142.91.118.52 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 142.91.118.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34419
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;142.91.118.52.			IN	A

;; AUTHORITY SECTION:
.			194	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 20:37:17 CST 2022
;; MSG SIZE  rcvd: 106

Host info

52.118.91.142.in-addr.arpa domain name pointer ip52.ip-142-91-118.mpp.wa.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
52.118.91.142.in-addr.arpa	name = ip52.ip-142-91-118.mpp.wa.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
193.32.160.144	attackspambots	Oct 14 01:09:19 relay postfix/smtpd\[5381\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.144\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.142\]\> Oct 14 01:09:19 relay postfix/smtpd\[5381\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.144\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.142\]\> Oct 14 01:09:19 relay postfix/smtpd\[5381\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.144\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.142\]\> Oct 14 01:09:19 relay postfix/smtpd\[5381\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.144\]: 554 5.7.1 \: Relay access denied\; from=\	2019-10-14 07:32:27
118.174.45.29	attack	Oct 14 00:13:33 dev0-dcde-rnet sshd[946]: Failed password for root from 118.174.45.29 port 54920 ssh2 Oct 14 00:18:12 dev0-dcde-rnet sshd[970]: Failed password for root from 118.174.45.29 port 37570 ssh2	2019-10-14 07:40:27
157.119.189.93	attackbots	F2B jail: sshd. Time: 2019-10-14 01:24:11, Reported by: VKReport	2019-10-14 07:37:28
5.188.211.10	attackbotsspam	[SunOct1321:51:20.3441112019][:error][pid27856:tid139812038645504][client5.188.211.10:34920][client5.188.211.10]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\\|WormlyBot\\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"395"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSIE6.0detected\(DisableifyouwanttoallowMSIE6\)"][severity"WARNING"][hostname"www.divingprestige.com"][uri"/index.php/ct-menu-item-3/climate"][unique_id"XaOAOB72ZaIUUd6NKJYZ5gAAAEE"][SunOct1322:13:13.3715502019][:error][pid2401:tid139811849471744][client5.188.211.10:34559][client5.188.211.10]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\\|WormlyBot\\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"395"][id"397989"][rev"1"][msg"Atomicorp.co	2019-10-14 07:14:10
95.33.24.208	attackbotsspam	2019-10-13T22:54:00.497880abusebot-5.cloudsearch.cf sshd\[12988\]: Invalid user russel from 95.33.24.208 port 52350	2019-10-14 07:17:31
175.153.114.28	attackbotsspam	" "	2019-10-14 07:16:01
185.90.117.35	attack	10/13/2019-18:59:50.485520 185.90.117.35 Protocol: 6 ET SCAN Potential SSH Scan	2019-10-14 07:02:49
167.86.114.108	attackbots	2019-10-13T22:50:12.202824abusebot-3.cloudsearch.cf sshd\[16037\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmi267007.contaboserver.net user=root	2019-10-14 07:03:28
185.90.116.84	attackspam	10/13/2019-17:14:51.174330 185.90.116.84 Protocol: 6 ET SCAN Potential SSH Scan	2019-10-14 07:34:59
188.142.205.233	attack	Automatic report - Port Scan Attack	2019-10-14 07:18:36
80.147.59.28	attack	Oct 13 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=80.147.59.28, lip=REMOVED, TLS, session=\ Oct 13 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=80.147.59.28, lip=REMOVED, TLS: Disconnected, session=\ Oct 13 REMOVED dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=80.147.59.28, lip=REMOVED, TLS, session=\	2019-10-14 07:04:44
185.216.140.180	attackbotsspam	10/13/2019-18:49:54.501322 185.216.140.180 Protocol: 6 ET SCAN Suspicious inbound to mySQL port 3306	2019-10-14 07:12:41
211.114.176.34	attack	2019-10-13T22:47:26.959615abusebot-5.cloudsearch.cf sshd\[12947\]: Invalid user robert from 211.114.176.34 port 44624	2019-10-14 07:14:31
46.188.109.21	attackbotsspam	proto=tcp . spt=60301 . dpt=25 . (Found on Dark List de Oct 13) (774)	2019-10-14 07:03:44
103.240.161.59	attackspambots	B: zzZZzz blocked content access	2019-10-14 07:43:01

Recently Reported IPs

106.12.218.76	187.108.39.64	101.71.143.135	178.138.33.174
5.9.103.181	163.204.213.140	113.83.184.9	183.83.167.215
116.68.103.61	36.91.98.115	123.25.223.7	198.98.48.202
31.40.27.39	95.57.176.49	172.70.224.75	123.4.242.81
139.5.223.204	42.82.225.81	96.61.169.247	187.163.113.28