52.167.42.55 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Microsoft Corporation

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	2020-09-24T09:34:28.761252mail.thespaminator.com sshd[9848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.167.42.55 user=root 2020-09-24T09:34:30.922726mail.thespaminator.com sshd[9848]: Failed password for root from 52.167.42.55 port 62808 ssh2 ...	2020-09-24 21:44:37
attackspambots	Sep 24 07:35:53 fhem-rasp sshd[10733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.167.42.55 user=root Sep 24 07:35:54 fhem-rasp sshd[10733]: Failed password for root from 52.167.42.55 port 33394 ssh2 ...	2020-09-24 13:38:05
attack	$f2bV_matches	2020-09-24 05:06:36

Type

Details

Datetime

attackbotsspam

2020-09-24T09:34:28.761252mail.thespaminator.com sshd[9848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.167.42.55  user=root
2020-09-24T09:34:30.922726mail.thespaminator.com sshd[9848]: Failed password for root from 52.167.42.55 port 62808 ssh2
...

2020-09-24 21:44:37

attackspambots

Sep 24 07:35:53 fhem-rasp sshd[10733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.167.42.55  user=root
Sep 24 07:35:54 fhem-rasp sshd[10733]: Failed password for root from 52.167.42.55 port 33394 ssh2
...

2020-09-24 13:38:05

attack

$f2bV_matches

2020-09-24 05:06:36

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.167.42.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52863
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.167.42.55.			IN	A

;; AUTHORITY SECTION:
.			583	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020092301 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 24 05:06:33 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 55.42.167.52.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 55.42.167.52.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
77.247.181.163	attackspambots	$f2bV_matches	2019-09-30 21:51:49
149.202.223.136	attack	\[2019-09-30 09:38:59\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '149.202.223.136:58098' - Wrong password \[2019-09-30 09:38:59\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-30T09:38:59.351-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="28000024",SessionID="0x7f1e1c3b69e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/149.202.223.136/58098",Challenge="12d4e115",ReceivedChallenge="12d4e115",ReceivedHash="9754a5b19d150dfba43db403122c08a4" \[2019-09-30 09:39:13\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '149.202.223.136:49601' - Wrong password \[2019-09-30 09:39:13\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-30T09:39:13.343-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="28000028",SessionID="0x7f1e1c35ea18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/149.202	2019-09-30 21:43:15
3.227.52.158	attack	Message ID Created at: Sun, Sep 29, 2019 at 5:25 PM (Delivered after 19941 seconds) From: Serexin Male Enhancement To: Subject: Serexin - Stronger erections enough to drive your partner crazy! SPF: PASS with IP 3.227.52.158	2019-09-30 21:10:53
222.181.144.246	attackspambots	Automated reporting of FTP Brute Force	2019-09-30 21:45:56
91.241.59.25	attackspam	Sep 30 15:37:54 lnxmysql61 sshd[28160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.241.59.25	2019-09-30 21:50:42
185.107.80.2	attack	Attempted to connect 2 times to port 53 UDP	2019-09-30 21:47:30
178.159.249.66	attackspambots	2019-09-30T13:17:19.982869abusebot-6.cloudsearch.cf sshd\[16303\]: Invalid user mktg3 from 178.159.249.66 port 50190	2019-09-30 21:26:48
54.38.157.147	attackbots	Sep 30 14:53:47 SilenceServices sshd[12221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.157.147 Sep 30 14:53:49 SilenceServices sshd[12221]: Failed password for invalid user admin from 54.38.157.147 port 41576 ssh2 Sep 30 14:57:56 SilenceServices sshd[13300]: Failed password for root from 54.38.157.147 port 55214 ssh2	2019-09-30 21:16:52
52.17.180.188	attackbots	$f2bV_matches_ltvn	2019-09-30 21:34:49
65.151.157.14	attack	Sep 12 21:58:00 vtv3 sshd\[11024\]: Invalid user testtest from 65.151.157.14 port 37114 Sep 12 21:58:00 vtv3 sshd\[11024\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.151.157.14 Sep 12 21:58:03 vtv3 sshd\[11024\]: Failed password for invalid user testtest from 65.151.157.14 port 37114 ssh2 Sep 12 22:03:47 vtv3 sshd\[13708\]: Invalid user testuser from 65.151.157.14 port 46050 Sep 12 22:03:47 vtv3 sshd\[13708\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.151.157.14 Sep 12 22:15:30 vtv3 sshd\[19687\]: Invalid user sftpuser from 65.151.157.14 port 35680 Sep 12 22:15:30 vtv3 sshd\[19687\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.151.157.14 Sep 12 22:15:32 vtv3 sshd\[19687\]: Failed password for invalid user sftpuser from 65.151.157.14 port 35680 ssh2 Sep 12 22:21:14 vtv3 sshd\[22438\]: Invalid user git from 65.151.157.14 port 44610 Sep 12 22:21:14 vtv3 sshd\[2	2019-09-30 21:20:32
189.254.33.157	attackbots	ssh failed login	2019-09-30 21:13:46
27.152.112.237	attackspam	Sep 30 14:28:05 icinga sshd[43445]: Failed password for root from 27.152.112.237 port 32797 ssh2 Sep 30 14:28:09 icinga sshd[43445]: Failed password for root from 27.152.112.237 port 32797 ssh2 Sep 30 14:28:12 icinga sshd[43445]: Failed password for root from 27.152.112.237 port 32797 ssh2 Sep 30 14:28:17 icinga sshd[43445]: Failed password for root from 27.152.112.237 port 32797 ssh2 ...	2019-09-30 21:26:05
46.49.125.119	attackbotsspam	445/tcp 445/tcp 445/tcp [2019-08-24/09-30]3pkt	2019-09-30 21:52:21
60.15.34.250	attackbots	202/tcp 101/tcp 10020/tcp... [2019-08-05/09-28]38pkt,25pt.(tcp)	2019-09-30 21:34:17
111.230.53.144	attack	Sep 30 14:59:14 vps01 sshd[12078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.53.144 Sep 30 14:59:16 vps01 sshd[12078]: Failed password for invalid user rootme from 111.230.53.144 port 40690 ssh2	2019-09-30 21:15:19

Recently Reported IPs

108.94.236.243	58.87.72.42	78.203.99.254	52.255.200.70
114.33.196.127	61.72.97.1	222.187.227.223	42.248.78.56
172.105.104.115	2.56.205.210	45.10.24.11	34.228.178.96
128.199.148.70	119.45.208.92	114.24.231.195	52.188.148.170
89.248.174.11	52.188.175.110	52.166.5.30	52.143.71.231