Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: CloudRoute LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Sep 26 04:07:45 aiointranet sshd\[25301\]: Invalid user sttest from 64.52.109.3
Sep 26 04:07:45 aiointranet sshd\[25301\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.52.109.3
Sep 26 04:07:47 aiointranet sshd\[25301\]: Failed password for invalid user sttest from 64.52.109.3 port 37900 ssh2
Sep 26 04:12:13 aiointranet sshd\[25732\]: Invalid user alary from 64.52.109.3
Sep 26 04:12:13 aiointranet sshd\[25732\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.52.109.3
2019-09-27 01:54:34
attack
Sep 21 20:27:48 srv206 sshd[8511]: Invalid user oz from 64.52.109.3
Sep 21 20:27:48 srv206 sshd[8511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.52.109.3
Sep 21 20:27:48 srv206 sshd[8511]: Invalid user oz from 64.52.109.3
Sep 21 20:27:50 srv206 sshd[8511]: Failed password for invalid user oz from 64.52.109.3 port 58094 ssh2
...
2019-09-22 02:33:45
attack
Sep 20 03:09:36 v22019058497090703 sshd[25845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.52.109.3
Sep 20 03:09:37 v22019058497090703 sshd[25845]: Failed password for invalid user secdemo from 64.52.109.3 port 44250 ssh2
Sep 20 03:13:37 v22019058497090703 sshd[26241]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.52.109.3
...
2019-09-20 09:22:20
Comments on same subnet:
IP Type Details Datetime
64.52.109.192 attackspambots
Apr  8 03:05:47 host sshd[14803]: Invalid user ubnt from 64.52.109.192 port 50762
...
2020-04-08 09:26:09
64.52.109.12 attackspambots
Aug 20 19:27:16 [host] sshd[14701]: Invalid user joseph from 64.52.109.12
Aug 20 19:27:16 [host] sshd[14701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.52.109.12
Aug 20 19:27:18 [host] sshd[14701]: Failed password for invalid user joseph from 64.52.109.12 port 51506 ssh2
2019-08-21 06:20:50
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 64.52.109.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20608
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;64.52.109.3.			IN	A

;; AUTHORITY SECTION:
.			557	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091902 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 20 09:22:16 CST 2019
;; MSG SIZE  rcvd: 115
Host info
3.109.52.64.in-addr.arpa domain name pointer 64.52.109.3.static.skysilk.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
3.109.52.64.in-addr.arpa	name = 64.52.109.3.static.skysilk.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
223.242.246.173 attackbotsspam
account brute force by foreign IP
2019-08-06 10:27:29
121.232.148.122 attack
account brute force by foreign IP
2019-08-06 10:37:19
195.154.114.153 attackbotsspam
Honeypot attack, application: ssdp, PTR: 195-154-114-153.rev.poneytelecom.eu.
2019-08-06 10:47:30
5.55.92.194 attackbots
Telnet Server BruteForce Attack
2019-08-06 10:17:56
183.166.124.46 attack
account brute force by foreign IP
2019-08-06 11:07:23
14.157.104.211 attackspambots
Honeypot attack, port: 23, PTR: PTR record not found
2019-08-06 11:06:17
36.62.211.216 attackspam
account brute force by foreign IP
2019-08-06 10:39:00
49.72.4.64 attack
account brute force by foreign IP
2019-08-06 10:55:29
121.233.207.234 attack
account brute force by foreign IP
2019-08-06 11:08:34
123.55.147.41 attackspam
account brute force by foreign IP
2019-08-06 10:42:51
121.232.194.153 attackbotsspam
account brute force by foreign IP
2019-08-06 10:45:06
223.241.4.217 attack
account brute force by foreign IP
2019-08-06 10:43:27
60.184.115.188 attack
account brute force by foreign IP
2019-08-06 10:43:09
183.6.43.104 attack
Aug  6 05:09:47 pkdns2 sshd\[24997\]: Invalid user prova from 183.6.43.104Aug  6 05:09:48 pkdns2 sshd\[24997\]: Failed password for invalid user prova from 183.6.43.104 port 20269 ssh2Aug  6 05:10:51 pkdns2 sshd\[25081\]: Invalid user karim from 183.6.43.104Aug  6 05:10:52 pkdns2 sshd\[25081\]: Failed password for invalid user karim from 183.6.43.104 port 33659 ssh2Aug  6 05:11:56 pkdns2 sshd\[25117\]: Invalid user jdeleon from 183.6.43.104Aug  6 05:11:59 pkdns2 sshd\[25117\]: Failed password for invalid user jdeleon from 183.6.43.104 port 47119 ssh2
...
2019-08-06 10:19:43
132.145.21.100 attackspambots
Aug  6 03:35:57 cp sshd[26263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.21.100
2019-08-06 10:23:33

Recently Reported IPs

103.57.222.174 5.135.108.140 118.97.173.18 150.109.204.109
36.82.96.32 156.222.204.93 91.151.93.133 217.26.23.89
187.7.225.90 41.39.89.95 5.160.243.212 113.253.67.201
52.127.192.225 150.214.237.190 92.177.110.149 60.112.190.33
193.206.109.198 172.51.226.250 57.25.105.246 109.72.97.66