City: Ashburn
Region: Virginia
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 52.0.0.0 - 52.79.255.255
CIDR: 52.0.0.0/10, 52.64.0.0/12
NetName: AT-88-Z
NetHandle: NET-52-0-0-0-1
Parent: NET52 (NET-52-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon Technologies Inc. (AT-88-Z)
RegDate: 1991-12-19
Updated: 2024-02-05
Comment: Geofeed http://ip-ranges.amazonaws.com/geo-ip-feed.csv
Ref: https://rdap.arin.net/registry/ip/52.0.0.0
OrgName: Amazon Technologies Inc.
OrgId: AT-88-Z
Address: 410 Terry Ave N.
City: Seattle
StateProv: WA
PostalCode: 98109
Country: US
RegDate: 2011-12-08
Updated: 2026-04-17
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: https://rdap.arin.net/registry/entity/AT-88-Z
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
OrgDNSHandle: DNS1131-ARIN
OrgDNSName: DNS
OrgDNSPhone: +1-202-555-0000
OrgDNSEmail: ipmanagement+dns@amazon.com
OrgDNSRef: https://rdap.arin.net/registry/entity/DNS1131-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.72.250.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12665
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;52.72.250.138. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026082000 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Aug 20 15:30:31 CST 2026
;; MSG SIZE rcvd: 106138.250.72.52.in-addr.arpa domain name pointer ec2-52-72-250-138.compute-1.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
138.250.72.52.in-addr.arpa name = ec2-52-72-250-138.compute-1.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 78.128.113.227 | attackbots | Jul 21 05:55:30 vpn01 sshd[22268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.128.113.227 Jul 21 05:55:31 vpn01 sshd[22268]: Failed password for invalid user admin from 78.128.113.227 port 47833 ssh2 ... |
2020-07-21 14:57:02 |
| 203.98.76.172 | attack | Jul 20 22:59:07 propaganda sshd[26963]: Connection from 203.98.76.172 port 32966 on 10.0.0.160 port 22 rdomain "" Jul 20 22:59:07 propaganda sshd[26963]: Connection closed by 203.98.76.172 port 32966 [preauth] |
2020-07-21 14:30:22 |
| 128.14.236.157 | attackspambots | Invalid user es from 128.14.236.157 port 35260 |
2020-07-21 14:23:11 |
| 168.0.175.247 | attackspam | 2020-07-21T08:38:00.846227ks3355764 sshd[15992]: Invalid user gerrit from 168.0.175.247 port 50081 2020-07-21T08:38:03.280044ks3355764 sshd[15992]: Failed password for invalid user gerrit from 168.0.175.247 port 50081 ssh2 ... |
2020-07-21 14:46:42 |
| 219.250.188.106 | attack | 2020-07-21T07:09:35.211456mail.standpoint.com.ua sshd[24753]: Invalid user clayton from 219.250.188.106 port 60234 2020-07-21T07:09:35.213973mail.standpoint.com.ua sshd[24753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.250.188.106 2020-07-21T07:09:35.211456mail.standpoint.com.ua sshd[24753]: Invalid user clayton from 219.250.188.106 port 60234 2020-07-21T07:09:36.466614mail.standpoint.com.ua sshd[24753]: Failed password for invalid user clayton from 219.250.188.106 port 60234 ssh2 2020-07-21T07:13:52.656017mail.standpoint.com.ua sshd[25395]: Invalid user meng from 219.250.188.106 port 36509 ... |
2020-07-21 14:53:52 |
| 206.189.18.40 | attackspam | 2020-07-21T01:29:30.0325591495-001 sshd[46717]: Invalid user chaitanya from 206.189.18.40 port 40718 2020-07-21T01:29:32.2264151495-001 sshd[46717]: Failed password for invalid user chaitanya from 206.189.18.40 port 40718 ssh2 2020-07-21T01:33:48.4718561495-001 sshd[46889]: Invalid user simple from 206.189.18.40 port 54558 2020-07-21T01:33:48.4759971495-001 sshd[46889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.18.40 2020-07-21T01:33:48.4718561495-001 sshd[46889]: Invalid user simple from 206.189.18.40 port 54558 2020-07-21T01:33:50.4202891495-001 sshd[46889]: Failed password for invalid user simple from 206.189.18.40 port 54558 ssh2 ... |
2020-07-21 14:49:29 |
| 119.29.205.52 | attackspam | Jul 21 07:08:01 ncomp sshd[22561]: Invalid user tix from 119.29.205.52 Jul 21 07:08:01 ncomp sshd[22561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.205.52 Jul 21 07:08:01 ncomp sshd[22561]: Invalid user tix from 119.29.205.52 Jul 21 07:08:02 ncomp sshd[22561]: Failed password for invalid user tix from 119.29.205.52 port 60692 ssh2 |
2020-07-21 14:44:46 |
| 106.12.59.245 | attackbots | DATE:2020-07-21 07:31:04,IP:106.12.59.245,MATCHES:10,PORT:ssh |
2020-07-21 14:36:59 |
| 51.210.107.15 | attackbots | 2020-07-21T06:22:44.847336shield sshd\[13399\]: Invalid user test from 51.210.107.15 port 38544 2020-07-21T06:22:44.856719shield sshd\[13399\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vps-cc98641f.vps.ovh.net 2020-07-21T06:22:46.869291shield sshd\[13399\]: Failed password for invalid user test from 51.210.107.15 port 38544 ssh2 2020-07-21T06:30:26.786933shield sshd\[14025\]: Invalid user raspberrypi from 51.210.107.15 port 54016 2020-07-21T06:30:26.791014shield sshd\[14025\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vps-cc98641f.vps.ovh.net |
2020-07-21 14:45:05 |
| 223.196.67.195 | attackspam | Brute-force attempt banned |
2020-07-21 14:22:17 |
| 188.219.251.4 | attack | Jul 21 07:34:47 havingfunrightnow sshd[9120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.219.251.4 Jul 21 07:34:48 havingfunrightnow sshd[9120]: Failed password for invalid user test from 188.219.251.4 port 49570 ssh2 Jul 21 07:49:41 havingfunrightnow sshd[9424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.219.251.4 ... |
2020-07-21 14:40:11 |
| 181.189.144.206 | attack | 2020-07-20T21:56:15.494571linuxbox-skyline sshd[109249]: Invalid user duw from 181.189.144.206 port 45182 ... |
2020-07-21 14:22:47 |
| 82.117.196.30 | attackbotsspam | Invalid user content from 82.117.196.30 port 37488 |
2020-07-21 14:25:45 |
| 222.186.175.202 | attackspambots | Jul 21 08:53:54 piServer sshd[32273]: Failed password for root from 222.186.175.202 port 34436 ssh2 Jul 21 08:53:59 piServer sshd[32273]: Failed password for root from 222.186.175.202 port 34436 ssh2 Jul 21 08:54:04 piServer sshd[32273]: Failed password for root from 222.186.175.202 port 34436 ssh2 Jul 21 08:54:09 piServer sshd[32273]: Failed password for root from 222.186.175.202 port 34436 ssh2 ... |
2020-07-21 14:59:48 |
| 60.165.219.14 | attackbotsspam | $f2bV_matches |
2020-07-21 14:57:29 |