Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Amazon Technologies Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Make a comment on this IP
Type Details Datetime
attack 
Brute force VPN server
 2020-06-26 08:00:31
attack 
Brute force attack against VPN service
 2020-04-12 19:00:47
Comments on same subnet:
IP Type Details Datetime
52.42.253.100 attack 
11/26/2019-11:29:07.732906 52.42.253.100 Protocol: 6 SURICATA TLS invalid record/traffic
 2019-11-26 18:47:12
52.42.253.100 attackspambots 
11/25/2019-10:02:02.227775 52.42.253.100 Protocol: 6 SURICATA TLS invalid record/traffic
 2019-11-25 18:12:29
52.42.253.100 attack 
11/25/2019-06:20:02.050391 52.42.253.100 Protocol: 6 SURICATA TLS invalid record/traffic
 2019-11-25 13:20:50
52.42.233.100 attackbotsspam 
As always with amazon web services
 2019-10-03 04:37:17
52.42.226.175 attack 
hacker
 2019-06-23 21:11:22
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.42.2.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32188
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.42.2.56.			IN	A

;; AUTHORITY SECTION:
.			574	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020041200 1800 900 604800 86400

;; Query time: 331 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Apr 12 19:00:44 CST 2020
;; MSG SIZE  rcvd: 114
Host info
56.2.42.52.in-addr.arpa domain name pointer ec2-52-42-2-56.us-west-2.compute.amazonaws.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
56.2.42.52.in-addr.arpa	name = ec2-52-42-2-56.us-west-2.compute.amazonaws.com.

Authoritative answers can be found from:
Related IP info:
52.42.2.6
52.42.2.102
52.42.2.195
52.42.2.160
52.42.2.16
52.42.2.222
52.42.2.153
52.42.2.202
52.42.2.143
52.42.2.83
52.42.2.185
52.42.2.89
52.42.2.40
52.42.2.31
52.42.2.211
52.42.2.76
52.42.2.240
52.42.2.73
52.42.2.137
52.42.2.95
52.42.2.196
52.42.2.237
52.42.2.241
52.42.2.142
52.42.2.154
52.42.2.250
52.42.2.54
52.42.2.66
52.42.2.64
52.42.2.223
52.42.2.91
52.42.2.57
52.42.2.70
52.42.2.18
52.42.2.87
52.42.2.166
52.42.2.24
52.42.2.44
52.42.2.127
52.42.2.111
52.42.2.58
52.42.2.214
52.42.2.179
52.42.2.172
52.42.2.173
52.42.2.42
52.42.2.194
52.42.2.39
52.42.2.28
52.42.2.189
52.42.2.122
52.42.2.7
52.42.2.165
52.42.2.123
52.42.2.120
52.42.2.105
52.42.2.109
52.42.2.147
52.42.2.8
52.42.2.47
52.42.2.93
52.42.2.65
52.42.2.249
52.42.2.136
52.42.2.174
52.42.2.99
52.42.2.119
52.42.2.81
52.42.2.53
52.42.2.226
52.42.2.51
52.42.2.79
52.42.2.74
52.42.2.251
52.42.2.50
52.42.2.41
52.42.2.114
52.42.2.177
52.42.2.150
52.42.2.234
52.42.2.139
52.42.2.228
52.42.2.134
52.42.2.197
52.42.2.158
52.42.2.62
52.42.2.247
52.42.2.84
52.42.2.45
52.42.2.248
52.42.2.55
52.42.2.230
52.42.2.156
52.42.2.68
52.42.2.36
52.42.2.209
52.42.2.244
52.42.2.38
52.42.2.26
52.42.2.238
52.42.2.115
52.42.2.17
52.42.2.67
52.42.2.56
52.42.2.14
52.42.2.163
52.42.2.170
52.42.2.110
52.42.2.253
52.42.2.164
52.42.2.101
52.42.2.75
52.42.2.103
52.42.2.246
52.42.2.221
52.42.2.218
52.42.2.205
52.42.2.46
52.42.2.96
52.42.2.171
52.42.2.43
52.42.2.48
52.42.2.19
52.42.2.86
52.42.2.4
52.42.2.242
52.42.2.49
52.42.2.131
52.42.2.144
52.42.2.10
52.42.2.85
52.42.2.5
52.42.2.92
52.42.2.183
52.42.2.77
52.42.2.13
52.42.2.90
52.42.2.232
52.42.2.98
52.42.2.192
52.42.2.203
52.42.2.30
52.42.2.121
52.42.2.128
52.42.2.80
52.42.2.198
52.42.2.11
52.42.2.239
52.42.2.27
52.42.2.254
52.42.2.220
52.42.2.148
52.42.2.37
52.42.2.97
52.42.2.184
52.42.2.12
52.42.2.181
52.42.2.141
52.42.2.129
52.42.2.22
52.42.2.112
52.42.2.206
52.42.2.52
52.42.2.231
52.42.2.215
52.42.2.193
52.42.2.33
52.42.2.69
52.42.2.130
52.42.2.200
52.42.2.135
52.42.2.2
52.42.2.252
52.42.2.145
52.42.2.138
52.42.2.94
52.42.2.213
52.42.2.132
52.42.2.146
52.42.2.124
52.42.2.104
52.42.2.187
52.42.2.168
52.42.2.20
52.42.2.9
52.42.2.167
52.42.2.29
52.42.2.72
52.42.2.227
52.42.2.3
52.42.2.201
52.42.2.117
52.42.2.21
52.42.2.207
52.42.2.245
52.42.2.212
52.42.2.175
52.42.2.125
52.42.2.61
52.42.2.151
52.42.2.88
52.42.2.82
52.42.2.59
52.42.2.219
52.42.2.169
52.42.2.208
52.42.2.108
52.42.2.224
52.42.2.71
52.42.2.204
52.42.2.176
52.42.2.210
52.42.2.233
52.42.2.126
52.42.2.243
52.42.2.157
52.42.2.35
52.42.2.140
52.42.2.186
52.42.2.199
52.42.2.118
52.42.2.161
52.42.2.107
52.42.2.25
52.42.2.159
52.42.2.188
52.42.2.162
52.42.2.178
52.42.2.63
52.42.2.229
52.42.2.100
52.42.2.190
52.42.2.116
52.42.2.15
52.42.2.152
52.42.2.60
52.42.2.34
52.42.2.191
52.42.2.149
52.42.2.155
52.42.2.236
52.42.2.133
52.42.2.1
52.42.2.78
52.42.2.217
52.42.2.180
52.42.2.32
52.42.2.106
52.42.2.113
52.42.2.225
52.42.2.182
52.42.2.235
52.42.2.23
52.42.2.216
Related comments:
IP Type Details Datetime
212.70.149.50 attack 
Jun 25 22:39:18 mail postfix/smtpd\[15780\]: warning: unknown\[212.70.149.50\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jun 25 22:39:49 mail postfix/smtpd\[15648\]: warning: unknown\[212.70.149.50\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jun 25 22:40:20 mail postfix/smtpd\[15780\]: warning: unknown\[212.70.149.50\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jun 25 23:10:53 mail postfix/smtpd\[17241\]: warning: unknown\[212.70.149.50\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
 2020-06-26 05:22:35
116.232.52.152 attack 
Unauthorized connection attempt from IP address 116.232.52.152 on Port 445(SMB)
 2020-06-26 05:51:14
79.172.236.146 attackspam 
Jun 25 22:21:18 mail.srvfarm.net postfix/smtps/smtpd[2072919]: warning: unknown[79.172.236.146]: SASL PLAIN authentication failed: 
Jun 25 22:21:18 mail.srvfarm.net postfix/smtps/smtpd[2072919]: lost connection after AUTH from unknown[79.172.236.146]
Jun 25 22:28:17 mail.srvfarm.net postfix/smtpd[2075642]: warning: unknown[79.172.236.146]: SASL PLAIN authentication failed: 
Jun 25 22:28:17 mail.srvfarm.net postfix/smtpd[2075642]: lost connection after AUTH from unknown[79.172.236.146]
Jun 25 22:28:45 mail.srvfarm.net postfix/smtpd[2075638]: warning: unknown[79.172.236.146]: SASL PLAIN authentication failed:
 2020-06-26 05:32:33
192.141.79.156 attackspambots 
Jun 25 22:12:53 mail.srvfarm.net postfix/smtpd[2056273]: warning: unknown[192.141.79.156]: SASL PLAIN authentication failed: 
Jun 25 22:12:53 mail.srvfarm.net postfix/smtpd[2056273]: lost connection after AUTH from unknown[192.141.79.156]
Jun 25 22:14:51 mail.srvfarm.net postfix/smtpd[2072454]: warning: unknown[192.141.79.156]: SASL PLAIN authentication failed: 
Jun 25 22:14:52 mail.srvfarm.net postfix/smtpd[2072454]: lost connection after AUTH from unknown[192.141.79.156]
Jun 25 22:22:04 mail.srvfarm.net postfix/smtpd[2071445]: warning: unknown[192.141.79.156]: SASL PLAIN authentication failed:
 2020-06-26 05:23:07
185.143.72.25 attackspam 
2020-06-26T06:10:42.397456mx1.h3z.jp postfix/smtpd[24568]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-06-26T06:11:36.473999mx1.h3z.jp postfix/smtpd[24568]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-06-26T06:12:31.225156mx1.h3z.jp postfix/smtpd[24568]: warning: unknown[185.143.72.25]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
 2020-06-26 05:15:50
193.35.48.18 attack 
Jun 25 22:44:57 mailserver postfix/smtps/smtpd[80189]: disconnect from unknown[193.35.48.18]
Jun 25 22:44:57 mailserver postfix/smtps/smtpd[80189]: connect from unknown[193.35.48.18]
Jun 25 22:45:03 mailserver postfix/smtps/smtpd[80195]: connect from unknown[193.35.48.18]
Jun 25 22:45:03 mailserver postfix/smtps/smtpd[80189]: lost connection after AUTH from unknown[193.35.48.18]
Jun 25 22:45:03 mailserver postfix/smtps/smtpd[80189]: disconnect from unknown[193.35.48.18]
Jun 25 22:45:10 mailserver postfix/smtps/smtpd[80195]: lost connection after AUTH from unknown[193.35.48.18]
Jun 25 22:45:10 mailserver postfix/smtps/smtpd[80195]: disconnect from unknown[193.35.48.18]
Jun 25 22:45:30 mailserver postfix/anvil[80136]: statistics: max connection rate 3/60s for (smtps:193.35.48.18) at Jun 25 22:45:04
Jun 25 22:53:25 mailserver postfix/smtps/smtpd[80255]: connect from unknown[193.35.48.18]
Jun 25 22:53:26 mailserver dovecot: auth-worker(80258): sql([hidden],193.35.48.18): unknown user
 2020-06-26 05:13:07
186.216.67.57 attack 
Jun 25 22:28:00 mail.srvfarm.net postfix/smtpd[2071450]: warning: unknown[186.216.67.57]: SASL PLAIN authentication failed: 
Jun 25 22:28:01 mail.srvfarm.net postfix/smtpd[2071450]: lost connection after AUTH from unknown[186.216.67.57]
Jun 25 22:28:32 mail.srvfarm.net postfix/smtpd[2072901]: warning: unknown[186.216.67.57]: SASL PLAIN authentication failed: 
Jun 25 22:28:33 mail.srvfarm.net postfix/smtpd[2072901]: lost connection after AUTH from unknown[186.216.67.57]
Jun 25 22:36:58 mail.srvfarm.net postfix/smtpd[2073915]: warning: unknown[186.216.67.57]: SASL PLAIN authentication failed:
 2020-06-26 05:26:42
188.75.190.194 attackbotsspam 
Jun 25 22:07:09 mail.srvfarm.net postfix/smtpd[2071450]: warning: unknown[188.75.190.194]: SASL PLAIN authentication failed: 
Jun 25 22:07:09 mail.srvfarm.net postfix/smtpd[2071450]: lost connection after AUTH from unknown[188.75.190.194]
Jun 25 22:12:35 mail.srvfarm.net postfix/smtpd[2071449]: warning: unknown[188.75.190.194]: SASL PLAIN authentication failed: 
Jun 25 22:12:35 mail.srvfarm.net postfix/smtpd[2071449]: lost connection after AUTH from unknown[188.75.190.194]
Jun 25 22:13:12 mail.srvfarm.net postfix/smtpd[2072454]: warning: unknown[188.75.190.194]: SASL PLAIN authentication failed:
 2020-06-26 05:38:14
132.148.167.225 attack 
WordPress login Brute force / Web App Attack on client site.
 2020-06-26 05:48:00
187.109.171.213 attackbotsspam 
Jun 25 22:18:57 mail.srvfarm.net postfix/smtpd[2073913]: warning: unknown[187.109.171.213]: SASL PLAIN authentication failed: 
Jun 25 22:18:58 mail.srvfarm.net postfix/smtpd[2073913]: lost connection after AUTH from unknown[187.109.171.213]
Jun 25 22:20:38 mail.srvfarm.net postfix/smtps/smtpd[2072917]: warning: unknown[187.109.171.213]: SASL PLAIN authentication failed: 
Jun 25 22:20:39 mail.srvfarm.net postfix/smtps/smtpd[2072917]: lost connection after AUTH from unknown[187.109.171.213]
Jun 25 22:25:39 mail.srvfarm.net postfix/smtps/smtpd[2075571]: warning: unknown[187.109.171.213]: SASL PLAIN authentication failed:
 2020-06-26 05:25:40
94.74.134.239 attackbotsspam 
Jun 25 22:16:36 mail.srvfarm.net postfix/smtpd[2072678]: warning: unknown[94.74.134.239]: SASL PLAIN authentication failed: 
Jun 25 22:16:36 mail.srvfarm.net postfix/smtpd[2072678]: lost connection after AUTH from unknown[94.74.134.239]
Jun 25 22:17:31 mail.srvfarm.net postfix/smtps/smtpd[2071633]: warning: unknown[94.74.134.239]: SASL PLAIN authentication failed: 
Jun 25 22:17:31 mail.srvfarm.net postfix/smtps/smtpd[2071633]: lost connection after AUTH from unknown[94.74.134.239]
Jun 25 22:18:39 mail.srvfarm.net postfix/smtpd[2071449]: warning: unknown[94.74.134.239]: SASL PLAIN authentication failed:
 2020-06-26 05:31:31
186.216.64.245 attackspam 
Jun 25 22:29:49 mail.srvfarm.net postfix/smtps/smtpd[2072912]: warning: unknown[186.216.64.245]: SASL PLAIN authentication failed: 
Jun 25 22:29:50 mail.srvfarm.net postfix/smtps/smtpd[2072912]: lost connection after AUTH from unknown[186.216.64.245]
Jun 25 22:35:52 mail.srvfarm.net postfix/smtps/smtpd[2075564]: warning: unknown[186.216.64.245]: SASL PLAIN authentication failed: 
Jun 25 22:35:53 mail.srvfarm.net postfix/smtps/smtpd[2075564]: lost connection after AUTH from unknown[186.216.64.245]
Jun 25 22:36:16 mail.srvfarm.net postfix/smtps/smtpd[2075568]: warning: unknown[186.216.64.245]: SASL PLAIN authentication failed:
 2020-06-26 05:27:04
91.236.172.19 attackspam 
Jun 25 22:16:06 mail.srvfarm.net postfix/smtpd[2071450]: warning: unknown[91.236.172.19]: SASL PLAIN authentication failed: 
Jun 25 22:16:06 mail.srvfarm.net postfix/smtpd[2071450]: lost connection after AUTH from unknown[91.236.172.19]
Jun 25 22:16:17 mail.srvfarm.net postfix/smtpd[2073223]: warning: unknown[91.236.172.19]: SASL PLAIN authentication failed: 
Jun 25 22:16:17 mail.srvfarm.net postfix/smtpd[2073223]: lost connection after AUTH from unknown[91.236.172.19]
Jun 25 22:17:04 mail.srvfarm.net postfix/smtps/smtpd[2058632]: warning: unknown[91.236.172.19]: SASL PLAIN authentication failed:
 2020-06-26 05:31:52
114.33.170.182 attack 
Honeypot attack, port: 81, PTR: 114-33-170-182.HINET-IP.hinet.net.
 2020-06-26 05:48:16
187.85.209.172 attackspambots 
Jun 25 22:30:58 mail.srvfarm.net postfix/smtpd[2073225]: warning: unknown[187.85.209.172]: SASL PLAIN authentication failed: 
Jun 25 22:30:59 mail.srvfarm.net postfix/smtpd[2073225]: lost connection after AUTH from unknown[187.85.209.172]
Jun 25 22:33:16 mail.srvfarm.net postfix/smtpd[2072454]: warning: unknown[187.85.209.172]: SASL PLAIN authentication failed: 
Jun 25 22:33:16 mail.srvfarm.net postfix/smtpd[2072454]: lost connection after AUTH from unknown[187.85.209.172]
Jun 25 22:38:45 mail.srvfarm.net postfix/smtpd[2072454]: warning: unknown[187.85.209.172]: SASL PLAIN authentication failed:
 2020-06-26 05:14:04

Recently Reported IPs

114.25.31.238 143.137.250.148 106.54.141.65 81.51.99.187
42.118.219.11 119.42.172.56 51.79.145.232 132.157.66.243
171.229.252.225 94.191.94.179 178.239.173.220 52.166.151.84
163.44.151.51 123.206.206.45 201.250.223.171 80.48.133.138
108.209.118.83 188.18.47.31 105.143.134.239 210.212.53.249