52.20.199.204 - IPInfo

Basic Info

City: Ashburn

Region: Virginia

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

b'
; <<>> DiG 9.11.3-1ubuntu1.15-Ubuntu <<>> 52.20.199.204
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29254
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;52.20.199.204.			IN	A

;; Query time: 1 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: Sat Jun 26 18:05:29 CST 2021
;; MSG SIZE  rcvd: 42

'

Host info

204.199.20.52.in-addr.arpa domain name pointer ec2-52-20-199-204.compute-1.amazonaws.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
204.199.20.52.in-addr.arpa	name = ec2-52-20-199-204.compute-1.amazonaws.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
2.229.41.133	attackbots	Automatic report - Port Scan Attack	2019-10-07 13:04:34
110.185.106.47	attackbotsspam	Oct 7 06:55:08 MK-Soft-VM7 sshd[8679]: Failed password for root from 110.185.106.47 port 49444 ssh2 ...	2019-10-07 13:15:42
217.61.14.223	attackspam	2019-10-07T05:16:27.408982shield sshd\[1289\]: Invalid user Billy@2017 from 217.61.14.223 port 53998 2019-10-07T05:16:27.414249shield sshd\[1289\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.61.14.223 2019-10-07T05:16:29.467668shield sshd\[1289\]: Failed password for invalid user Billy@2017 from 217.61.14.223 port 53998 ssh2 2019-10-07T05:20:36.482930shield sshd\[1778\]: Invalid user Jelszo_123 from 217.61.14.223 port 37174 2019-10-07T05:20:36.488471shield sshd\[1778\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.61.14.223	2019-10-07 13:42:45
158.69.217.87	attackspam	Automatic report - Banned IP Access	2019-10-07 13:50:50
51.75.204.92	attackbots	Oct 7 07:40:12 MK-Soft-VM7 sshd[9270]: Failed password for root from 51.75.204.92 port 35958 ssh2 ...	2019-10-07 13:54:11
77.247.110.17	attackspambots	\[2019-10-07 01:03:20\] NOTICE\[1887\] chan_sip.c: Registration from '"1108" \' failed for '77.247.110.17:5301' - Wrong password \[2019-10-07 01:03:20\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-07T01:03:20.772-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1108",SessionID="0x7fc3ac5ddd88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.17/5301",Challenge="0ae1f25f",ReceivedChallenge="0ae1f25f",ReceivedHash="3acac39ac494001346f71777c380a1ed" \[2019-10-07 01:03:20\] NOTICE\[1887\] chan_sip.c: Registration from '"1108" \' failed for '77.247.110.17:5301' - Wrong password \[2019-10-07 01:03:20\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-07T01:03:20.884-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1108",SessionID="0x7fc3ac428948",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UD	2019-10-07 13:41:21
52.39.194.41	attackbots	10/07/2019-07:06:07.291270 52.39.194.41 Protocol: 6 SURICATA TLS invalid record/traffic	2019-10-07 13:20:03
112.86.147.182	attackspam	Oct 7 06:52:18 www sshd\[45784\]: Invalid user Qwerty!@\# from 112.86.147.182 Oct 7 06:52:18 www sshd\[45784\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.86.147.182 Oct 7 06:52:20 www sshd\[45784\]: Failed password for invalid user Qwerty!@\# from 112.86.147.182 port 40376 ssh2 ...	2019-10-07 13:45:07
139.199.183.185	attackbots	Oct 7 07:41:57 vps691689 sshd[29253]: Failed password for root from 139.199.183.185 port 36374 ssh2 Oct 7 07:46:36 vps691689 sshd[29410]: Failed password for root from 139.199.183.185 port 42296 ssh2 ...	2019-10-07 13:47:35
122.45.76.110	attackbotsspam	Unauthorised access (Oct 7) SRC=122.45.76.110 LEN=40 TTL=50 ID=24755 TCP DPT=8080 WINDOW=37756 SYN Unauthorised access (Oct 7) SRC=122.45.76.110 LEN=40 TTL=50 ID=56859 TCP DPT=8080 WINDOW=37756 SYN Unauthorised access (Oct 6) SRC=122.45.76.110 LEN=40 TTL=50 ID=4920 TCP DPT=8080 WINDOW=54969 SYN	2019-10-07 13:11:18
165.227.154.59	attack	Automatic report - Banned IP Access	2019-10-07 13:07:16
173.245.239.67	attack	(imapd) Failed IMAP login from 173.245.239.67 (US/United States/-): 1 in the last 3600 secs	2019-10-07 13:27:13
122.224.214.18	attackbots	Oct 7 06:55:02 legacy sshd[8892]: Failed password for root from 122.224.214.18 port 41916 ssh2 Oct 7 06:59:40 legacy sshd[9085]: Failed password for root from 122.224.214.18 port 49938 ssh2 ...	2019-10-07 13:10:27
202.90.198.213	attack	Oct 7 05:53:20 pornomens sshd\[9517\]: Invalid user Radio123 from 202.90.198.213 port 44288 Oct 7 05:53:20 pornomens sshd\[9517\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.90.198.213 Oct 7 05:53:21 pornomens sshd\[9517\]: Failed password for invalid user Radio123 from 202.90.198.213 port 44288 ssh2 ...	2019-10-07 13:10:03
185.211.245.170	attack	IP: 185.211.245.170 ASN: AS202984 Chernyshov Aleksandr Aleksandrovich Port: Message Submission 587 Found in one or more Blacklists Date: 7/10/2019 5:41:59 AM UTC	2019-10-07 13:46:00

Recently Reported IPs

212.102.35.12	194.127.172.101	45.177.56.143	45.32.100.213
85.234.120.84	181.177.14.167	77.220.195.125	183.232.58.241
49.36.156.126	174.253.82.45	187.3.220.49	93.170.89.226
201.22.138.25	95.82.114.78	200.93.78.47	34.83.125.222
79.212.124.138	45.32.110.43	45.32.110.16	45.32.110.123