52.22.1.240 - IPInfo

基本信息:

城市(city): Ashburn

省份(region): Virginia

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
52.22.155.175	attack	Unauthorized connection attempt detected from IP address 52.22.155.175 to port 7002	2020-04-15 06:56:48
52.22.154.188	attackspambots	IP: 52.22.154.188 ASN: AS14618 Amazon.com Inc. Port: World Wide Web HTTP 80 Found in one or more Blacklists Date: 22/06/2019 3:31:53 PM UTC	2019-06-23 07:14:17

类型

评论内容

时间

52.22.155.175

attack

Unauthorized connection attempt detected from IP address 52.22.155.175 to port 7002

2020-04-15 06:56:48

52.22.154.188

attackspambots

IP: 52.22.154.188
ASN: AS14618 Amazon.com Inc.
Port: World Wide Web HTTP 80
Found in one or more Blacklists
Date: 22/06/2019 3:31:53 PM UTC

2019-06-23 07:14:17

WHOIS信息:

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#


NetRange:       52.0.0.0 - 52.79.255.255
CIDR:           52.64.0.0/12, 52.0.0.0/10
NetName:        AT-88-Z
NetHandle:      NET-52-0-0-0-1
Parent:         NET52 (NET-52-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       
Organization:   Amazon Technologies Inc. (AT-88-Z)
RegDate:        1991-12-19
Updated:        2024-02-05
Comment:        Geofeed http://ip-ranges.amazonaws.com/geo-ip-feed.csv
Ref:            https://rdap.arin.net/registry/ip/52.0.0.0



OrgName:        Amazon Technologies Inc.
OrgId:          AT-88-Z
Address:        410 Terry Ave N.
City:           Seattle
StateProv:      WA
PostalCode:     98109
Country:        US
RegDate:        2011-12-08
Updated:        2026-04-17
Comment:        All abuse reports MUST include:
Comment:        * src IP
Comment:        * dest IP (your IP)
Comment:        * dest port
Comment:        * Accurate date/timestamp and timezone of activity
Comment:        * Intensity/frequency (short log extracts)
Comment:        * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref:            https://rdap.arin.net/registry/entity/AT-88-Z


OrgNOCHandle: AANO1-ARIN
OrgNOCName:   Amazon AWS Network Operations
OrgNOCPhone:  +1-206-555-0000 
OrgNOCEmail:  amzn-noc-contact@amazon.com
OrgNOCRef:    https://rdap.arin.net/registry/entity/AANO1-ARIN

OrgRoutingHandle: ARMP-ARIN
OrgRoutingName:   AWS RPKI Management POC
OrgRoutingPhone:  +1-206-555-0000 
OrgRoutingEmail:  aws-rpki-routing-poc@amazon.com
OrgRoutingRef:    https://rdap.arin.net/registry/entity/ARMP-ARIN

OrgTechHandle: ANO24-ARIN
OrgTechName:   Amazon EC2 Network Operations
OrgTechPhone:  +1-206-555-0000 
OrgTechEmail:  amzn-noc-contact@amazon.com
OrgTechRef:    https://rdap.arin.net/registry/entity/ANO24-ARIN

OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName:   IP Routing
OrgRoutingPhone:  +1-206-555-0000 
OrgRoutingEmail:  aws-routing-poc@amazon.com
OrgRoutingRef:    https://rdap.arin.net/registry/entity/IPROU3-ARIN

OrgAbuseHandle: AEA8-ARIN
OrgAbuseName:   Amazon EC2 Abuse
OrgAbusePhone:  +1-206-555-0000 
OrgAbuseEmail:  trustandsafety@support.aws.com
OrgAbuseRef:    https://rdap.arin.net/registry/entity/AEA8-ARIN

OrgDNSHandle: DNS1131-ARIN
OrgDNSName:   DNS
OrgDNSPhone:  +1-202-555-0000 
OrgDNSEmail:  ipmanagement+dns@amazon.com
OrgDNSRef:    https://rdap.arin.net/registry/entity/DNS1131-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.22.1.240
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31491
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;52.22.1.240.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026073100 1800 900 604800 86400

;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Aug 01 02:00:05 CST 2026
;; MSG SIZE  rcvd: 104

HOST信息:

240.1.22.52.in-addr.arpa domain name pointer ec2-52-22-1-240.compute-1.amazonaws.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
240.1.22.52.in-addr.arpa	name = ec2-52-22-1-240.compute-1.amazonaws.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
177.81.27.78	attackbots	Aug 7 11:07:56 sshgateway sshd\[3244\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.81.27.78 user=root Aug 7 11:07:58 sshgateway sshd\[3244\]: Failed password for root from 177.81.27.78 port 25654 ssh2 Aug 7 11:14:43 sshgateway sshd\[3318\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.81.27.78 user=root	2020-08-07 19:59:10
118.25.182.230	attackbotsspam	2020-08-07T14:02:58.400526amanda2.illicoweb.com sshd\[43440\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.182.230 user=root 2020-08-07T14:02:59.880938amanda2.illicoweb.com sshd\[43440\]: Failed password for root from 118.25.182.230 port 52656 ssh2 2020-08-07T14:05:56.909669amanda2.illicoweb.com sshd\[43956\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.182.230 user=root 2020-08-07T14:05:59.494034amanda2.illicoweb.com sshd\[43956\]: Failed password for root from 118.25.182.230 port 34708 ssh2 2020-08-07T14:08:53.642125amanda2.illicoweb.com sshd\[44371\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.182.230 user=root ...	2020-08-07 20:17:39
43.252.229.118	attackspam	k+ssh-bruteforce	2020-08-07 20:14:20
118.27.13.233	attack	Lines containing failures of 118.27.13.233 Aug 3 20:15:15 shared10 sshd[27763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.27.13.233 user=r.r Aug 3 20:15:17 shared10 sshd[27763]: Failed password for r.r from 118.27.13.233 port 38604 ssh2 Aug 3 20:15:17 shared10 sshd[27763]: Received disconnect from 118.27.13.233 port 38604:11: Bye Bye [preauth] Aug 3 20:15:17 shared10 sshd[27763]: Disconnected from authenticating user r.r 118.27.13.233 port 38604 [preauth] Aug 3 20:28:19 shared10 sshd[31997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.27.13.233 user=r.r Aug 3 20:28:21 shared10 sshd[31997]: Failed password for r.r from 118.27.13.233 port 53378 ssh2 Aug 3 20:28:21 shared10 sshd[31997]: Received disconnect from 118.27.13.233 port 53378:11: Bye Bye [preauth] Aug 3 20:28:21 shared10 sshd[31997]: Disconnected from authenticating user r.r 118.27.13.233 port 53378 [preauth........ ------------------------------	2020-08-07 19:49:37
139.129.206.8	attack	Aug 7 00:47:32 host sshd\[31076\]: Failed password for root from 139.129.206.8 port 59590 ssh2 Aug 7 00:49:06 host sshd\[31124\]: Failed password for root from 139.129.206.8 port 37283 ssh2 Aug 7 00:50:30 host sshd\[32013\]: Failed password for root from 139.129.206.8 port 43207 ssh2 ...	2020-08-07 20:05:59
189.112.48.4	attack	Brute forcing RDP port 3389	2020-08-07 20:04:29
68.183.236.92	attack	SSH Brute Force	2020-08-07 20:10:10
51.91.255.147	attack	Banned for a week because repeated abuses, for example SSH, but not only	2020-08-07 19:49:57
143.255.130.2	attackspam	Aug 7 14:04:27 vpn01 sshd[30555]: Failed password for root from 143.255.130.2 port 54918 ssh2 ...	2020-08-07 20:21:33
94.31.85.173	attackbots	Aug 7 14:03:14 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.31.85.173, lip=176.9.177.164, session=\<8QMCWUisceZeH1Wt\> Aug 7 14:03:16 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.31.85.173, lip=176.9.177.164, session=\<3E8jWUisRZ9eH1Wt\> Aug 7 14:03:38 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.31.85.173, lip=176.9.177.164, session=\ Aug 7 14:08:48 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=94.31.85.173, lip=176.9.177.164, session=\ Aug 7 14:08:50 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): ...	2020-08-07 20:19:59
20.52.32.27	attack	DDoS Attack	2020-08-07 19:52:25
218.92.0.206	attack	Aug 7 11:58:02 pve1 sshd[1252]: Failed password for root from 218.92.0.206 port 48455 ssh2 Aug 7 11:58:06 pve1 sshd[1252]: Failed password for root from 218.92.0.206 port 48455 ssh2 ...	2020-08-07 19:57:13
219.150.93.157	attack	Aug 7 11:07:06 ovpn sshd\[25333\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.150.93.157 user=root Aug 7 11:07:08 ovpn sshd\[25333\]: Failed password for root from 219.150.93.157 port 48799 ssh2 Aug 7 11:21:55 ovpn sshd\[31457\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.150.93.157 user=root Aug 7 11:21:57 ovpn sshd\[31457\]: Failed password for root from 219.150.93.157 port 43043 ssh2 Aug 7 11:24:03 ovpn sshd\[32444\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.150.93.157 user=root	2020-08-07 19:57:30
185.156.73.45	attackbots	08/07/2020-07:41:12.948694 185.156.73.45 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-08-07 19:59:56
106.75.10.4	attack	Tried sshing with brute force.	2020-08-07 20:01:50

最近上报的IP列表

120.243.37.177	120.242.170.150	120.229.29.94	120.219.181.127
120.216.106.55	119.183.75.100	117.139.238.136	115.60.42.155
115.57.150.174	112.239.68.56	101.25.204.166	153.38.32.66
20.100.169.152	157.230.243.82	103.203.48.166	36.142.152.86
195.184.76.32	47.92.223.43	165.22.191.108	185.165.123.121