1.34.252.82 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Taiwan, China

Internet Service Provider: Chunghwa Telecom Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt detected from IP address 1.34.252.82 to port 23 [J]	2020-03-03 01:25:47

Comments on same subnet:

IP	Type	Details	Datetime
1.34.252.41	attack	Honeypot attack, port: 81, PTR: 1-34-252-41.HINET-IP.hinet.net.	2020-02-11 13:30:36
1.34.252.247	attackspambots	Unauthorized connection attempt detected from IP address 1.34.252.247 to port 23 [J]	2020-01-29 04:42:30

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.34.252.82
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61573
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.34.252.82.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020030201 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 03 01:25:41 CST 2020
;; MSG SIZE  rcvd: 115

Host info

82.252.34.1.in-addr.arpa domain name pointer 1-34-252-82.HINET-IP.hinet.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
82.252.34.1.in-addr.arpa	name = 1-34-252-82.HINET-IP.hinet.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
188.166.150.17	attackspam	2019-12-06T14:25:47.943210abusebot-4.cloudsearch.cf sshd\[25501\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.150.17 user=root	2019-12-06 22:42:33
163.172.223.186	attackspambots	Triggered by Fail2Ban at Vostok web server	2019-12-06 22:25:56
202.159.18.194	attack	12/06/2019-01:22:48.552239 202.159.18.194 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-12-06 22:08:46
63.80.184.95	attackspambots	Dec 6 07:22:44 grey postfix/smtpd\[5416\]: NOQUEUE: reject: RCPT from linen.sapuxfiori.com\[63.80.184.95\]: 554 5.7.1 Service unavailable\; Client host \[63.80.184.95\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[63.80.184.95\]\; from=\ to=\ proto=ESMTP helo=\Dec 6 07:22:44 grey postfix/smtpd\[5420\]: NOQUEUE: reject: RCPT from linen.sapuxfiori.com\[63.80.184.95\]: 554 5.7.1 Service unavailable\; Client host \[63.80.184.95\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[63.80.184.95\]\; from=\ to=\ proto=ESMTP helo=\ ...	2019-12-06 22:14:53
125.138.89.140	attackspam	$f2bV_matches	2019-12-06 22:39:59
200.225.212.228	attackbotsspam	Unauthorised access (Dec 6) SRC=200.225.212.228 LEN=48 TTL=109 ID=31087 DF TCP DPT=445 WINDOW=8192 SYN Unauthorised access (Dec 3) SRC=200.225.212.228 LEN=52 TTL=109 ID=18407 DF TCP DPT=445 WINDOW=8192 SYN	2019-12-06 22:31:55
186.206.131.158	attackbotsspam	Dec 6 11:21:27 ns382633 sshd\[30604\]: Invalid user kjkbs from 186.206.131.158 port 53064 Dec 6 11:21:27 ns382633 sshd\[30604\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.206.131.158 Dec 6 11:21:29 ns382633 sshd\[30604\]: Failed password for invalid user kjkbs from 186.206.131.158 port 53064 ssh2 Dec 6 11:36:40 ns382633 sshd\[892\]: Invalid user elleker from 186.206.131.158 port 40576 Dec 6 11:36:40 ns382633 sshd\[892\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.206.131.158	2019-12-06 22:06:58
45.143.220.105	attackspambots	\[2019-12-06 06:52:58\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-06T06:52:58.101-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="901146462607510",SessionID="0x7f26c4bfca68",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.105/54755",ACLName="no_extension_match" \[2019-12-06 06:56:08\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-06T06:56:08.886-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="801146462607510",SessionID="0x7f26c4bfca68",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.105/62494",ACLName="no_extension_match" \[2019-12-06 06:58:51\] SECURITY\[2765\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-06T06:58:51.340-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="601146462607510",SessionID="0x7f26c4e9efa8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.105/56288",ACLName="no_	2019-12-06 22:17:55
115.94.204.156	attack	Dec 6 15:05:16 meumeu sshd[31685]: Failed password for sync from 115.94.204.156 port 43330 ssh2 Dec 6 15:11:47 meumeu sshd[32710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.94.204.156 Dec 6 15:11:49 meumeu sshd[32710]: Failed password for invalid user squid from 115.94.204.156 port 53440 ssh2 ...	2019-12-06 22:16:26
49.236.203.163	attackbots	Dec 6 04:30:54 sachi sshd\[13919\]: Invalid user harvey from 49.236.203.163 Dec 6 04:30:54 sachi sshd\[13919\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.236.203.163 Dec 6 04:30:56 sachi sshd\[13919\]: Failed password for invalid user harvey from 49.236.203.163 port 33960 ssh2 Dec 6 04:37:36 sachi sshd\[14517\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.236.203.163 user=mail Dec 6 04:37:38 sachi sshd\[14517\]: Failed password for mail from 49.236.203.163 port 40508 ssh2	2019-12-06 22:42:10
122.51.37.26	attack	Dec 6 15:45:12 ns381471 sshd[17564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.37.26 Dec 6 15:45:14 ns381471 sshd[17564]: Failed password for invalid user sanjavier from 122.51.37.26 port 60380 ssh2	2019-12-06 22:48:00
115.159.25.60	attackbotsspam	Dec 6 18:31:58 gw1 sshd[21933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.25.60 Dec 6 18:31:59 gw1 sshd[21933]: Failed password for invalid user content from 115.159.25.60 port 39524 ssh2 ...	2019-12-06 22:09:03
112.85.42.89	attackbots	Dec 6 15:51:22 server sshd\[14247\]: User root from 112.85.42.89 not allowed because listed in DenyUsers Dec 6 15:51:22 server sshd\[14247\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.89 user=root Dec 6 15:51:24 server sshd\[14247\]: Failed password for invalid user root from 112.85.42.89 port 24534 ssh2 Dec 6 15:51:27 server sshd\[14247\]: Failed password for invalid user root from 112.85.42.89 port 24534 ssh2 Dec 6 15:51:30 server sshd\[14247\]: Failed password for invalid user root from 112.85.42.89 port 24534 ssh2	2019-12-06 22:05:39
132.232.107.248	attack	Dec 6 15:17:58 nextcloud sshd\[11209\]: Invalid user kumpf from 132.232.107.248 Dec 6 15:17:58 nextcloud sshd\[11209\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.107.248 Dec 6 15:18:00 nextcloud sshd\[11209\]: Failed password for invalid user kumpf from 132.232.107.248 port 41226 ssh2 ...	2019-12-06 22:27:24
121.239.108.214	attackspambots	FTP Brute Force	2019-12-06 22:22:42

Recently Reported IPs

58.122.234.115	37.145.77.253	204.136.196.8	116.16.230.60
199.202.180.50	50.249.177.111	173.190.180.114	220.180.167.150
1.138.146.153	80.101.9.103	220.134.170.230	52.89.244.126
58.187.85.8	89.79.239.148	16.171.32.238	138.14.144.35
77.140.147.103	60.44.231.220	174.27.18.135	216.48.213.82