城市(city): Ashburn
省份(region): Virginia
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 52.0.0.0 - 52.79.255.255
CIDR: 52.0.0.0/10, 52.64.0.0/12
NetName: AT-88-Z
NetHandle: NET-52-0-0-0-1
Parent: NET52 (NET-52-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon Technologies Inc. (AT-88-Z)
RegDate: 1991-12-19
Updated: 2024-02-05
Comment: Geofeed http://ip-ranges.amazonaws.com/geo-ip-feed.csv
Ref: https://rdap.arin.net/registry/ip/52.0.0.0
OrgName: Amazon Technologies Inc.
OrgId: AT-88-Z
Address: 410 Terry Ave N.
City: Seattle
StateProv: WA
PostalCode: 98109
Country: US
RegDate: 2011-12-08
Updated: 2026-04-17
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://rdap.arin.net/registry/entity/AT-88-Z
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
OrgDNSHandle: DNS1131-ARIN
OrgDNSName: DNS
OrgDNSPhone: +1-202-555-0000
OrgDNSEmail: ipmanagement+dns@amazon.com
OrgDNSRef: https://rdap.arin.net/registry/entity/DNS1131-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.23.168.237
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10752
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;52.23.168.237. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026070502 1800 900 604800 86400
;; Query time: 6 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jul 06 08:30:31 CST 2026
;; MSG SIZE rcvd: 106237.168.23.52.in-addr.arpa domain name pointer ec2-52-23-168-237.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
237.168.23.52.in-addr.arpa name = ec2-52-23-168-237.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 46.101.103.207 | attackspam | Invalid user andre from 46.101.103.207 port 41430 |
2020-07-14 13:24:54 |
| 178.214.93.11 | attackspambots | 178.214.93.11 - - [14/Jul/2020:05:17:00 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 178.214.93.11 - - [14/Jul/2020:05:17:01 +0100] "POST /wp-login.php HTTP/1.1" 200 6139 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 178.214.93.11 - - [14/Jul/2020:05:22:14 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" ... |
2020-07-14 13:08:10 |
| 188.226.131.171 | attackbotsspam | $f2bV_matches |
2020-07-14 13:13:35 |
| 101.132.119.96 | attackspam | chaangnoifulda.de 101.132.119.96 [14/Jul/2020:05:55:15 +0200] "POST /wp-login.php HTTP/1.1" 200 6006 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" chaangnoifulda.de 101.132.119.96 [14/Jul/2020:05:55:18 +0200] "POST /wp-login.php HTTP/1.1" 200 5963 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-07-14 13:22:26 |
| 103.141.46.154 | attack | Jul 12 12:24:03 mail sshd[10673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.141.46.154 Jul 12 12:24:05 mail sshd[10673]: Failed password for invalid user yarn-ats from 103.141.46.154 port 38390 ssh2 ... |
2020-07-14 13:35:24 |
| 1.188.81.26 | attackbots | Unauthorized access or intrusion attempt detected from Thor banned IP |
2020-07-14 13:20:14 |
| 118.27.4.225 | attackspambots | 2020-07-14T05:48:38.167848ns386461 sshd\[4071\]: Invalid user hernando from 118.27.4.225 port 34372 2020-07-14T05:48:38.172893ns386461 sshd\[4071\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=v118-27-4-225.o4kn.static.cnode.io 2020-07-14T05:48:40.022607ns386461 sshd\[4071\]: Failed password for invalid user hernando from 118.27.4.225 port 34372 ssh2 2020-07-14T05:55:06.631876ns386461 sshd\[9730\]: Invalid user jy from 118.27.4.225 port 52820 2020-07-14T05:55:06.636522ns386461 sshd\[9730\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=v118-27-4-225.o4kn.static.cnode.io ... |
2020-07-14 13:36:52 |
| 162.243.144.28 | attackspambots | Jun 13 20:14:54 mail postfix/postscreen[985]: DNSBL rank 4 for [162.243.144.28]:60388 ... |
2020-07-14 13:09:09 |
| 194.116.237.249 | attack | 2020-07-14 13:31:39 | |
| 103.142.139.114 | attack | Jul 14 07:05:35 vps687878 sshd\[30706\]: Failed password for invalid user jan from 103.142.139.114 port 54902 ssh2 Jul 14 07:08:12 vps687878 sshd\[31141\]: Invalid user testi from 103.142.139.114 port 46724 Jul 14 07:08:12 vps687878 sshd\[31141\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.142.139.114 Jul 14 07:08:15 vps687878 sshd\[31141\]: Failed password for invalid user testi from 103.142.139.114 port 46724 ssh2 Jul 14 07:10:51 vps687878 sshd\[31509\]: Invalid user ellis from 103.142.139.114 port 38542 Jul 14 07:10:51 vps687878 sshd\[31509\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.142.139.114 ... |
2020-07-14 13:30:13 |
| 192.99.34.42 | attackbots | 192.99.34.42 - - [14/Jul/2020:06:07:27 +0100] "POST /wp-login.php HTTP/1.1" 200 5437 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 192.99.34.42 - - [14/Jul/2020:06:08:18 +0100] "POST /wp-login.php HTTP/1.1" 200 5437 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 192.99.34.42 - - [14/Jul/2020:06:10:09 +0100] "POST /wp-login.php HTTP/1.1" 200 5437 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" ... |
2020-07-14 13:21:40 |
| 35.247.227.73 | attack | Jul 14 06:49:22 piServer sshd[6511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.247.227.73 Jul 14 06:49:24 piServer sshd[6511]: Failed password for invalid user fuser1 from 35.247.227.73 port 56410 ssh2 Jul 14 06:53:04 piServer sshd[6834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.247.227.73 ... |
2020-07-14 13:29:05 |
| 125.160.113.115 | attackspam | Automatic report - Port Scan Attack |
2020-07-14 13:09:32 |
| 14.63.174.149 | attack | Jul 14 03:52:18 onepixel sshd[734681]: Invalid user sito from 14.63.174.149 port 34837 Jul 14 03:52:18 onepixel sshd[734681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.63.174.149 Jul 14 03:52:18 onepixel sshd[734681]: Invalid user sito from 14.63.174.149 port 34837 Jul 14 03:52:20 onepixel sshd[734681]: Failed password for invalid user sito from 14.63.174.149 port 34837 ssh2 Jul 14 03:55:12 onepixel sshd[736292]: Invalid user fvs from 14.63.174.149 port 55699 |
2020-07-14 13:29:32 |
| 106.12.138.72 | attack | Jul 13 01:33:38 mail sshd[22961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.138.72 Jul 13 01:33:40 mail sshd[22961]: Failed password for invalid user 9737 from 106.12.138.72 port 53122 ssh2 ... |
2020-07-14 13:03:48 |