52.192.2.54 - IPInfo

Basic Info

City: Tokyo

Region: Tokyo

Country: Japan

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
52.192.249.155	attack	Oct 1 17:38:39 vps691689 sshd[9191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.192.249.155 Oct 1 17:38:41 vps691689 sshd[9191]: Failed password for invalid user bank from 52.192.249.155 port 47689 ssh2 ...	2019-10-01 23:52:59
52.192.249.155	attack	Sep 29 20:36:14 hanapaa sshd\[17628\]: Invalid user xq from 52.192.249.155 Sep 29 20:36:14 hanapaa sshd\[17628\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-52-192-249-155.ap-northeast-1.compute.amazonaws.com Sep 29 20:36:16 hanapaa sshd\[17628\]: Failed password for invalid user xq from 52.192.249.155 port 44295 ssh2 Sep 29 20:40:37 hanapaa sshd\[18132\]: Invalid user alberg from 52.192.249.155 Sep 29 20:40:37 hanapaa sshd\[18132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-52-192-249-155.ap-northeast-1.compute.amazonaws.com	2019-09-30 20:16:11

Type

Details

Datetime

52.192.249.155

attack

Oct  1 17:38:39 vps691689 sshd[9191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.192.249.155
Oct  1 17:38:41 vps691689 sshd[9191]: Failed password for invalid user bank from 52.192.249.155 port 47689 ssh2
...

2019-10-01 23:52:59

52.192.249.155

attack

Sep 29 20:36:14 hanapaa sshd\[17628\]: Invalid user xq from 52.192.249.155
Sep 29 20:36:14 hanapaa sshd\[17628\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-52-192-249-155.ap-northeast-1.compute.amazonaws.com
Sep 29 20:36:16 hanapaa sshd\[17628\]: Failed password for invalid user xq from 52.192.249.155 port 44295 ssh2
Sep 29 20:40:37 hanapaa sshd\[18132\]: Invalid user alberg from 52.192.249.155
Sep 29 20:40:37 hanapaa sshd\[18132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-52-192-249-155.ap-northeast-1.compute.amazonaws.com

2019-09-30 20:16:11

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.192.2.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30387
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;52.192.2.54.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025090201 1800 900 604800 86400

;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 03 03:06:29 CST 2025
;; MSG SIZE  rcvd: 104

Host info

54.2.192.52.in-addr.arpa domain name pointer ec2-52-192-2-54.ap-northeast-1.compute.amazonaws.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
54.2.192.52.in-addr.arpa	name = ec2-52-192-2-54.ap-northeast-1.compute.amazonaws.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
92.118.161.17	attackbots	5351/udp 47808/udp 5986/tcp... [2019-09-17/11-15]61pkt,41pt.(tcp),8pt.(udp)	2019-11-16 13:31:33
91.92.207.220	attackspam	Automatic report - Banned IP Access	2019-11-16 13:19:07
80.82.77.86	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2019-11-16 13:15:14
193.169.252.215	attackspambots	47808/udp 4800/udp 44818/tcp... [2019-09-15/11-16]59pkt,12pt.(tcp),10pt.(udp)	2019-11-16 13:13:58
119.188.210.75	attackspam	Lines containing failures of 119.188.210.75 Nov 14 06:03:35 zabbix sshd[67015]: Invalid user athira from 119.188.210.75 port 43202 Nov 14 06:03:35 zabbix sshd[67015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.188.210.75 Nov 14 06:03:36 zabbix sshd[67015]: Failed password for invalid user athira from 119.188.210.75 port 43202 ssh2 Nov 14 06:03:36 zabbix sshd[67015]: Received disconnect from 119.188.210.75 port 43202:11: Bye Bye [preauth] Nov 14 06:03:36 zabbix sshd[67015]: Disconnected from invalid user athira 119.188.210.75 port 43202 [preauth] Nov 14 06:21:46 zabbix sshd[79653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.188.210.75 user=r.r Nov 14 06:21:49 zabbix sshd[79653]: Failed password for r.r from 119.188.210.75 port 34903 ssh2 Nov 14 06:21:49 zabbix sshd[79653]: Received disconnect from 119.188.210.75 port 34903:11: Bye Bye [preauth] Nov 14 06:21:49 zabbix sshd[79........ ------------------------------	2019-11-16 13:03:15
45.143.220.60	attack	\[2019-11-15 23:47:34\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-15T23:47:34.957-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="01146431313352",SessionID="0x7fdf2c5596c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.60/5078",ACLName="no_extension_match" \[2019-11-15 23:52:04\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-15T23:52:04.058-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="901146431313352",SessionID="0x7fdf2c0493b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.60/5095",ACLName="no_extension_match" \[2019-11-15 23:56:32\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-15T23:56:32.839-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="0046431313352",SessionID="0x7fdf2c5596c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.60/5103",ACLName="no_extension	2019-11-16 13:04:36
198.108.66.176	attack	20000/tcp 8088/tcp 88/tcp... [2019-09-22/11-16]17pkt,16pt.(tcp)	2019-11-16 13:17:49
122.228.19.80	attackspambots	1604/udp 771/tcp 4500/udp... [2019-09-15/11-16]1764pkt,283pt.(tcp),50pt.(udp)	2019-11-16 13:40:05
119.29.170.120	attackspam	Nov 16 04:50:43 hcbbdb sshd\[15681\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.170.120 user=root Nov 16 04:50:44 hcbbdb sshd\[15681\]: Failed password for root from 119.29.170.120 port 46794 ssh2 Nov 16 04:56:39 hcbbdb sshd\[16291\]: Invalid user gateway from 119.29.170.120 Nov 16 04:56:39 hcbbdb sshd\[16291\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.170.120 Nov 16 04:56:41 hcbbdb sshd\[16291\]: Failed password for invalid user gateway from 119.29.170.120 port 54242 ssh2	2019-11-16 13:00:56
45.143.220.16	attackspam	\[2019-11-16 00:08:35\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-16T00:08:35.324-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="21846262229920",SessionID="0x7fdf2c5e87f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.16/60100",ACLName="no_extension_match" \[2019-11-16 00:12:11\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-16T00:12:11.894-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="21946262229920",SessionID="0x7fdf2c0493b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.16/65054",ACLName="no_extension_match" \[2019-11-16 00:15:17\] SECURITY\[2634\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-11-16T00:15:17.582-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="22046262229920",SessionID="0x7fdf2c0493b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.16/56125",ACLName="no_extens	2019-11-16 13:15:59
170.247.43.142	attackspam	2019-11-16 H=170-247-43-142.westlink.net.br \[170.247.43.142\] sender verify fail for \: Unrouteable address 2019-11-16 H=170-247-43-142.westlink.net.br \[170.247.43.142\] F=\ rejected RCPT \: Sender verify failed 2019-11-16 H=170-247-43-142.westlink.net.br \[170.247.43.142\] F=\ rejected RCPT \: Sender verify failed	2019-11-16 13:09:25
37.49.227.202	attackbots	32414/udp 37810/udp 1434/udp... [2019-09-15/11-16]486pkt,2pt.(tcp),24pt.(udp)	2019-11-16 13:12:10
123.125.71.33	attackbotsspam	Bad bot/spoofed identity	2019-11-16 13:30:42
88.227.13.231	attackspam	Automatic report - Port Scan Attack	2019-11-16 13:26:29
88.235.201.136	attackspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/88.235.201.136/ TR - 1H : (84) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : TR NAME ASN : ASN9121 IP : 88.235.201.136 CIDR : 88.235.192.0/19 PREFIX COUNT : 4577 UNIQUE IP COUNT : 6868736 ATTACKS DETECTED ASN9121 : 1H - 1 3H - 4 6H - 13 12H - 24 24H - 60 DateTime : 2019-11-16 05:56:24 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-16 13:10:00

Recently Reported IPs

52.56.64.145	52.13.66.137	51.21.152.169	50.18.145.180
47.129.244.10	46.137.35.55	44.250.176.241	43.207.36.48
43.206.120.244	43.202.100.57	3.99.168.82	3.8.98.164
3.8.90.10	3.8.119.138	3.72.45.16	3.65.27.102
3.65.25.67	35.94.10.178	35.85.245.204	35.77.79.15