Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Amazon Technologies Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
CMS (WordPress or Joomla) login attempt.
2020-03-06 13:13:05
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.45.118.85
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20145
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.45.118.85.			IN	A

;; AUTHORITY SECTION:
.			454	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020030502 1800 900 604800 86400

;; Query time: 103 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 06 13:12:56 CST 2020
;; MSG SIZE  rcvd: 116
Host info
85.118.45.52.in-addr.arpa domain name pointer ec2-52-45-118-85.compute-1.amazonaws.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
85.118.45.52.in-addr.arpa	name = ec2-52-45-118-85.compute-1.amazonaws.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
89.248.174.215 attackspam
Dirección:     Entrante
Evento\Protocolo:     TCP
Evento\Estado:     Bloqueado
Dirección remota:     89.248.174.215
Puerto remoto:     50516
Dirección local:    
Puerto local:     8008
Zona:     Todas las redes
2020-08-05 08:44:21
222.186.175.148 attackbotsspam
2020-08-05T00:02:25.822251uwu-server sshd[3225753]: Failed password for root from 222.186.175.148 port 45450 ssh2
2020-08-05T00:02:30.650880uwu-server sshd[3225753]: Failed password for root from 222.186.175.148 port 45450 ssh2
2020-08-05T00:02:36.144734uwu-server sshd[3225753]: Failed password for root from 222.186.175.148 port 45450 ssh2
2020-08-05T00:02:41.471465uwu-server sshd[3225753]: Failed password for root from 222.186.175.148 port 45450 ssh2
2020-08-05T00:02:45.646589uwu-server sshd[3225753]: Failed password for root from 222.186.175.148 port 45450 ssh2
...
2020-08-05 12:03:25
49.72.187.154 attack
Aug  5 05:48:07 OPSO sshd\[2644\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.72.187.154  user=root
Aug  5 05:48:09 OPSO sshd\[2644\]: Failed password for root from 49.72.187.154 port 37560 ssh2
Aug  5 05:52:39 OPSO sshd\[3857\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.72.187.154  user=root
Aug  5 05:52:41 OPSO sshd\[3857\]: Failed password for root from 49.72.187.154 port 10135 ssh2
Aug  5 05:56:43 OPSO sshd\[4881\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.72.187.154  user=root
2020-08-05 12:16:59
51.38.71.36 attackspambots
SSH brutforce
2020-08-05 08:41:52
142.93.212.213 attackspam
Aug  5 01:58:02 OPSO sshd\[17990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.213  user=root
Aug  5 01:58:05 OPSO sshd\[17990\]: Failed password for root from 142.93.212.213 port 40950 ssh2
Aug  5 02:02:19 OPSO sshd\[19217\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.213  user=root
Aug  5 02:02:22 OPSO sshd\[19217\]: Failed password for root from 142.93.212.213 port 51118 ssh2
Aug  5 02:06:38 OPSO sshd\[20806\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.212.213  user=root
2020-08-05 08:40:48
203.90.233.7 attack
2020-08-05T04:08:08.064821shield sshd\[9142\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.90.233.7  user=root
2020-08-05T04:08:10.603837shield sshd\[9142\]: Failed password for root from 203.90.233.7 port 33313 ssh2
2020-08-05T04:10:23.658744shield sshd\[9429\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.90.233.7  user=root
2020-08-05T04:10:25.730838shield sshd\[9429\]: Failed password for root from 203.90.233.7 port 50896 ssh2
2020-08-05T04:12:36.807537shield sshd\[9971\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.90.233.7  user=root
2020-08-05 12:14:04
104.131.13.199 attackbotsspam
2020-08-05T01:08:49.712348v22018076590370373 sshd[30716]: Failed password for root from 104.131.13.199 port 33374 ssh2
2020-08-05T01:12:26.518322v22018076590370373 sshd[7391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.13.199  user=root
2020-08-05T01:12:28.387435v22018076590370373 sshd[7391]: Failed password for root from 104.131.13.199 port 44508 ssh2
2020-08-05T01:16:08.251296v22018076590370373 sshd[17114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.13.199  user=root
2020-08-05T01:16:10.595600v22018076590370373 sshd[17114]: Failed password for root from 104.131.13.199 port 55640 ssh2
...
2020-08-05 08:33:20
177.152.89.14 attackbots
Automatic report - Port Scan Attack
2020-08-05 08:35:10
222.186.42.57 attackspam
Aug  5 09:10:55 gw1 sshd[8803]: Failed password for root from 222.186.42.57 port 29035 ssh2
...
2020-08-05 12:17:23
104.140.188.58 attackspam
port scan and connect, tcp 23 (telnet)
2020-08-05 08:51:50
222.186.175.169 attack
Aug  5 06:08:34 abendstille sshd\[14837\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.169  user=root
Aug  5 06:08:36 abendstille sshd\[14837\]: Failed password for root from 222.186.175.169 port 40750 ssh2
Aug  5 06:08:39 abendstille sshd\[14837\]: Failed password for root from 222.186.175.169 port 40750 ssh2
Aug  5 06:08:41 abendstille sshd\[14837\]: Failed password for root from 222.186.175.169 port 40750 ssh2
Aug  5 06:08:45 abendstille sshd\[14837\]: Failed password for root from 222.186.175.169 port 40750 ssh2
...
2020-08-05 12:11:59
132.232.96.230 attack
Multiple web server 500 error code (Internal Error).
2020-08-05 08:41:36
31.184.199.114 attackspambots
Aug  5 03:56:49 rush sshd[28377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.184.199.114
Aug  5 03:56:52 rush sshd[28377]: Failed password for invalid user 22 from 31.184.199.114 port 23018 ssh2
Aug  5 03:56:54 rush sshd[28377]: Failed password for invalid user 22 from 31.184.199.114 port 23018 ssh2
Aug  5 03:56:57 rush sshd[28377]: Failed password for invalid user 22 from 31.184.199.114 port 23018 ssh2
...
2020-08-05 12:09:17
195.54.161.51 attackspambots
Brute forcing RDP port 3389
2020-08-05 08:33:59
59.125.145.88 attackspam
Aug  5 08:52:43 gw1 sshd[8421]: Failed password for root from 59.125.145.88 port 62012 ssh2
...
2020-08-05 12:04:46

Recently Reported IPs

73.21.216.5 167.58.102.207 14.174.234.138 183.88.128.145
113.162.162.122 156.213.97.229 114.26.55.76 183.88.234.254
171.228.21.127 123.20.123.200 187.250.98.166 176.109.235.26
14.207.162.102 172.111.173.234 58.71.193.126 223.214.203.101
31.133.0.84 14.173.165.35 192.241.209.152 119.121.194.70