1.53.252.35 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.53.252.99	attack	Jun 21 22:27:56 debian-2gb-nbg1-2 kernel: \[15029955.253588\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=1.53.252.99 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=5266 PROTO=TCP SPT=54093 DPT=3384 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-22 04:28:46
1.53.252.99	attackspambots	Jun 21 14:36:02 debian-2gb-nbg1-2 kernel: \[15001641.869419\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=1.53.252.99 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=45128 PROTO=TCP SPT=54096 DPT=3397 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-22 01:22:40
1.53.252.99	attack	Tried our host z.	2020-06-14 15:44:42

Type

Details

Datetime

1.53.252.99

attack

Jun 21 22:27:56 debian-2gb-nbg1-2 kernel: \[15029955.253588\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=1.53.252.99 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=5266 PROTO=TCP SPT=54093 DPT=3384 WINDOW=1024 RES=0x00 SYN URGP=0

2020-06-22 04:28:46

1.53.252.99

attackspambots

Jun 21 14:36:02 debian-2gb-nbg1-2 kernel: \[15001641.869419\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=1.53.252.99 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=45128 PROTO=TCP SPT=54096 DPT=3397 WINDOW=1024 RES=0x00 SYN URGP=0

2020-06-22 01:22:40

1.53.252.99

attack

Tried our host z.

2020-06-14 15:44:42

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.53.252.35
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8427
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.53.252.35.			IN	A

;; AUTHORITY SECTION:
.			470	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022001 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 21 12:36:15 CST 2022
;; MSG SIZE  rcvd: 104

Host info

Host 35.252.53.1.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 35.252.53.1.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.21.217.80	attack	Scan detected 2020.03.27 16:16:39 blocked until 2020.04.21 13:48:02	2020-03-30 15:13:36
206.189.47.166	attackspam	Mar 30 08:08:31 [HOSTNAME] sshd[9616]: Invalid user applmgr from 206.189.47.166 port 57384 Mar 30 08:08:31 [HOSTNAME] sshd[9616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.47.166 Mar 30 08:08:32 [HOSTNAME] sshd[9616]: Failed password for invalid user applmgr from 206.189.47.166 port 57384 ssh2 ...	2020-03-30 14:55:31
116.196.104.100	attackspam	DATE:2020-03-30 07:59:07, IP:116.196.104.100, PORT:ssh SSH brute force auth (docker-dc)	2020-03-30 14:50:31
170.210.203.201	attackbots	Brute-force attempt banned	2020-03-30 14:52:44
178.128.83.204	attackspambots	SSH Brute Force	2020-03-30 14:50:52
49.234.63.140	attackbots	B: Abusive ssh attack	2020-03-30 14:58:31
222.186.15.91	attack	DATE:2020-03-30 08:52:35, IP:222.186.15.91, PORT:ssh SSH brute force auth on honeypot server (epe-honey1-hq)	2020-03-30 15:19:49
119.40.33.22	attackbotsspam	Mar 29 20:54:22 mockhub sshd[10587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.40.33.22 Mar 29 20:54:24 mockhub sshd[10587]: Failed password for invalid user fwo from 119.40.33.22 port 37546 ssh2 ...	2020-03-30 14:50:19
183.89.214.173	attackspambots	B: Magento admin pass test (wrong country)	2020-03-30 14:52:17
103.86.152.226	attack	1585540458 - 03/30/2020 05:54:18 Host: 103.86.152.226/103.86.152.226 Port: 445 TCP Blocked	2020-03-30 14:56:10
129.204.207.49	attack	Invalid user Michelle from 129.204.207.49 port 49818	2020-03-30 14:59:52
99.81.217.14	attack	Scan detected 2020.03.27 15:04:37 blocked until 2020.04.21 12:36:00	2020-03-30 15:14:51
217.78.61.143	attack	Received: from 217.78.61.143 (HELO 182.22.12.247) (217.78.61.143) Return-Path: From: "vohrals@gxususwhtbucgoyfu.jp" Subject: 本物を確認したいあなたにお届けします X-Mailer: Microsoft Outlook, Build 10.0.2616 http://i9q.cn/4HpseC 203.195.186.176 server_redirect temporary http://k7njjrcwnhi4vyc.ru/ 104.27.191.83 104.27.190.83 2606:4700:3034::681b:be53 2606:4700:3030::681b:bf53 server_redirect temporary http://k7njjrcwnhi4vyc.ru/uNzu2C/	2020-03-30 14:44:41
115.68.184.88	attack	Mar 30 08:51:33 srv206 sshd[21777]: Invalid user postgres from 115.68.184.88 Mar 30 08:51:33 srv206 sshd[21777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.68.184.88 Mar 30 08:51:33 srv206 sshd[21777]: Invalid user postgres from 115.68.184.88 Mar 30 08:51:35 srv206 sshd[21777]: Failed password for invalid user postgres from 115.68.184.88 port 52414 ssh2 ...	2020-03-30 14:54:36
218.87.193.193	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-03-30 15:27:29

Recently Reported IPs

1.53.143.175	1.53.198.0	1.53.205.24	1.53.25.37
1.53.67.178	1.53.89.83	1.53.48.160	1.54.133.163
1.54.101.208	1.54.199.150	1.54.213.185	1.54.4.109
1.54.7.187	1.54.214.28	1.55.108.196	1.55.109.88
1.55.215.132	1.55.109.250	1.55.14.212	1.55.181.33