City: Ashburn
Region: Virginia
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 54.64.0.0 - 54.95.255.255
CIDR: 54.64.0.0/11
NetName: AMAZON-2011L
NetHandle: NET-54-64-0-0-1
Parent: NET54 (NET-54-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon Technologies Inc. (AT-88-Z)
RegDate: 2014-06-20
Updated: 2021-02-10
Ref: https://rdap.arin.net/registry/ip/54.64.0.0
OrgName: Amazon Technologies Inc.
OrgId: AT-88-Z
Address: 410 Terry Ave N.
City: Seattle
StateProv: WA
PostalCode: 98109
Country: US
RegDate: 2011-12-08
Updated: 2026-04-17
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://rdap.arin.net/registry/entity/AT-88-Z
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
OrgDNSHandle: DNS1131-ARIN
OrgDNSName: DNS
OrgDNSPhone: +1-202-555-0000
OrgDNSEmail: ipmanagement+dns@amazon.com
OrgDNSRef: https://rdap.arin.net/registry/entity/DNS1131-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.85.139.26
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40327
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;54.85.139.26. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026062902 1800 900 604800 86400
;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 30 08:30:33 CST 2026
;; MSG SIZE rcvd: 10526.139.85.54.in-addr.arpa domain name pointer ec2-54-85-139-26.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
26.139.85.54.in-addr.arpa name = ec2-54-85-139-26.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 183.56.161.99 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-11-02 03:50:36 |
| 31.208.74.177 | attack | ssh failed login |
2019-11-02 03:30:43 |
| 80.82.78.100 | attackbotsspam | Scanning (more than 2 packets) random ports - tries to find possible vulnerable services |
2019-11-02 04:03:07 |
| 51.91.48.22 | attackspambots | Nov 1 20:56:00 master sshd[25806]: Did not receive identification string from 51.91.48.22 Nov 1 20:57:39 master sshd[25807]: Failed password for root from 51.91.48.22 port 56296 ssh2 Nov 1 20:57:51 master sshd[25809]: Failed password for invalid user root123 from 51.91.48.22 port 59482 ssh2 Nov 1 20:58:05 master sshd[25811]: Failed password for root from 51.91.48.22 port 34332 ssh2 Nov 1 20:58:19 master sshd[25813]: Failed password for root from 51.91.48.22 port 37514 ssh2 Nov 1 20:58:33 master sshd[25815]: Failed password for root from 51.91.48.22 port 40590 ssh2 Nov 1 20:58:48 master sshd[25819]: Failed password for root from 51.91.48.22 port 43720 ssh2 Nov 1 20:59:04 master sshd[25821]: Failed password for root from 51.91.48.22 port 46866 ssh2 Nov 1 20:59:20 master sshd[25823]: Failed password for root from 51.91.48.22 port 50016 ssh2 Nov 1 20:59:35 master sshd[25825]: Failed password for root from 51.91.48.22 port 53144 ssh2 Nov 1 20:59:51 master sshd[25827]: Failed password for root from 51.91 |
2019-11-02 03:34:11 |
| 221.6.22.203 | attack | Nov 1 19:20:00 localhost sshd\[576\]: Invalid user fwqidc from 221.6.22.203 port 49222 Nov 1 19:20:00 localhost sshd\[576\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.6.22.203 Nov 1 19:20:02 localhost sshd\[576\]: Failed password for invalid user fwqidc from 221.6.22.203 port 49222 ssh2 |
2019-11-02 04:01:57 |
| 183.84.10.223 | attackspambots | MultiHost/MultiPort Probe, Scan, Hack - |
2019-11-02 03:47:11 |
| 95.181.177.88 | attack | Automatic report - Banned IP Access |
2019-11-02 03:53:07 |
| 45.136.110.24 | attackspambots | Nov 1 20:14:45 mc1 kernel: \[3922000.611156\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.110.24 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=57221 PROTO=TCP SPT=44025 DPT=33006 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 1 20:15:58 mc1 kernel: \[3922074.165408\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.110.24 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=55208 PROTO=TCP SPT=44025 DPT=33023 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 1 20:20:20 mc1 kernel: \[3922335.503852\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.110.24 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=64790 PROTO=TCP SPT=44025 DPT=33012 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-11-02 03:37:23 |
| 216.57.226.2 | attack | Automatic report - XMLRPC Attack |
2019-11-02 03:42:44 |
| 190.14.240.74 | attackspam | Nov 1 17:29:42 DAAP sshd[31332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.14.240.74 user=root Nov 1 17:29:44 DAAP sshd[31332]: Failed password for root from 190.14.240.74 port 53208 ssh2 Nov 1 17:34:03 DAAP sshd[31369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.14.240.74 user=root Nov 1 17:34:05 DAAP sshd[31369]: Failed password for root from 190.14.240.74 port 35208 ssh2 ... |
2019-11-02 03:50:22 |
| 45.236.152.16 | attack | Automatic report - Banned IP Access |
2019-11-02 03:28:10 |
| 106.12.106.78 | attackbots | Nov 1 16:21:08 vps691689 sshd[27922]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.106.78 Nov 1 16:21:10 vps691689 sshd[27922]: Failed password for invalid user fvcd from 106.12.106.78 port 12174 ssh2 ... |
2019-11-02 03:58:02 |
| 49.88.112.117 | attackbotsspam | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.117 user=root Failed password for root from 49.88.112.117 port 18917 ssh2 Failed password for root from 49.88.112.117 port 18917 ssh2 Failed password for root from 49.88.112.117 port 18917 ssh2 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.117 user=root |
2019-11-02 03:58:32 |
| 140.143.164.33 | attack | Nov 1 12:44:17 srv206 sshd[10926]: Invalid user password321 from 140.143.164.33 ... |
2019-11-02 03:53:43 |
| 85.51.149.32 | attackspambots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/85.51.149.32/ ES - 1H : (66) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : ES NAME ASN : ASN12479 IP : 85.51.149.32 CIDR : 85.51.148.0/22 PREFIX COUNT : 6057 UNIQUE IP COUNT : 6648832 ATTACKS DETECTED ASN12479 : 1H - 1 3H - 1 6H - 1 12H - 4 24H - 7 DateTime : 2019-11-01 12:44:41 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery |
2019-11-02 03:38:37 |