52.4.147.113 - IPInfo

Basic Info

City: Ashburn

Region: Virginia

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.4.147.113
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12646
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.4.147.113.			IN	A

;; AUTHORITY SECTION:
.			1093	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091500 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Sep 16 01:15:57 CST 2019
;; MSG SIZE  rcvd: 116

Host info

113.147.4.52.in-addr.arpa domain name pointer ec2-52-4-147-113.compute-1.amazonaws.com.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
113.147.4.52.in-addr.arpa	name = ec2-52-4-147-113.compute-1.amazonaws.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
51.116.186.100	attackspam	Sep 23 13:52:57 roki-contabo sshd\[32713\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.116.186.100 user=root Sep 23 13:53:00 roki-contabo sshd\[32713\]: Failed password for root from 51.116.186.100 port 58523 ssh2 Sep 23 14:21:07 roki-contabo sshd\[816\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.116.186.100 user=root Sep 23 14:21:10 roki-contabo sshd\[816\]: Failed password for root from 51.116.186.100 port 19679 ssh2 Sep 23 16:07:15 roki-contabo sshd\[2243\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.116.186.100 user=root Sep 23 13:52:57 roki-contabo sshd\[32713\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.116.186.100 user=root Sep 23 13:53:00 roki-contabo sshd\[32713\]: Failed password for root from 51.116.186.100 port 58523 ssh2 Sep 23 14:21:07 roki-contabo sshd\[816\]: pam_ ...	2020-09-24 06:36:56
87.145.222.6	attackspambots	Email rejected due to spam filtering	2020-09-24 06:57:06
212.70.149.68	attackspambots	Sep 24 00:46:01 web01.agentur-b-2.de postfix/smtps/smtpd[2288573]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 24 00:46:07 web01.agentur-b-2.de postfix/smtps/smtpd[2288573]: lost connection after AUTH from unknown[212.70.149.68] Sep 24 00:48:03 web01.agentur-b-2.de postfix/smtps/smtpd[2288573]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 24 00:48:09 web01.agentur-b-2.de postfix/smtps/smtpd[2288573]: lost connection after AUTH from unknown[212.70.149.68] Sep 24 00:50:04 web01.agentur-b-2.de postfix/smtps/smtpd[2288573]: warning: unknown[212.70.149.68]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-09-24 07:06:44
14.239.38.167	attackbots	1600901349 - 09/24/2020 00:49:09 Host: 14.239.38.167/14.239.38.167 Port: 445 TCP Blocked ...	2020-09-24 07:01:26
139.199.45.83	attackspambots	(sshd) Failed SSH login from 139.199.45.83 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 23 15:37:10 server5 sshd[20109]: Invalid user apps from 139.199.45.83 Sep 23 15:37:10 server5 sshd[20109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.45.83 Sep 23 15:37:12 server5 sshd[20109]: Failed password for invalid user apps from 139.199.45.83 port 51344 ssh2 Sep 23 15:49:28 server5 sshd[25497]: Invalid user ts3user from 139.199.45.83 Sep 23 15:49:28 server5 sshd[25497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.45.83	2020-09-24 06:58:39
139.213.220.70	attack	Sep 24 00:53:00 Invalid user joe from 139.213.220.70 port 52625	2020-09-24 07:05:51
103.131.71.106	attackbots	(mod_security) mod_security (id:210730) triggered by 103.131.71.106 (VN/Vietnam/bot-103-131-71-106.coccoc.com): 5 in the last 3600 secs	2020-09-24 06:36:09
222.186.15.115	attackbots	Sep 23 18:59:44 ny01 sshd[24037]: Failed password for root from 222.186.15.115 port 45531 ssh2 Sep 23 18:59:46 ny01 sshd[24037]: Failed password for root from 222.186.15.115 port 45531 ssh2 Sep 23 18:59:48 ny01 sshd[24037]: Failed password for root from 222.186.15.115 port 45531 ssh2	2020-09-24 07:02:08
188.166.144.207	attackbotsspam	Invalid user friend from 188.166.144.207 port 46786	2020-09-24 06:28:47
58.208.244.252	attackbots	Brute forcing email accounts	2020-09-24 06:30:32
14.248.84.104	attack	SMB	2020-09-24 06:42:22
103.62.232.234	attackspam	Unauthorized connection attempt from IP address 103.62.232.234 on Port 445(SMB)	2020-09-24 06:58:02
103.113.91.232	attack	2020-09-23 12:00:56.937530-0500 localhost smtpd[5411]: NOQUEUE: reject: RCPT from unknown[103.113.91.232]: 554 5.7.1 Service unavailable; Client host [103.113.91.232] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<00fd8aba.malenhance.co>	2020-09-24 06:39:44
178.62.124.26	attackbots	$f2bV_matches	2020-09-24 06:35:21
170.130.187.6	attackspambots	ET SCAN Suspicious inbound to mySQL port 3306 - port: 3306 proto: tcp cat: Potentially Bad Trafficbytes: 60	2020-09-24 06:59:49

Recently Reported IPs

123.2.59.83	208.70.252.142	56.89.142.38	139.205.2.236
69.26.94.72	24.234.185.93	68.244.152.113	153.196.22.27
119.104.64.247	130.113.180.45	52.51.124.52	23.102.169.219
202.121.128.187	2.6.11.81	97.233.149.30	150.252.9.152
206.189.130.87	100.162.5.27	14.19.167.177	223.73.14.244