52.20.217.137 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.20.217.137
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1322
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;52.20.217.137.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020300 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 03 23:19:54 CST 2025
;; MSG SIZE  rcvd: 106

HOST信息:

137.217.20.52.in-addr.arpa domain name pointer ec2-52-20-217-137.compute-1.amazonaws.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
137.217.20.52.in-addr.arpa	name = ec2-52-20-217-137.compute-1.amazonaws.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
173.252.87.39	attack	[Sun Apr 12 10:50:12.075241 2020] [:error] [pid 3625:tid 140295004800768] [client 173.252.87.39:49662] [client 173.252.87.39] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "&REQUEST_HEADERS:Transfer-Encoding" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "202"] [id "920171"] [msg "GET or HEAD Request with Transfer-Encoding."] [data "1"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ"] [tag "CAPEC-272"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/prakiraan-dasarian/prakiraan-dasarian-daerah-potensi-banjir/555557973-prakiraan-dasarian-daerah-potensi-banjir-di-provinsi-jawa-timur-untuk-bulan-april-dasarian-iii-tanggal-21-30-tahun-2020-update-10-april-2020"] [unique_id "XpKP9KLL@8cf6BWsPUlIZgAAAAE"] ...	2020-04-12 18:11:43
203.19.33.149	attack	firewall-block, port(s): 445/tcp	2020-04-12 18:11:12
222.186.52.139	attack	(sshd) Failed SSH login from 222.186.52.139 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 12 11:39:28 amsweb01 sshd[29208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.139 user=root Apr 12 11:39:31 amsweb01 sshd[29208]: Failed password for root from 222.186.52.139 port 31580 ssh2 Apr 12 11:39:33 amsweb01 sshd[29208]: Failed password for root from 222.186.52.139 port 31580 ssh2 Apr 12 11:39:35 amsweb01 sshd[29208]: Failed password for root from 222.186.52.139 port 31580 ssh2 Apr 12 11:59:56 amsweb01 sshd[31347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.139 user=root	2020-04-12 18:00:43
120.70.96.196	attack	Apr 12 11:53:29 odroid64 sshd\[22244\]: User ftp from 120.70.96.196 not allowed because not listed in AllowUsers Apr 12 11:53:29 odroid64 sshd\[22244\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.70.96.196 user=ftp ...	2020-04-12 18:22:48
147.135.211.155	attackbots	Invalid user root	2020-04-12 18:17:02
134.209.62.141	attack	20/4/12@04:43:05: FAIL: Alarm-Intrusion address from=134.209.62.141 ...	2020-04-12 17:53:06
45.248.71.169	attack	SSH login attempts.	2020-04-12 18:14:32
106.54.163.106	attack	$f2bV_matches	2020-04-12 18:18:36
197.54.242.127	attack	/wp-admin/admin-ajax.php?nd_options_value_import_settings=users_can_register%5Bnd_opt…	2020-04-12 18:24:51
49.149.255.4	attackbotsspam	Unauthorized connection attempt detected from IP address 49.149.255.4 to port 445	2020-04-12 17:59:20
162.248.92.84	attack	Brute force attack against VPN service	2020-04-12 18:23:57
45.143.220.52	attackbotsspam	[2020-04-12 06:06:48] NOTICE[12114] chan_sip.c: Registration from '' failed for '45.143.220.52:40988' - Wrong password [2020-04-12 06:06:48] SECURITY[12128] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-12T06:06:48.472-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9706",SessionID="0x7f020c088288",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.52/40988",Challenge="14d1fa81",ReceivedChallenge="14d1fa81",ReceivedHash="67fea1ad7d28fa25a9a982024bc471ff" [2020-04-12 06:06:56] NOTICE[12114] chan_sip.c: Registration from '' failed for '45.143.220.52:51776' - Wrong password [2020-04-12 06:06:56] SECURITY[12128] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-12T06:06:56.879-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="101101",SessionID="0x7f020c167898",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.14 ...	2020-04-12 18:09:32
106.51.113.15	attack	Unauthorised connection attempt detected at AUO NODE 1. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-04-12 18:12:09
49.145.227.117	attack	scamming impersonating piece of useless 30 virgin. only thing can do is hack steam accounts and steal people's items.	2020-04-12 18:13:34
45.143.223.91	attackbots	SSH invalid-user multiple login try	2020-04-12 17:57:11

最近上报的IP列表

61.152.67.245	124.68.195.11	235.153.114.68	209.12.180.237
45.7.29.150	103.185.69.138	29.7.102.83	208.41.196.33
133.41.132.34	246.151.55.81	219.35.85.193	168.85.54.146
218.241.8.219	146.200.154.3	12.33.93.58	80.60.221.99
224.139.88.193	156.253.156.61	235.5.198.5	245.231.57.177