Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Amazon Technologies Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
52.64.168.0 - - \[28/Sep/2019:00:32:37 +0200\] "POST /wp-login.php HTTP/1.1" 200 2111 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
52.64.168.0 - - \[28/Sep/2019:00:32:39 +0200\] "POST /wp-login.php HTTP/1.1" 200 2092 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
...
2019-09-28 06:33:42
attack
langenachtfulda.de 52.64.168.0 \[27/Sep/2019:14:12:08 +0200\] "POST /wp-login.php HTTP/1.1" 200 6029 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
langenachtfulda.de 52.64.168.0 \[27/Sep/2019:14:12:11 +0200\] "POST /wp-login.php HTTP/1.1" 200 5992 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-09-27 23:24:09
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.64.168.0
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40798
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.64.168.0.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040200 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Tue Apr 02 14:45:08 +08 2019
;; MSG SIZE  rcvd: 115

Host info
0.168.64.52.in-addr.arpa domain name pointer ec2-52-64-168-0.ap-southeast-2.compute.amazonaws.com.
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
0.168.64.52.in-addr.arpa	name = ec2-52-64-168-0.ap-southeast-2.compute.amazonaws.com.

Authoritative answers can be found from:

Related IP info:
Related comments:
IP Type Details Datetime
185.153.196.235 attackbotsspam
*Port Scan* detected from 185.153.196.235 (MD/Republic of Moldova/server-185-153-196-235.cloudedic.net). 4 hits in the last 265 seconds
2019-09-15 07:54:55
200.45.171.84 attack
proto=tcp  .  spt=46898  .  dpt=25  .     (listed on Blocklist de  Sep 14)     (776)
2019-09-15 08:21:20
130.61.117.31 attackbots
Automatic report - Banned IP Access
2019-09-15 08:01:04
222.186.15.160 attack
Sep 14 14:08:11 lcdev sshd\[30397\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.160  user=root
Sep 14 14:08:13 lcdev sshd\[30397\]: Failed password for root from 222.186.15.160 port 24720 ssh2
Sep 14 14:08:16 lcdev sshd\[30397\]: Failed password for root from 222.186.15.160 port 24720 ssh2
Sep 14 14:08:18 lcdev sshd\[30397\]: Failed password for root from 222.186.15.160 port 24720 ssh2
Sep 14 14:08:19 lcdev sshd\[30414\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.160  user=root
2019-09-15 08:11:17
212.129.53.177 attackspam
Sep 15 02:07:44 meumeu sshd[22823]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.53.177 
Sep 15 02:07:46 meumeu sshd[22823]: Failed password for invalid user ddd from 212.129.53.177 port 49584 ssh2
Sep 15 02:12:19 meumeu sshd[23433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.129.53.177 
...
2019-09-15 08:15:38
51.38.238.87 attack
Sep 14 21:05:17 vps647732 sshd[1101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.238.87
Sep 14 21:05:19 vps647732 sshd[1101]: Failed password for invalid user mckey from 51.38.238.87 port 39106 ssh2
...
2019-09-15 08:31:00
62.210.129.207 attackspam
Sep 14 14:07:27 php2 sshd\[32719\]: Invalid user abc123 from 62.210.129.207
Sep 14 14:07:27 php2 sshd\[32719\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62-210-129-207.rev.poneytelecom.eu
Sep 14 14:07:29 php2 sshd\[32719\]: Failed password for invalid user abc123 from 62.210.129.207 port 51462 ssh2
Sep 14 14:11:54 php2 sshd\[756\]: Invalid user inf0 from 62.210.129.207
Sep 14 14:11:54 php2 sshd\[756\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62-210-129-207.rev.poneytelecom.eu
2019-09-15 08:14:53
51.79.71.142 attack
Sep 15 01:45:31 SilenceServices sshd[25157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.71.142
Sep 15 01:45:32 SilenceServices sshd[25157]: Failed password for invalid user training from 51.79.71.142 port 37044 ssh2
Sep 15 01:50:33 SilenceServices sshd[27011]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.71.142
2019-09-15 07:57:43
1.179.182.82 attack
2019-09-14T23:01:26.517580abusebot-5.cloudsearch.cf sshd\[20180\]: Invalid user dx from 1.179.182.82 port 57608
2019-09-15 08:23:52
84.111.60.71 attack
This IP address was blacklisted for the following reason:  /de/%20https://www.facebook.com/mpiecegmbh/%27%20and%20%27x%27%3D%27x @ 2019-08-26T06:13:23+02:00.
2019-09-15 08:03:04
200.148.25.132 attack
proto=tcp  .  spt=33995  .  dpt=25  .     (listed on Blocklist de  Sep 14)     (786)
2019-09-15 07:55:31
179.125.25.218 attack
Spamassassin_179.125.25.218
2019-09-15 08:10:18
50.255.192.73 attackspambots
2019-09-14 18:52:29 H=50-255-192-73-static.hfc.comcastbusiness.net [50.255.192.73]:45763 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-09-14 18:52:29 H=50-255-192-73-static.hfc.comcastbusiness.net [50.255.192.73]:45763 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-09-14 18:52:30 H=50-255-192-73-static.hfc.comcastbusiness.net [50.255.192.73]:45763 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/50.255.192.73)
...
2019-09-15 08:25:14
189.206.166.12 attackspambots
proto=tcp  .  spt=41352  .  dpt=25  .     (listed on Blocklist de  Sep 14)     (773)
2019-09-15 08:29:14
81.22.45.133 attackspam
09/14/2019-19:25:20.489459 81.22.45.133 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 85
2019-09-15 08:03:36

Recently Reported IPs

218.39.63.14 167.99.226.212 186.120.93.42 141.101.202.226
67.72.99.20 103.94.130.4 74.82.47.13 122.155.223.37
154.66.198.196 182.23.20.140 46.176.76.215 58.87.106.183
139.28.218.155 175.107.192.194 104.248.194.119 194.187.249.61
185.234.216.189 103.59.200.58 118.193.31.179 185.53.91.50