109.111.149.52

Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 109.111.149.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58096
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;109.111.149.52.			IN	A

;; AUTHORITY SECTION:
.			585	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022800 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 17:09:01 CST 2022
;; MSG SIZE  rcvd: 107

Host info

52.149.111.109.in-addr.arpa domain name pointer ppp109-111-149-52.tis-dialog.ru.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
52.149.111.109.in-addr.arpa	name = ppp109-111-149-52.tis-dialog.ru.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
129.28.172.220	attackspam	2020-10-06T11:09:34.441954Z 961c618c0904 New connection: 129.28.172.220:48240 (172.17.0.5:2222) [session: 961c618c0904] 2020-10-06T11:24:26.157331Z dd940aacd158 New connection: 129.28.172.220:48560 (172.17.0.5:2222) [session: dd940aacd158]	2020-10-07 03:23:00
111.229.165.57	attack	Oct 6 11:41:56 ny01 sshd[1645]: Failed password for root from 111.229.165.57 port 38738 ssh2 Oct 6 11:44:44 ny01 sshd[1984]: Failed password for root from 111.229.165.57 port 42392 ssh2	2020-10-07 03:22:33
49.233.177.197	attack	2020-10-06T13:25:28.549343linuxbox-skyline sshd[23100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.177.197 user=root 2020-10-06T13:25:30.465841linuxbox-skyline sshd[23100]: Failed password for root from 49.233.177.197 port 48386 ssh2 ...	2020-10-07 03:32:36
114.227.111.55	attackspam	Brute forcing email accounts	2020-10-07 03:08:38
89.144.47.246	attackbots	ET CINS Active Threat Intelligence Poor Reputation IP group 77 - port: 3389 proto: tcp cat: Misc Attackbytes: 60	2020-10-07 03:28:51
139.59.129.59	attackbotsspam	2020-10-06 14:06:47.881126-0500 localhost sshd[48854]: Failed password for root from 139.59.129.59 port 35200 ssh2	2020-10-07 03:13:56
149.72.50.241	attackbots	Dear Customer, we inform you that the domain bleta.net , to which this mail account is linked, will expire on 10/07/2020. We wish to remind you that, if the domain is not renewed by that date, these and all associated services, including mailboxes, will be deactivated and can no longer be used for sending and receiving. HOW TO RENEW THE DOMAIN? The Β؜؜؜l؜؜؜u؜؜؜е؜؜؜h؜؜؜s؜؜؜ο؜؜؜t customer who has the login and password to access the domain, will be able to renew simply by placing an order online. RENEW THE DOMAIN Thank you for choosing Β؜؜؜l؜؜؜u؜؜؜е؜؜؜h؜؜؜s؜؜؜ο؜؜؜t ! Sincerely, Β؜؜؜l؜؜؜u؜؜؜е؜؜؜h؜؜؜s؜؜؜ο؜؜؜t Customer Care	2020-10-07 03:05:28
203.190.55.213	attackspambots	Oct 6 19:51:23 s2 sshd[20019]: Failed password for root from 203.190.55.213 port 38818 ssh2 Oct 6 20:00:05 s2 sshd[20499]: Failed password for root from 203.190.55.213 port 54150 ssh2	2020-10-07 02:58:50
90.180.207.135	attackbotsspam	60681/udp [2020-10-05]1pkt	2020-10-07 02:55:50
120.131.14.125	attackbots	prod8 ...	2020-10-07 03:25:26
43.226.148.89	attack	43.226.148.89 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 6 12:22:46 server5 sshd[1764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.95.86.157 user=root Oct 6 12:21:14 server5 sshd[1326]: Failed password for root from 93.145.115.206 port 1282 ssh2 Oct 6 12:21:15 server5 sshd[1328]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.226.148.89 user=root Oct 6 12:21:05 server5 sshd[1322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.191.25 user=root Oct 6 12:21:07 server5 sshd[1322]: Failed password for root from 106.13.191.25 port 60400 ssh2 Oct 6 12:21:17 server5 sshd[1328]: Failed password for root from 43.226.148.89 port 42688 ssh2 IP Addresses Blocked: 223.95.86.157 (CN/China/-) 93.145.115.206 (IT/Italy/-)	2020-10-07 02:57:18
49.234.131.75	attackbotsspam	2020-10-06T12:26:32.860602amanda2.illicoweb.com sshd\[24036\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.131.75 user=root 2020-10-06T12:26:35.271828amanda2.illicoweb.com sshd\[24036\]: Failed password for root from 49.234.131.75 port 47076 ssh2 2020-10-06T12:31:31.890493amanda2.illicoweb.com sshd\[24396\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.131.75 user=root 2020-10-06T12:31:34.015662amanda2.illicoweb.com sshd\[24396\]: Failed password for root from 49.234.131.75 port 49022 ssh2 2020-10-06T12:36:25.487395amanda2.illicoweb.com sshd\[24551\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.131.75 user=root ...	2020-10-07 02:56:17
112.217.207.130	attack	failed root login	2020-10-07 03:24:33
68.183.126.143	attack	Oct 6 20:44:39 host2 sshd[1567792]: Failed password for root from 68.183.126.143 port 48418 ssh2 Oct 6 20:46:23 host2 sshd[1567828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.126.143 user=root Oct 6 20:46:25 host2 sshd[1567828]: Failed password for root from 68.183.126.143 port 49426 ssh2 Oct 6 20:46:23 host2 sshd[1567828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.126.143 user=root Oct 6 20:46:25 host2 sshd[1567828]: Failed password for root from 68.183.126.143 port 49426 ssh2 ...	2020-10-07 03:01:55
211.118.226.133	attackspambots	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-10-07 03:10:49

Recently Reported IPs

109.111.149.30	109.111.149.56	109.111.149.95	109.111.149.82
109.111.149.50	109.111.15.62	109.111.15.69	109.111.150.11
109.111.150.130	109.111.150.138	109.111.150.16	109.111.150.151
109.111.150.132	109.111.150.135	109.111.150.19	109.111.150.148
109.111.150.209	109.111.150.21	109.111.150.219	109.111.150.221