1.52.34.242 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.52.34.255	attackbots	Nov 9 11:10:18 our-server-hostname postfix/smtpd[21488]: connect from unknown[1.52.34.255] Nov x@x Nov 9 11:10:20 our-server-hostname postfix/smtpd[21488]: lost connection after RCPT from unknown[1.52.34.255] Nov 9 11:10:20 our-server-hostname postfix/smtpd[21488]: disconnect from unknown[1.52.34.255] Nov 9 12:19:32 our-server-hostname postfix/smtpd[6511]: connect from unknown[1.52.34.255] Nov x@x Nov x@x Nov 9 12:19:39 our-server-hostname postfix/smtpd[6511]: lost connection after RCPT from unknown[1.52.34.255] Nov 9 12:19:39 our-server-hostname postfix/smtpd[6511]: disconnect from unknown[1.52.34.255] Nov 9 15:26:41 our-server-hostname postfix/smtpd[12316]: connect from unknown[1.52.34.255] Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x Nov x@x Nov 9 15:26:45 our-server-hostname postfix/smtpd[12316]: lost connection after RCPT from unknown[1.52.34.255] Nov 9 15:26:45 our-server-hostname postfix/smtpd[12316]: disconnect from unknown[1.52.34.255] Nov ........ -------------------------------	2019-11-09 17:39:02
1.52.34.14	attackbotsspam	Unauthorised access (Oct 11) SRC=1.52.34.14 LEN=52 TTL=44 ID=8351 DF TCP DPT=445 WINDOW=8192 SYN	2019-10-11 12:04:19

Type

Details

Datetime

1.52.34.255

attackbots

Nov  9 11:10:18 our-server-hostname postfix/smtpd[21488]: connect from unknown[1.52.34.255]
Nov x@x
Nov  9 11:10:20 our-server-hostname postfix/smtpd[21488]: lost connection after RCPT from unknown[1.52.34.255]
Nov  9 11:10:20 our-server-hostname postfix/smtpd[21488]: disconnect from unknown[1.52.34.255]
Nov  9 12:19:32 our-server-hostname postfix/smtpd[6511]: connect from unknown[1.52.34.255]
Nov x@x
Nov x@x
Nov  9 12:19:39 our-server-hostname postfix/smtpd[6511]: lost connection after RCPT from unknown[1.52.34.255]
Nov  9 12:19:39 our-server-hostname postfix/smtpd[6511]: disconnect from unknown[1.52.34.255]
Nov  9 15:26:41 our-server-hostname postfix/smtpd[12316]: connect from unknown[1.52.34.255]
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov x@x
Nov  9 15:26:45 our-server-hostname postfix/smtpd[12316]: lost connection after RCPT from unknown[1.52.34.255]
Nov  9 15:26:45 our-server-hostname postfix/smtpd[12316]: disconnect from unknown[1.52.34.255]
Nov  ........
-------------------------------

2019-11-09 17:39:02

1.52.34.14

attackbotsspam

Unauthorised access (Oct 11) SRC=1.52.34.14 LEN=52 TTL=44 ID=8351 DF TCP DPT=445 WINDOW=8192 SYN

2019-10-11 12:04:19

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.52.34.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27130
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.52.34.242.			IN	A

;; AUTHORITY SECTION:
.			367	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022001 1800 900 604800 86400

;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 21 12:36:13 CST 2022
;; MSG SIZE  rcvd: 104

Host info

Host 242.34.52.1.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 242.34.52.1.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
18.156.138.94	attackbots	18.156.138.94 - - [30/Jun/2020:04:55:14 +0100] "POST /wp-login.php HTTP/1.1" 200 1969 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 18.156.138.94 - - [30/Jun/2020:04:55:24 +0100] "POST /wp-login.php HTTP/1.1" 200 1977 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 18.156.138.94 - - [30/Jun/2020:04:55:26 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-06-30 13:31:31
185.22.142.197	attack	Jun 30 07:13:52 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jun 30 07:13:54 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jun 30 07:14:16 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jun 30 07:19:28 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jun 30 07:19:30 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 ...	2020-06-30 13:26:47
190.64.141.18	attackbots	Jun 30 00:51:56 firewall sshd[27208]: Invalid user serverpilot from 190.64.141.18 Jun 30 00:51:58 firewall sshd[27208]: Failed password for invalid user serverpilot from 190.64.141.18 port 59010 ssh2 Jun 30 00:55:16 firewall sshd[27310]: Invalid user postgres from 190.64.141.18 ...	2020-06-30 13:36:30
52.26.64.212	attack	Invalid user ccs from 52.26.64.212 port 50348	2020-06-30 13:24:58
20.44.216.74	attackspam	2020-06-30T05:07:30.581228shield sshd\[32568\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.44.216.74 user=root 2020-06-30T05:07:33.039101shield sshd\[32568\]: Failed password for root from 20.44.216.74 port 57552 ssh2 2020-06-30T05:11:04.256828shield sshd\[1320\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.44.216.74 user=root 2020-06-30T05:11:06.092452shield sshd\[1320\]: Failed password for root from 20.44.216.74 port 34292 ssh2 2020-06-30T05:14:41.728989shield sshd\[2713\]: Invalid user db2fenc1 from 20.44.216.74 port 39362	2020-06-30 13:27:58
180.244.121.211	attack	20/6/29@23:55:38: FAIL: Alarm-Network address from=180.244.121.211 ...	2020-06-30 13:19:01
191.249.39.0	attackspam	2020-06-30T08:26:35.439614ollin.zadara.org sshd[469032]: Invalid user kubernetes from 191.249.39.0 port 39339 2020-06-30T08:26:37.778842ollin.zadara.org sshd[469032]: Failed password for invalid user kubernetes from 191.249.39.0 port 39339 ssh2 ...	2020-06-30 13:36:04
186.234.249.196	attackbotsspam	Jun 30 01:17:59 ny01 sshd[4258]: Failed password for root from 186.234.249.196 port 16637 ssh2 Jun 30 01:21:38 ny01 sshd[4677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.234.249.196 Jun 30 01:21:40 ny01 sshd[4677]: Failed password for invalid user abhishek from 186.234.249.196 port 42570 ssh2	2020-06-30 13:25:59
91.206.14.169	attack	Jun 29 21:26:42 mockhub sshd[29105]: Failed password for root from 91.206.14.169 port 33838 ssh2 ...	2020-06-30 13:13:25
190.144.79.157	attackbotsspam	SSH Bruteforce attack	2020-06-30 13:31:45
116.73.117.80	attack	2020-06-30T03:55:40.963368abusebot-7.cloudsearch.cf sshd[1138]: Invalid user pi from 116.73.117.80 port 42814 2020-06-30T03:55:40.994945abusebot-7.cloudsearch.cf sshd[1139]: Invalid user pi from 116.73.117.80 port 42816 2020-06-30T03:55:41.223071abusebot-7.cloudsearch.cf sshd[1138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.73.117.80 2020-06-30T03:55:40.963368abusebot-7.cloudsearch.cf sshd[1138]: Invalid user pi from 116.73.117.80 port 42814 2020-06-30T03:55:43.129471abusebot-7.cloudsearch.cf sshd[1138]: Failed password for invalid user pi from 116.73.117.80 port 42814 ssh2 2020-06-30T03:55:41.258407abusebot-7.cloudsearch.cf sshd[1139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.73.117.80 2020-06-30T03:55:40.994945abusebot-7.cloudsearch.cf sshd[1139]: Invalid user pi from 116.73.117.80 port 42816 2020-06-30T03:55:43.164850abusebot-7.cloudsearch.cf sshd[1139]: Failed password for invalid u ...	2020-06-30 13:13:53
182.38.244.112	attackspam	IP 182.38.244.112 attacked honeypot on port: 23 at 6/29/2020 8:55:46 PM	2020-06-30 12:54:21
81.10.148.45	attack		2020-06-30 13:06:27
116.255.190.176	attack	Invalid user xing from 116.255.190.176 port 45100	2020-06-30 13:30:59
88.10.148.45	attackspambots		2020-06-30 13:05:57

Recently Reported IPs

1.52.236.5	1.52.57.68	1.52.218.216	1.52.88.148
1.52.96.149	1.53.12.18	1.53.143.175	1.53.252.35
1.53.198.0	1.53.205.24	1.53.25.37	1.53.67.178
1.53.89.83	1.53.48.160	1.54.133.163	1.54.101.208
1.54.199.150	1.54.213.185	1.54.4.109	1.54.7.187