Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Microsoft Corporation

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Invalid user 253 from 52.142.63.44 port 44131
2020-09-28 05:50:18
attackbotsspam
SSH Brute Force
2020-09-27 22:10:24
attackbotsspam
Sep 27 07:50:06 santamaria sshd\[22711\]: Invalid user 163 from 52.142.63.44
Sep 27 07:50:06 santamaria sshd\[22711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.142.63.44
Sep 27 07:50:08 santamaria sshd\[22711\]: Failed password for invalid user 163 from 52.142.63.44 port 12172 ssh2
...
2020-09-27 14:00:23
attackbots
Multiple SSH authentication failures from 52.142.63.44
2020-09-26 06:56:25
attackbotsspam
(sshd) Failed SSH login from 52.142.63.44 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 25 03:10:05 server sshd[2920]: Invalid user newserv from 52.142.63.44 port 23332
Sep 25 03:10:05 server sshd[2919]: Invalid user newserv from 52.142.63.44 port 23324
Sep 25 03:10:05 server sshd[2925]: Invalid user newserv from 52.142.63.44 port 23337
Sep 25 03:10:05 server sshd[2918]: Invalid user newserv from 52.142.63.44 port 23325
Sep 25 03:10:05 server sshd[2928]: Invalid user newserv from 52.142.63.44 port 23349
2020-09-25 15:40:13
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.142.63.44
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57614
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.142.63.44.			IN	A

;; AUTHORITY SECTION:
.			260	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020092500 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 25 15:40:10 CST 2020
;; MSG SIZE  rcvd: 116
Host info
Host 44.63.142.52.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 44.63.142.52.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
185.130.104.145 attackspam
SQL injection attempt.
2020-04-02 02:37:12
106.75.67.48 attack
" "
2020-04-02 02:19:33
185.51.39.149 attackspambots
Unauthorized connection attempt from IP address 185.51.39.149 on Port 445(SMB)
2020-04-02 02:24:01
125.105.29.74 attackbots
Time:     Wed Apr  1 04:41:07 2020 -0300
IP:       125.105.29.74 (CN/China/-)
Failures: 15 (ftpd)
Interval: 3600 seconds
Blocked:  Permanent Block
2020-04-02 02:42:21
3.120.129.224 attack
Time:     Wed Apr  1 05:56:27 2020 -0300
IP:       3.120.129.224 (DE/Germany/ec2-3-120-129-224.eu-central-1.compute.amazonaws.com)
Failures: 5 (smtpauth)
Interval: 3600 seconds
Blocked:  Permanent Block
2020-04-02 02:15:36
36.76.229.65 attack
Unauthorized connection attempt from IP address 36.76.229.65 on Port 445(SMB)
2020-04-02 02:42:48
141.98.80.27 attackspam
2020-04-01 dovecot_plain authenticator failed for \(\[141.98.80.27\]\) \[141.98.80.27\]: 535 Incorrect authentication data \(set_id=gisela.**REMOVED**@**REMOVED**.de\)
2020-04-01 dovecot_plain authenticator failed for \(\[141.98.80.27\]\) \[141.98.80.27\]: 535 Incorrect authentication data
2020-04-01 dovecot_plain authenticator failed for \(\[141.98.80.27\]\) \[141.98.80.27\]: 535 Incorrect authentication data
2020-04-02 02:11:59
62.234.139.150 attack
5x Failed Password
2020-04-02 02:13:04
51.75.142.177 attackspambots
fail2ban
2020-04-02 02:21:46
129.146.172.170 attack
Apr  1 17:40:18 localhost sshd\[6656\]: Invalid user bd from 129.146.172.170 port 54606
Apr  1 17:40:18 localhost sshd\[6656\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.146.172.170
Apr  1 17:40:20 localhost sshd\[6656\]: Failed password for invalid user bd from 129.146.172.170 port 54606 ssh2
...
2020-04-02 02:15:04
45.76.187.56 attackspam
Apr  1 17:11:01 host01 sshd[13714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.76.187.56 
Apr  1 17:11:02 host01 sshd[13714]: Failed password for invalid user adgadg from 45.76.187.56 port 37978 ssh2
Apr  1 17:15:46 host01 sshd[15007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.76.187.56 
...
2020-04-02 02:30:00
46.190.55.33 attack
400 BAD REQUEST
2020-04-02 02:32:44
61.187.87.140 attack
SSH bruteforce (Triggered fail2ban)
2020-04-02 02:11:05
172.94.22.65 attackspambots
Apr  1 14:44:24 plex sshd[10881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.94.22.65
Apr  1 14:44:24 plex sshd[10881]: Invalid user kako from 172.94.22.65 port 53948
Apr  1 14:44:25 plex sshd[10881]: Failed password for invalid user kako from 172.94.22.65 port 53948 ssh2
Apr  1 14:49:13 plex sshd[11005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.94.22.65  user=root
Apr  1 14:49:15 plex sshd[11005]: Failed password for root from 172.94.22.65 port 37916 ssh2
2020-04-02 02:19:05
45.220.84.13 attack
PHP DIESCAN Information Disclosure Vulnerability
2020-04-02 02:33:09

Recently Reported IPs

37.114.173.14 210.61.57.107 19.184.155.72 189.152.47.1
185.31.102.37 59.46.13.135 187.188.148.188 168.61.54.57
36.112.118.174 107.170.208.42 207.154.242.82 224.60.139.134
1.62.41.166 171.80.184.132 2.200.124.115 88.119.127.92
91.81.40.101 139.155.225.13 59.126.3.251 188.226.143.61