(sshd:auth): authentication failure; logname= uid |
2019-10-05 20:25:30 |
| 223.80.46.89 | attackspambots | Unauthorised access (Oct 5) SRC=223.80.46.89 LEN=40 TOS=0x04 TTL=49 ID=668 TCP DPT=8080 WINDOW=57936 SYN Unauthorised access (Oct 5) SRC=223.80.46.89 LEN=40 TOS=0x04 TTL=49 ID=1097 TCP DPT=8080 WINDOW=57936 SYN Unauthorised access (Oct 4) SRC=223.80.46.89 LEN=40 TOS=0x04 TTL=49 ID=1141 TCP DPT=8080 WINDOW=46856 SYN Unauthorised access (Oct 4) SRC=223.80.46.89 LEN=40 TOS=0x04 TTL=49 ID=52296 TCP DPT=8080 WINDOW=46856 SYN Unauthorised access (Oct 3) SRC=223.80.46.89 LEN=40 TOS=0x04 TTL=47 ID=36912 TCP DPT=8080 WINDOW=57936 SYN |
2019-10-05 20:11:34 |
| 192.169.215.114 | attackspam | Automatic report - Banned IP Access |
2019-10-05 20:33:56 |
| 171.237.92.31 | attackbots | Chat Spam |
2019-10-05 20:00:16 |
| 180.250.183.154 | attackbotsspam | 10/05/2019-07:40:58.072640 180.250.183.154 Protocol: 6 ET COMPROMISED Known Compromised or Hostile Host Traffic group 16 |
2019-10-05 20:22:21 |
| 177.50.220.210 | attackbotsspam | Oct 5 14:05:07 localhost sshd\[670\]: Invalid user 123Outlook from 177.50.220.210 port 39228 Oct 5 14:05:07 localhost sshd\[670\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.50.220.210 Oct 5 14:05:09 localhost sshd\[670\]: Failed password for invalid user 123Outlook from 177.50.220.210 port 39228 ssh2 |
2019-10-05 20:20:43 |
| 222.186.31.144 | attackspam | Oct 5 13:49:56 ns3367391 sshd\[17165\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.144 user=root Oct 5 13:49:58 ns3367391 sshd\[17165\]: Failed password for root from 222.186.31.144 port 50582 ssh2 ... |
2019-10-05 19:55:10 |
| 45.125.65.82 | attackspam | Oct 5 12:22:56 mail postfix/smtpd\[7166\]: warning: unknown\[45.125.65.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Oct 5 12:49:31 mail postfix/smtpd\[10283\]: warning: unknown\[45.125.65.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Oct 5 13:42:12 mail postfix/smtpd\[13176\]: warning: unknown\[45.125.65.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Oct 5 14:09:02 mail postfix/smtpd\[14262\]: warning: unknown\[45.125.65.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ |
2019-10-05 20:29:24 |
| 187.162.116.196 | attackbotsspam | MultiHost/MultiPort Probe, Scan, Hack - |
2019-10-05 20:22:00 |
| 92.119.160.142 | attackbots | Oct 5 13:17:19 h2177944 kernel: \[3150375.224910\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.142 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=17994 PROTO=TCP SPT=44934 DPT=3890 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 5 13:24:04 h2177944 kernel: \[3150780.102539\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.142 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=21380 PROTO=TCP SPT=44934 DPT=24865 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 5 13:35:27 h2177944 kernel: \[3151463.060733\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.142 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=22901 PROTO=TCP SPT=44934 DPT=5911 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 5 13:37:52 h2177944 kernel: \[3151608.740688\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.142 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=22198 PROTO=TCP SPT=44934 DPT=12110 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 5 13:40:47 h2177944 kernel: \[3151783.009164\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.119.160.142 DST=85.21 |
2019-10-05 20:26:11 |
| 111.231.72.231 | attackbotsspam | 2019-10-05T13:31:57.134992lon01.zurich-datacenter.net sshd\[32349\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.72.231 user=root 2019-10-05T13:31:59.402444lon01.zurich-datacenter.net sshd\[32349\]: Failed password for root from 111.231.72.231 port 35700 ssh2 2019-10-05T13:36:50.868991lon01.zurich-datacenter.net sshd\[32459\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.72.231 user=root 2019-10-05T13:36:53.026040lon01.zurich-datacenter.net sshd\[32459\]: Failed password for root from 111.231.72.231 port 42718 ssh2 2019-10-05T13:41:27.802002lon01.zurich-datacenter.net sshd\[32563\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.72.231 user=root ... |
2019-10-05 20:01:00 |
| 185.176.27.118 | attackbotsspam | 10/05/2019-07:40:45.868124 185.176.27.118 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-10-05 20:29:48 |