52.47.147.148 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: France

Internet Service Provider: Amazon Technologies Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: ec2-52-47-147-148.eu-west-3.compute.amazonaws.com.	2020-07-04 13:54:35

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.47.147.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18705
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.47.147.148.			IN	A

;; AUTHORITY SECTION:
.			329	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020070400 1800 900 604800 86400

;; Query time: 88 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 04 13:54:32 CST 2020
;; MSG SIZE  rcvd: 117

Host info

148.147.47.52.in-addr.arpa domain name pointer ec2-52-47-147-148.eu-west-3.compute.amazonaws.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
148.147.47.52.in-addr.arpa	name = ec2-52-47-147-148.eu-west-3.compute.amazonaws.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
195.231.3.146	attack	Mar 29 13:17:10 mail.srvfarm.net postfix/smtpd[921337]: warning: unknown[195.231.3.146]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 29 13:17:10 mail.srvfarm.net postfix/smtpd[921337]: lost connection after AUTH from unknown[195.231.3.146] Mar 29 13:22:03 mail.srvfarm.net postfix/smtpd[918257]: warning: unknown[195.231.3.146]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 29 13:22:03 mail.srvfarm.net postfix/smtpd[918257]: lost connection after AUTH from unknown[195.231.3.146] Mar 29 13:22:07 mail.srvfarm.net postfix/smtpd[936633]: warning: unknown[195.231.3.146]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-03-29 20:39:07
202.5.18.84	attack	Total attacks: 6	2020-03-29 20:09:27
114.242.245.32	attack	(sshd) Failed SSH login from 114.242.245.32 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 29 14:18:48 s1 sshd[27229]: Invalid user mqk from 114.242.245.32 port 12630 Mar 29 14:18:50 s1 sshd[27229]: Failed password for invalid user mqk from 114.242.245.32 port 12630 ssh2 Mar 29 14:30:34 s1 sshd[27682]: Invalid user tor from 114.242.245.32 port 27950 Mar 29 14:30:37 s1 sshd[27682]: Failed password for invalid user tor from 114.242.245.32 port 27950 ssh2 Mar 29 14:51:36 s1 sshd[28406]: Invalid user boy from 114.242.245.32 port 33234	2020-03-29 19:52:03
181.174.81.245	attack	Mar 28 23:34:55 server sshd\[6810\]: Failed password for invalid user uwc from 181.174.81.245 port 53825 ssh2 Mar 29 09:23:05 server sshd\[19997\]: Invalid user xob from 181.174.81.245 Mar 29 09:23:05 server sshd\[19997\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.174.81.245 Mar 29 09:23:06 server sshd\[19997\]: Failed password for invalid user xob from 181.174.81.245 port 47383 ssh2 Mar 29 09:34:49 server sshd\[22836\]: Invalid user qnm from 181.174.81.245 Mar 29 09:34:49 server sshd\[22836\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.174.81.245 ...	2020-03-29 20:09:46
208.187.167.81	attackspambots	Mar 29 05:25:28 mail.srvfarm.net postfix/smtpd[770787]: NOQUEUE: reject: RCPT from own.onvacationnow.com[208.187.167.81]: 554 5.7.1 Service unavailable; Client host [208.187.167.81] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo= Mar 29 05:25:29 mail.srvfarm.net postfix/smtpd[760944]: NOQUEUE: reject: RCPT from own.onvacationnow.com[208.187.167.81]: 554 5.7.1 Service unavailable; Client host [208.187.167.81] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo= Mar 29 05:25:30 mail.srvfarm.net postfix/smtpd[755659]: NOQUEUE: reject: RCPT from own.onvacationnow.com[208.187.167.81]: 554 5.7.1 Service unavailable; Client host [208.187.167.81] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to=	2020-03-29 20:38:23
199.59.241.250	attackspam	SSH login attempts.	2020-03-29 19:59:34
95.110.154.101	attackbots	5x Failed Password	2020-03-29 20:01:42
181.48.120.219	attack	2020-03-29T08:07:33.083370vps773228.ovh.net sshd[24610]: Invalid user vsh from 181.48.120.219 port 5691 2020-03-29T08:07:33.091395vps773228.ovh.net sshd[24610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.48.120.219 2020-03-29T08:07:33.083370vps773228.ovh.net sshd[24610]: Invalid user vsh from 181.48.120.219 port 5691 2020-03-29T08:07:35.831148vps773228.ovh.net sshd[24610]: Failed password for invalid user vsh from 181.48.120.219 port 5691 ssh2 2020-03-29T08:08:50.328854vps773228.ovh.net sshd[25082]: Invalid user mep from 181.48.120.219 port 18867 ...	2020-03-29 20:10:14
106.12.17.107	attackspam	$f2bV_matches	2020-03-29 19:54:06
159.89.207.146	attackbotsspam	Mar 29 09:16:09 ns382633 sshd\[28330\]: Invalid user rjc from 159.89.207.146 port 47112 Mar 29 09:16:09 ns382633 sshd\[28330\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.207.146 Mar 29 09:16:11 ns382633 sshd\[28330\]: Failed password for invalid user rjc from 159.89.207.146 port 47112 ssh2 Mar 29 09:22:06 ns382633 sshd\[29298\]: Invalid user fsn from 159.89.207.146 port 41586 Mar 29 09:22:06 ns382633 sshd\[29298\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.207.146	2020-03-29 20:04:34
104.47.32.36	attackspam	SSH login attempts.	2020-03-29 20:07:23
104.27.155.168	attackspambots	SSH login attempts.	2020-03-29 20:01:10
120.70.102.16	attackbotsspam	$f2bV_matches	2020-03-29 20:22:21
23.21.59.179	attackspambots	SSH login attempts.	2020-03-29 20:11:30
61.177.142.100	attack	SSH login attempts.	2020-03-29 20:19:16

Recently Reported IPs

175.87.72.151	229.179.130.67	211.91.45.14	74.43.133.145
119.73.204.20	97.244.160.104	22.10.23.6	51.30.181.51
116.103.118.164	109.121.207.165	71.100.97.61	49.227.113.183
176.17.6.86	216.117.174.216	142.234.35.27	140.116.70.103
16.118.196.43	234.155.33.147	237.52.77.161	9.85.4.57