城市(city): Ashburn
省份(region): Virginia
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 52.0.0.0 - 52.79.255.255
CIDR: 52.64.0.0/12, 52.0.0.0/10
NetName: AT-88-Z
NetHandle: NET-52-0-0-0-1
Parent: NET52 (NET-52-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon Technologies Inc. (AT-88-Z)
RegDate: 1991-12-19
Updated: 2024-02-05
Comment: Geofeed http://ip-ranges.amazonaws.com/geo-ip-feed.csv
Ref: https://rdap.arin.net/registry/ip/52.0.0.0
OrgName: Amazon Technologies Inc.
OrgId: AT-88-Z
Address: 410 Terry Ave N.
City: Seattle
StateProv: WA
PostalCode: 98109
Country: US
RegDate: 2011-12-08
Updated: 2026-04-17
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://rdap.arin.net/registry/entity/AT-88-Z
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
OrgDNSHandle: DNS1131-ARIN
OrgDNSName: DNS
OrgDNSPhone: +1-202-555-0000
OrgDNSEmail: ipmanagement+dns@amazon.com
OrgDNSRef: https://rdap.arin.net/registry/entity/DNS1131-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.71.149.115
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11398
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;52.71.149.115. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026060901 1800 900 604800 86400
;; Query time: 27 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 10 10:30:41 CST 2026
;; MSG SIZE rcvd: 106115.149.71.52.in-addr.arpa domain name pointer ec2-52-71-149-115.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
115.149.71.52.in-addr.arpa name = ec2-52-71-149-115.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 46.101.17.215 | attack | Oct 25 05:54:34 lnxweb61 sshd[14792]: Failed password for root from 46.101.17.215 port 37856 ssh2 Oct 25 05:57:55 lnxweb61 sshd[17548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.17.215 Oct 25 05:57:57 lnxweb61 sshd[17548]: Failed password for invalid user odroid from 46.101.17.215 port 47966 ssh2 |
2019-10-25 12:09:56 |
| 211.151.6.9 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-10-25 12:28:53 |
| 46.48.175.222 | attackspam | Chat Spam |
2019-10-25 12:33:51 |
| 124.81.107.238 | attackbotsspam | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/124.81.107.238/ ID - 1H : (50) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : ID NAME ASN : ASN4795 IP : 124.81.107.238 CIDR : 124.81.104.0/22 PREFIX COUNT : 333 UNIQUE IP COUNT : 856064 ATTACKS DETECTED ASN4795 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-10-25 05:57:45 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN - data recovery |
2019-10-25 12:00:01 |
| 138.122.202.200 | attackspambots | Oct 25 03:57:21 venus sshd\[32401\]: Invalid user ed from 138.122.202.200 port 44438 Oct 25 03:57:21 venus sshd\[32401\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200 Oct 25 03:57:23 venus sshd\[32401\]: Failed password for invalid user ed from 138.122.202.200 port 44438 ssh2 ... |
2019-10-25 12:10:23 |
| 217.165.15.44 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-10-25 08:19:29 |
| 198.200.53.83 | attackbots | IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/198.200.53.83/ US - 1H : (301) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : US NAME ASN : ASN54600 IP : 198.200.53.83 CIDR : 198.200.32.0/19 PREFIX COUNT : 173 UNIQUE IP COUNT : 500224 ATTACKS DETECTED ASN54600 : 1H - 1 3H - 4 6H - 6 12H - 9 24H - 10 DateTime : 2019-10-25 05:56:42 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery |
2019-10-25 12:36:49 |
| 39.96.194.104 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2019-10-25 12:24:08 |
| 222.186.175.151 | attack | Oct 25 06:23:14 vserver sshd\[7948\]: Failed password for root from 222.186.175.151 port 59844 ssh2Oct 25 06:23:19 vserver sshd\[7948\]: Failed password for root from 222.186.175.151 port 59844 ssh2Oct 25 06:23:24 vserver sshd\[7948\]: Failed password for root from 222.186.175.151 port 59844 ssh2Oct 25 06:23:28 vserver sshd\[7948\]: Failed password for root from 222.186.175.151 port 59844 ssh2 ... |
2019-10-25 12:26:12 |
| 45.136.109.215 | attack | Oct 25 06:08:38 mc1 kernel: \[3262860.157905\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.215 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=46033 PROTO=TCP SPT=43015 DPT=4984 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 25 06:11:15 mc1 kernel: \[3263016.474832\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.215 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=9156 PROTO=TCP SPT=43015 DPT=1076 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 25 06:12:12 mc1 kernel: \[3263073.215208\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.215 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=24058 PROTO=TCP SPT=43015 DPT=759 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-10-25 12:27:09 |
| 41.208.150.114 | attack | Oct 25 00:10:34 ny01 sshd[29576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.208.150.114 Oct 25 00:10:37 ny01 sshd[29576]: Failed password for invalid user password from 41.208.150.114 port 59127 ssh2 Oct 25 00:14:59 ny01 sshd[29999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.208.150.114 |
2019-10-25 12:41:36 |
| 213.39.53.241 | attackbots | Oct 25 05:56:34 v22018076622670303 sshd\[12894\]: Invalid user server from 213.39.53.241 port 59090 Oct 25 05:56:34 v22018076622670303 sshd\[12894\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.39.53.241 Oct 25 05:56:37 v22018076622670303 sshd\[12894\]: Failed password for invalid user server from 213.39.53.241 port 59090 ssh2 ... |
2019-10-25 12:39:19 |
| 200.169.223.98 | attackbotsspam | 2019-10-24T22:03:59.4258351495-001 sshd\[34905\]: Invalid user Cisco from 200.169.223.98 port 46278 2019-10-24T22:03:59.4330011495-001 sshd\[34905\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.169.223.98 2019-10-24T22:04:01.3528591495-001 sshd\[34905\]: Failed password for invalid user Cisco from 200.169.223.98 port 46278 ssh2 2019-10-24T23:43:14.3890811495-001 sshd\[38481\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.169.223.98 user=root 2019-10-24T23:43:16.4935871495-001 sshd\[38481\]: Failed password for root from 200.169.223.98 port 60888 ssh2 2019-10-24T23:47:42.7253171495-001 sshd\[38691\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.169.223.98 user=root ... |
2019-10-25 12:03:15 |
| 188.166.68.8 | attackbots | SSH bruteforce (Triggered fail2ban) |
2019-10-25 12:12:38 |
| 151.80.41.64 | attackspambots | Oct 24 18:26:23 hpm sshd\[29610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns398062.ip-151-80-41.eu user=root Oct 24 18:26:25 hpm sshd\[29610\]: Failed password for root from 151.80.41.64 port 54322 ssh2 Oct 24 18:30:08 hpm sshd\[29900\]: Invalid user sa from 151.80.41.64 Oct 24 18:30:08 hpm sshd\[29900\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns398062.ip-151-80-41.eu Oct 24 18:30:10 hpm sshd\[29900\]: Failed password for invalid user sa from 151.80.41.64 port 44526 ssh2 |
2019-10-25 12:40:46 |