City: unknown
Region: unknown
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 56.48.0.0 - 56.48.255.255
CIDR: 56.48.0.0/16
NetName: AMAZO-4
NetHandle: NET-56-48-0-0-1
Parent: NET56 (NET-56-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon.com, Inc. (AMAZO-4)
RegDate: 2022-06-24
Updated: 2022-06-24
Ref: https://rdap.arin.net/registry/ip/56.48.0.0
OrgName: Amazon.com, Inc.
OrgId: AMAZO-4
Address: Amazon Web Services, Inc.
Address: P.O. Box 81226
City: Seattle
StateProv: WA
PostalCode: 98108-1226
Country: US
RegDate: 2005-09-29
Updated: 2026-04-17
Comment: For details of this service please see
Comment: http://ec2.amazonaws.com
Ref: https://rdap.arin.net/registry/entity/AMAZO-4
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
OrgDNSHandle: DNS1131-ARIN
OrgDNSName: DNS
OrgDNSPhone: +1-202-555-0000
OrgDNSEmail: ipmanagement+dns@amazon.com
OrgDNSRef: https://rdap.arin.net/registry/entity/DNS1131-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 56.48.93.7
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55750
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;56.48.93.7. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026081701 1800 900 604800 86400
;; Query time: 8 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Aug 18 13:20:53 CST 2026
;; MSG SIZE rcvd: 103Host 7.93.48.56.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 7.93.48.56.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 102.47.180.252 | attackspam | Unauthorized connection attempt from IP address 102.47.180.252 on Port 445(SMB) |
2020-06-08 04:17:20 |
| 191.6.173.215 | attackbotsspam | Distributed brute force attack |
2020-06-08 04:02:56 |
| 211.23.125.95 | attackbots | $f2bV_matches |
2020-06-08 04:20:32 |
| 118.100.241.238 | attack | port scan and connect, tcp 23 (telnet) |
2020-06-08 04:22:43 |
| 36.91.212.193 | attackbotsspam | Unauthorized connection attempt from IP address 36.91.212.193 on Port 445(SMB) |
2020-06-08 04:29:30 |
| 104.248.121.67 | attackbotsspam | Jun 7 11:01:21 propaganda sshd[62232]: Connection from 104.248.121.67 port 51819 on 10.0.0.160 port 22 rdomain "" Jun 7 11:01:21 propaganda sshd[62232]: Connection closed by 104.248.121.67 port 51819 [preauth] |
2020-06-08 04:25:44 |
| 118.97.133.242 | attack | Unauthorized connection attempt from IP address 118.97.133.242 on Port 445(SMB) |
2020-06-08 04:19:00 |
| 222.186.180.6 | attack | Jun 7 17:17:43 firewall sshd[25040]: Failed password for root from 222.186.180.6 port 38682 ssh2 Jun 7 17:17:46 firewall sshd[25040]: Failed password for root from 222.186.180.6 port 38682 ssh2 Jun 7 17:17:48 firewall sshd[25040]: Failed password for root from 222.186.180.6 port 38682 ssh2 ... |
2020-06-08 04:26:36 |
| 51.38.37.89 | attackspam | detected by Fail2Ban |
2020-06-08 04:02:10 |
| 202.131.152.2 | attack | k+ssh-bruteforce |
2020-06-08 04:10:42 |
| 211.147.77.8 | attackspambots | 2020-06-07T20:25:31.491458dmca.cloudsearch.cf sshd[10019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.147.77.8 user=root 2020-06-07T20:25:33.328090dmca.cloudsearch.cf sshd[10019]: Failed password for root from 211.147.77.8 port 41286 ssh2 2020-06-07T20:27:06.323134dmca.cloudsearch.cf sshd[10126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.147.77.8 user=root 2020-06-07T20:27:08.536109dmca.cloudsearch.cf sshd[10126]: Failed password for root from 211.147.77.8 port 59450 ssh2 2020-06-07T20:28:03.159652dmca.cloudsearch.cf sshd[10191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.147.77.8 user=root 2020-06-07T20:28:05.196960dmca.cloudsearch.cf sshd[10191]: Failed password for root from 211.147.77.8 port 44406 ssh2 2020-06-07T20:28:58.774396dmca.cloudsearch.cf sshd[10263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ... |
2020-06-08 04:32:11 |
| 222.186.175.150 | attackspambots | Jun 7 20:28:51 localhost sshd[65503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.150 user=root Jun 7 20:28:53 localhost sshd[65503]: Failed password for root from 222.186.175.150 port 54368 ssh2 Jun 7 20:28:55 localhost sshd[65503]: Failed password for root from 222.186.175.150 port 54368 ssh2 Jun 7 20:28:51 localhost sshd[65503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.150 user=root Jun 7 20:28:53 localhost sshd[65503]: Failed password for root from 222.186.175.150 port 54368 ssh2 Jun 7 20:28:55 localhost sshd[65503]: Failed password for root from 222.186.175.150 port 54368 ssh2 Jun 7 20:28:51 localhost sshd[65503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.150 user=root Jun 7 20:28:53 localhost sshd[65503]: Failed password for root from 222.186.175.150 port 54368 ssh2 Jun 7 20:28:55 localhost sshd[65 ... |
2020-06-08 04:33:09 |
| 222.186.30.76 | attackbotsspam | Jun 7 22:30:11 legacy sshd[27826]: Failed password for root from 222.186.30.76 port 60242 ssh2 Jun 7 22:30:13 legacy sshd[27826]: Failed password for root from 222.186.30.76 port 60242 ssh2 Jun 7 22:30:15 legacy sshd[27826]: Failed password for root from 222.186.30.76 port 60242 ssh2 ... |
2020-06-08 04:31:55 |
| 195.54.160.107 | attackspam | Jun 7 22:28:58 debian-2gb-nbg1-2 kernel: \[13820480.986790\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=195.54.160.107 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=5673 PROTO=TCP SPT=8080 DPT=4003 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-08 04:34:04 |
| 206.189.127.6 | attackspambots | (sshd) Failed SSH login from 206.189.127.6 (GB/United Kingdom/-): 5 in the last 3600 secs |
2020-06-08 04:09:57 |