Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Australia

Internet Service Provider: Amazon Technologies Inc.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
WordPress login Brute force / Web App Attack on client site.
2019-12-09 00:26:29
attackbots
WordPress wp-login brute force :: 52.64.20.252 0.292 BYPASS [06/Dec/2019:16:58:36  0000] [censored_4] "POST /wp-login.php HTTP/1.1" 200 2131 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36"
2019-12-07 02:36:19
attackbotsspam
AbusiveCrawling
2019-11-22 14:04:59
attackbotsspam
WordPress login Brute force / Web App Attack on client site.
2019-11-12 18:25:58
attackbotsspam
WordPress wp-login brute force :: 52.64.20.252 0.056 BYPASS [14/Sep/2019:19:05:20  1000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 4634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36"
2019-09-14 19:10:33
Comments on same subnet:
IP Type Details Datetime
52.64.207.60 attackbots
[Aegis] @ 2019-07-25 00:55:19  0100 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack
2020-04-29 23:06:25
52.64.209.168 attack
Automated report (2019-10-18T03:56:29+00:00). Spambot detected.
2019-10-18 12:41:20
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.64.20.252
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61368
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.64.20.252.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091400 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Sep 14 19:10:17 CST 2019
;; MSG SIZE  rcvd: 116
Host info
252.20.64.52.in-addr.arpa domain name pointer ec2-52-64-20-252.ap-southeast-2.compute.amazonaws.com.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
252.20.64.52.in-addr.arpa	name = ec2-52-64-20-252.ap-southeast-2.compute.amazonaws.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
186.219.59.254 attackspam
firewall-block, port(s): 5555/tcp
2020-09-19 16:20:04
83.239.66.174 attack
Unauthorized connection attempt from IP address 83.239.66.174 on Port 445(SMB)
2020-09-19 16:22:42
78.106.78.26 attackspambots
Automatic report - Banned IP Access
2020-09-19 16:02:01
190.79.179.55 attack
20/9/18@13:44:29: FAIL: Alarm-Network address from=190.79.179.55
20/9/18@13:44:29: FAIL: Alarm-Network address from=190.79.179.55
...
2020-09-19 16:25:25
159.65.9.229 attackspambots
[f2b] sshd bruteforce, retries: 1
2020-09-19 16:15:33
62.99.90.10 attackspam
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-09-19T07:21:47Z and 2020-09-19T07:48:22Z
2020-09-19 16:14:08
164.77.117.10 attackbotsspam
Failed password for invalid user root from 164.77.117.10 port 46510 ssh2
2020-09-19 16:05:33
46.243.220.156 attackbotsspam
Russian spam
2020-09-19 15:56:36
180.76.135.15 attackbotsspam
$f2bV_matches
2020-09-19 16:31:50
103.16.228.135 attackbotsspam
RDP Bruteforce
2020-09-19 16:36:30
124.219.170.125 attack
Unauthorized connection attempt from IP address 124.219.170.125 on Port 445(SMB)
2020-09-19 16:29:09
122.165.206.136 attackbotsspam
Unauthorized connection attempt from IP address 122.165.206.136 on Port 445(SMB)
2020-09-19 16:05:57
203.204.22.154 attackspambots
Sep 18 12:00:13 scw-focused-cartwright sshd[22659]: Failed password for root from 203.204.22.154 port 59774 ssh2
2020-09-19 15:56:54
42.2.125.4 attackspam
Sep 18 07:00:14 scw-focused-cartwright sshd[17103]: Failed password for root from 42.2.125.4 port 55468 ssh2
2020-09-19 16:17:42
40.122.149.176 attackspambots
SSH break in attempt
...
2020-09-19 16:30:24

Recently Reported IPs

183.154.92.221 82.102.165.134 223.247.92.38 223.19.67.94
38.79.143.168 141.129.92.32 79.97.7.34 81.99.245.23
182.71.125.106 114.231.37.29 89.252.152.19 106.51.20.67
36.251.50.208 1.30.175.85 103.91.51.184 71.21.24.176
94.181.215.129 187.110.158.190 170.83.81.22 170.159.191.153