52.74.37.94 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.74.37.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20277
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;52.74.37.94.			IN	A

;; AUTHORITY SECTION:
.			382	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023011200 1800 900 604800 86400

;; Query time: 24 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 12 17:41:30 CST 2023
;; MSG SIZE  rcvd: 104

Host info

94.37.74.52.in-addr.arpa domain name pointer ec2-52-74-37-94.ap-southeast-1.compute.amazonaws.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
94.37.74.52.in-addr.arpa	name = ec2-52-74-37-94.ap-southeast-1.compute.amazonaws.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
104.158.231.5	attackbots	firewall-block, port(s): 23/tcp	2019-12-25 03:46:03
51.77.192.141	attackbots	Invalid user gdm from 51.77.192.141 port 55650	2019-12-25 04:15:57
196.188.13.25	attack	Dec 24 16:30:43 h2177944 kernel: \[400199.925833\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=196.188.13.25 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=30721 DF PROTO=TCP SPT=56458 DPT=8080 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 Dec 24 16:30:43 h2177944 kernel: \[400199.925848\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=196.188.13.25 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=30721 DF PROTO=TCP SPT=56458 DPT=8080 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 Dec 24 16:30:44 h2177944 kernel: \[400200.994897\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=196.188.13.25 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=30722 DF PROTO=TCP SPT=60138 DPT=9200 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 Dec 24 16:30:44 h2177944 kernel: \[400200.994912\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=196.188.13.25 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=30722 DF PROTO=TCP SPT=60138 DPT=9200 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 Dec 24 16:30:46 h2177944 kernel: \[400202.165837\] \[UFW BLOCK\] IN=venet0 OUT=	2019-12-25 04:08:10
182.53.213.243	attackspam	Unauthorized connection attempt from IP address 182.53.213.243 on Port 445(SMB)	2019-12-25 03:55:34
46.217.169.56	attackbotsspam	Unauthorized connection attempt from IP address 46.217.169.56 on Port 445(SMB)	2019-12-25 04:03:11
81.88.49.29	attack	Dec 24 16:30:45 host3 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=81.88.49.29, lip=207.180.241.50, session= Dec 24 16:30:52 host3 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=81.88.49.29, lip=207.180.241.50, session= Dec 24 16:31:03 host3 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 10 secs): user=, method=PLAIN, rip=81.88.49.29, lip=207.180.241.50, session= Dec 24 16:31:14 host3 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 10 secs): user=, method=PLAIN, rip=81.88.49.29, lip=207.180.241.50, session= Dec 24 16:31:17 host3 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=81.88.49.29, lip=207.180.241.50, session=<1SSu1XSaj4RRWDEd> ...	2019-12-25 03:43:33
1.193.145.44	attackbotsspam	Unauthorized connection attempt from IP address 1.193.145.44 on Port 445(SMB)	2019-12-25 04:11:21
51.91.92.170	attackbots	Dec 24 15:20:19 mxgate1 postfix/postscreen[21802]: CONNECT from [51.91.92.170]:59309 to [176.31.12.44]:25 Dec 24 15:20:19 mxgate1 postfix/dnsblog[21845]: addr 51.91.92.170 listed by domain zen.spamhaus.org as 127.0.0.3 Dec 24 15:20:25 mxgate1 postfix/postscreen[21802]: DNSBL rank 2 for [51.91.92.170]:59309 Dec 24 15:20:25 mxgate1 postfix/tlsproxy[22374]: CONNECT from [51.91.92.170]:59309 Dec x@x Dec 24 15:20:25 mxgate1 postfix/postscreen[21802]: DISCONNECT [51.91.92.170]:59309 Dec 24 15:20:25 mxgate1 postfix/tlsproxy[22374]: DISCONNECT [51.91.92.170]:59309 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=51.91.92.170	2019-12-25 04:05:23
113.190.81.130	attackbotsspam	Unauthorized connection attempt from IP address 113.190.81.130 on Port 445(SMB)	2019-12-25 04:12:02
128.199.243.138	attack	Dec 24 20:55:04 mail sshd[10299]: Invalid user dellums from 128.199.243.138 Dec 24 20:55:04 mail sshd[10299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.243.138 Dec 24 20:55:04 mail sshd[10299]: Invalid user dellums from 128.199.243.138 Dec 24 20:55:06 mail sshd[10299]: Failed password for invalid user dellums from 128.199.243.138 port 53596 ssh2 Dec 24 20:56:33 mail sshd[10538]: Invalid user faracik from 128.199.243.138 ...	2019-12-25 04:15:08
34.215.122.24	attack	12/24/2019-20:46:02.676041 34.215.122.24 Protocol: 6 SURICATA TLS invalid record/traffic	2019-12-25 03:49:05
190.207.247.83	attackspam	Unauthorized connection attempt from IP address 190.207.247.83 on Port 445(SMB)	2019-12-25 03:50:25
159.89.100.75	attackbots	Dec 24 18:59:28 xeon sshd[52380]: Failed password for invalid user rpm from 159.89.100.75 port 59740 ssh2	2019-12-25 04:01:09
43.228.71.147	attackspam	Unauthorized connection attempt detected from IP address 43.228.71.147 to port 1433	2019-12-25 04:18:41
180.123.35.159	attackspam	180.123.35.159 has been banned for [WebApp Attack] ...	2019-12-25 04:07:20

Recently Reported IPs

183.82.0.180	40.77.120.233	129.198.18.114	37.18.73.94
103.183.75.49	122.165.158.226	52.165.221.164	165.3.122.211
170.51.203.219	213.233.182.39	163.116.158.143	172.177.221.87
76.234.232.202	118.233.54.139	5.45.106.197	5.89.65.132
137.226.0.44	137.226.0.197	20.210.113.32	117.6.252.216