Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Ashburn

Region: Virginia

Country: United States

Internet Service Provider: Amazon Technologies Inc.

Hostname: unknown

Organization: Amazon.com, Inc.

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbotsspam
May  6 21:14:49 mail postfix/smtpd[91048]: NOQUEUE: reject: RCPT from keeper-us-east-1b.mxtoolbox.com[52.55.244.91]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo=
May  6 22:20:45 mail postfix/smtpd[1098]: NOQUEUE: reject: RCPT from keeper-us-east-1b.mxtoolbox.com[52.55.244.91]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo=
May  6 22:20:45 mail postfix/smtpd[1098]: NOQUEUE: reject: RCPT from keeper-us-east-1b.mxtoolbox.com[52.55.244.91]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo=
2020-05-07 07:05:18
attackbots
52.55.244.91 has been banned from MailServer for Abuse
...
2019-08-18 03:22:00
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.55.244.91
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25707
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.55.244.91.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081700 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Aug 18 03:21:55 CST 2019
;; MSG SIZE  rcvd: 116
Host info
91.244.55.52.in-addr.arpa domain name pointer keeper-us-east-1b.mxtoolbox.com.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
91.244.55.52.in-addr.arpa	name = keeper-us-east-1b.mxtoolbox.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
186.215.202.11 attackbotsspam
Unauthorized SSH login attempts
2019-07-14 07:17:05
190.145.55.89 attackspambots
Jul 14 01:06:20 legacy sshd[4048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.55.89
Jul 14 01:06:21 legacy sshd[4048]: Failed password for invalid user team2 from 190.145.55.89 port 56269 ssh2
Jul 14 01:11:47 legacy sshd[4289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.55.89
...
2019-07-14 07:15:19
189.206.1.142 attack
Automatic report - Banned IP Access
2019-07-14 07:28:37
37.117.246.113 attack
Lines containing failures of 37.117.246.113
Jul 12 15:43:21 mellenthin postfix/smtpd[29571]: connect from net-37-117-246-113.cust.vodafonedsl.hostname[37.117.246.113]
Jul x@x
Jul 12 15:43:22 mellenthin postfix/smtpd[29571]: lost connection after DATA from net-37-117-246-113.cust.vodafonedsl.hostname[37.117.246.113]
Jul 12 15:43:22 mellenthin postfix/smtpd[29571]: disconnect from net-37-117-246-113.cust.vodafonedsl.hostname[37.117.246.113] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4
Jul 13 16:56:50 mellenthin postfix/smtpd[5627]: connect from net-37-117-246-113.cust.vodafonedsl.hostname[37.117.246.113]
Jul x@x
Jul 13 16:56:50 mellenthin postfix/smtpd[5627]: lost connection after DATA from net-37-117-246-113.cust.vodafonedsl.hostname[37.117.246.113]
Jul 13 16:56:50 mellenthin postfix/smtpd[5627]: disconnect from net-37-117-246-113.cust.vodafonedsl.hostname[37.117.246.113] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4


........
-----------------------------------------------
https://www.blocklist.de/en/view.htm
2019-07-14 07:17:39
217.169.208.70 attackspambots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-13 20:26:13,659 INFO [amun_request_handler] PortScan Detected on Port: 445 (217.169.208.70)
2019-07-14 06:50:00
188.131.170.119 attack
Jul 14 01:14:52 legacy sshd[4437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.170.119
Jul 14 01:14:54 legacy sshd[4437]: Failed password for invalid user teste from 188.131.170.119 port 44076 ssh2
Jul 14 01:18:28 legacy sshd[4590]: Failed password for root from 188.131.170.119 port 51698 ssh2
...
2019-07-14 07:26:57
108.45.41.125 attackspam
Jul 13 21:47:48 vps691689 sshd[23361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.45.41.125
Jul 13 21:47:50 vps691689 sshd[23361]: Failed password for invalid user da from 108.45.41.125 port 38783 ssh2
Jul 13 21:54:56 vps691689 sshd[23562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.45.41.125
...
2019-07-14 06:53:44
60.215.170.234 attackbotsspam
Automatic report - Port Scan Attack
2019-07-14 07:17:57
183.2.137.119 attackbots
Unauthorized connection attempt from IP address 183.2.137.119 on Port 445(SMB)
2019-07-14 07:20:43
184.177.19.2 attackspambots
(From tldowning@yahoo.com) I have been attempting to make an appointment for a couple months. But  my schedule doesn't seem to match up with what you have available.  And we kinda have been playing phone tag.  (I am hard to reach sometimes) Anyway, I am out of town now, but will be back next week.  I have a groupon that expires in 2 weeks.  Do you have availability on Tuesday July 23  around 4:00?
2019-07-14 07:03:12
212.64.32.162 attack
Automatic report - Banned IP Access
2019-07-14 07:32:03
181.63.245.127 attackspambots
Jul 13 16:27:56 cac1d2 sshd\[15014\]: Invalid user lis from 181.63.245.127 port 22273
Jul 13 16:27:56 cac1d2 sshd\[15014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.63.245.127
Jul 13 16:27:58 cac1d2 sshd\[15014\]: Failed password for invalid user lis from 181.63.245.127 port 22273 ssh2
...
2019-07-14 07:33:24
104.248.150.152 attackbots
Jul 14 00:08:40 debian sshd\[30783\]: Invalid user michael from 104.248.150.152 port 36758
Jul 14 00:08:40 debian sshd\[30783\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.150.152
...
2019-07-14 07:09:16
111.251.71.171 attackspambots
Automatic report - Port Scan Attack
2019-07-14 07:19:23
49.207.16.53 attackspambots
Unauthorized connection attempt from IP address 49.207.16.53 on Port 445(SMB)
2019-07-14 07:27:41

Recently Reported IPs

216.36.177.74 52.172.199.166 55.252.188.155 52.36.129.164
253.84.236.8 195.154.51.180 39.66.49.20 240.252.176.105
179.255.214.145 61.167.57.27 207.66.125.62 216.68.133.19
210.186.99.8 50.242.36.162 5.89.237.114 2600:8803:f100:1546:8092:7648:28b9:ac80
34.5.76.12 101.223.231.40 179.208.39.155 19.118.139.235