Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Ashburn

Region: Virginia

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
54.221.210.216 attack
54.221.210.216 - - [09/Sep/2020:18:45:19 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
54.221.210.216 - - [09/Sep/2020:18:45:30 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
54.221.210.216 - - [09/Sep/2020:18:45:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-10 19:59:42
54.221.210.216 attackbotsspam
xmlrpc attack
2020-08-30 14:17:21
54.221.234.156 attack
SSH login attempts.
2020-06-19 19:00:08
54.221.223.198 attackspam
*Port Scan* detected from 54.221.223.198 (US/United States/ec2-54-221-223-198.compute-1.amazonaws.com). 4 hits in the last 46 seconds
2019-12-26 18:21:57
54.221.223.198 attackspam
Dec 25 07:28:38 MK-Soft-VM7 sshd[1882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.221.223.198 
Dec 25 07:28:40 MK-Soft-VM7 sshd[1882]: Failed password for invalid user congson from 54.221.223.198 port 50920 ssh2
...
2019-12-25 15:45:55
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.221.2.44
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33880
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;54.221.2.44.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025092302 1800 900 604800 86400

;; Query time: 40 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 24 10:30:43 CST 2025
;; MSG SIZE  rcvd: 104
Host info
44.2.221.54.in-addr.arpa domain name pointer ec2-54-221-2-44.compute-1.amazonaws.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
44.2.221.54.in-addr.arpa	name = ec2-54-221-2-44.compute-1.amazonaws.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
201.48.115.236 attackspambots
Sep 11 21:05:18 sshgateway sshd\[11817\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.48.115.236  user=root
Sep 11 21:05:20 sshgateway sshd\[11817\]: Failed password for root from 201.48.115.236 port 57280 ssh2
Sep 11 21:12:15 sshgateway sshd\[12538\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.48.115.236  user=root
2020-09-12 04:58:49
144.22.108.33 attackspambots
Sep 11 18:51:29 sshgateway sshd\[27007\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=oc-144-22-108-33.compute.oraclecloud.com  user=root
Sep 11 18:51:30 sshgateway sshd\[27007\]: Failed password for root from 144.22.108.33 port 43326 ssh2
Sep 11 18:57:39 sshgateway sshd\[27844\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=oc-144-22-108-33.compute.oraclecloud.com  user=root
2020-09-12 05:21:54
177.86.161.65 attackspambots
Autoban   177.86.161.65 AUTH/CONNECT
2020-09-12 05:23:36
222.232.29.235 attack
detected by Fail2Ban
2020-09-12 05:29:35
59.124.230.138 attackbotsspam
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-09-12 05:05:42
222.186.42.213 attack
Sep 11 16:47:44 NPSTNNYC01T sshd[11132]: Failed password for root from 222.186.42.213 port 35689 ssh2
Sep 11 16:47:51 NPSTNNYC01T sshd[11165]: Failed password for root from 222.186.42.213 port 38544 ssh2
...
2020-09-12 05:00:57
211.219.18.186 attack
Sep 11 21:16:04 sshgateway sshd\[13112\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.219.18.186  user=root
Sep 11 21:16:06 sshgateway sshd\[13112\]: Failed password for root from 211.219.18.186 port 36824 ssh2
Sep 11 21:23:04 sshgateway sshd\[14102\]: Invalid user bamboo from 211.219.18.186
2020-09-12 05:04:20
109.116.41.238 attackspambots
Sep 11 18:57:06 sshgateway sshd\[27761\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.116.41.238  user=root
Sep 11 18:57:08 sshgateway sshd\[27761\]: Failed password for root from 109.116.41.238 port 45362 ssh2
Sep 11 18:58:30 sshgateway sshd\[27941\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.116.41.238  user=root
2020-09-12 04:54:23
188.6.172.38 attackspam
Brute-force attempt banned
2020-09-12 04:57:29
49.232.14.216 attack
Time:     Fri Sep 11 12:59:49 2020 -0400
IP:       49.232.14.216 (CN/China/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 11 12:37:30 pv-11-ams1 sshd[21726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.14.216  user=root
Sep 11 12:37:33 pv-11-ams1 sshd[21726]: Failed password for root from 49.232.14.216 port 39910 ssh2
Sep 11 12:55:07 pv-11-ams1 sshd[22555]: Invalid user backlog from 49.232.14.216 port 50036
Sep 11 12:55:09 pv-11-ams1 sshd[22555]: Failed password for invalid user backlog from 49.232.14.216 port 50036 ssh2
Sep 11 12:59:46 pv-11-ams1 sshd[22732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.14.216  user=root
2020-09-12 05:07:02
222.186.190.2 attackspam
Failed password for invalid user from 222.186.190.2 port 4030 ssh2
2020-09-12 05:16:10
200.159.63.178 attackbots
5x Failed Password
2020-09-12 05:11:33
116.58.172.118 attackspambots
Sep 11 19:58:36 jane sshd[13706]: Failed password for root from 116.58.172.118 port 53937 ssh2
...
2020-09-12 05:14:21
181.143.226.67 attackbotsspam
Sep 11 16:03:03 Tower sshd[36422]: Connection from 181.143.226.67 port 50322 on 192.168.10.220 port 22 rdomain ""
Sep 11 16:03:04 Tower sshd[36422]: Failed password for root from 181.143.226.67 port 50322 ssh2
Sep 11 16:03:04 Tower sshd[36422]: Received disconnect from 181.143.226.67 port 50322:11: Bye Bye [preauth]
Sep 11 16:03:04 Tower sshd[36422]: Disconnected from authenticating user root 181.143.226.67 port 50322 [preauth]
2020-09-12 05:02:51
118.244.128.4 attack
Sep 11 22:26:22 sshgateway sshd\[23515\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.244.128.4  user=root
Sep 11 22:26:25 sshgateway sshd\[23515\]: Failed password for root from 118.244.128.4 port 23999 ssh2
Sep 11 22:28:15 sshgateway sshd\[23757\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.244.128.4  user=root
2020-09-12 05:23:58

Recently Reported IPs

196.251.85.178 106.75.78.149 10.0.189.66 5.34.223.12
37.6.212.144 49.232.151.112 100.24.15.129 44.203.121.250
100.100.174.147 106.15.201.179 194.187.179.65 194.187.179.199
185.151.33.105 7.56.45.228 7.56.45.199 159.251.56.221
9.234.8.67 117.18.45.24 238.179.165.189 152.16.164.134