143.255.52.102

Basic Info

City: unknown

Region: unknown

Country: Brazil

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
143.255.52.150	attack	Sep 7 13:32:59 mail.srvfarm.net postfix/smtpd[1077612]: warning: unknown[143.255.52.150]: SASL PLAIN authentication failed: Sep 7 13:32:59 mail.srvfarm.net postfix/smtpd[1077612]: lost connection after AUTH from unknown[143.255.52.150] Sep 7 13:33:18 mail.srvfarm.net postfix/smtpd[1077612]: warning: unknown[143.255.52.150]: SASL PLAIN authentication failed: Sep 7 13:33:18 mail.srvfarm.net postfix/smtpd[1077612]: lost connection after AUTH from unknown[143.255.52.150] Sep 7 13:34:16 mail.srvfarm.net postfix/smtpd[1077612]: warning: unknown[143.255.52.150]: SASL PLAIN authentication failed:	2020-09-12 01:12:12
143.255.52.150	attackbots	Sep 7 13:32:59 mail.srvfarm.net postfix/smtpd[1077612]: warning: unknown[143.255.52.150]: SASL PLAIN authentication failed: Sep 7 13:32:59 mail.srvfarm.net postfix/smtpd[1077612]: lost connection after AUTH from unknown[143.255.52.150] Sep 7 13:33:18 mail.srvfarm.net postfix/smtpd[1077612]: warning: unknown[143.255.52.150]: SASL PLAIN authentication failed: Sep 7 13:33:18 mail.srvfarm.net postfix/smtpd[1077612]: lost connection after AUTH from unknown[143.255.52.150] Sep 7 13:34:16 mail.srvfarm.net postfix/smtpd[1077612]: warning: unknown[143.255.52.150]: SASL PLAIN authentication failed:	2020-09-11 17:07:45
143.255.52.150	attack	Sep 7 13:32:59 mail.srvfarm.net postfix/smtpd[1077612]: warning: unknown[143.255.52.150]: SASL PLAIN authentication failed: Sep 7 13:32:59 mail.srvfarm.net postfix/smtpd[1077612]: lost connection after AUTH from unknown[143.255.52.150] Sep 7 13:33:18 mail.srvfarm.net postfix/smtpd[1077612]: warning: unknown[143.255.52.150]: SASL PLAIN authentication failed: Sep 7 13:33:18 mail.srvfarm.net postfix/smtpd[1077612]: lost connection after AUTH from unknown[143.255.52.150] Sep 7 13:34:16 mail.srvfarm.net postfix/smtpd[1077612]: warning: unknown[143.255.52.150]: SASL PLAIN authentication failed:	2020-09-11 09:21:21
143.255.52.200	attackbots	firewall-block, port(s): 445/tcp	2020-04-07 22:38:44

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 143.255.52.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35285
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;143.255.52.102.			IN	A

;; AUTHORITY SECTION:
.			241	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 81 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 10:03:27 CST 2022
;; MSG SIZE  rcvd: 107

Host info

102.52.255.143.in-addr.arpa domain name pointer 143.255.52.102.oxentenet.com.br.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
102.52.255.143.in-addr.arpa	name = 143.255.52.102.oxentenet.com.br.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
150.109.78.69	attack	Unauthorised connection attempt detected at AUO NODE 1. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-04-27 01:11:09
27.197.146.181	attackspambots	trying to access non-authorized port	2020-04-27 01:14:27
103.214.128.5	attackspam	Unauthorized connection attempt from IP address 103.214.128.5 on Port 445(SMB)	2020-04-27 01:53:27
27.3.73.60	attackspambots	Unauthorized connection attempt from IP address 27.3.73.60 on Port 445(SMB)	2020-04-27 01:24:43
84.17.46.203	attackspam	Forbidden directory scan :: 2020/04/26 12:00:27 [error] 33379#33379: *417159 access forbidden by rule, client: 84.17.46.203, server: [censored_1], request: "GET /.git//index HTTP/1.1", host: "www.[censored_1]"	2020-04-27 01:29:35
190.128.142.218	attackspam	Sent Mail to address hacked/leaked/bought from crystalproductions.cz between 2011 and 2018	2020-04-27 01:24:16
45.148.10.98	attack	Time: Sun Apr 26 08:48:51 2020 -0300 IP: 45.148.10.98 (NL/Netherlands/-) Failures: 30 (smtpauth) Interval: 3600 seconds Blocked: Permanent Block	2020-04-27 01:56:36
27.128.187.131	attackspam	Repeated brute force against a port	2020-04-27 01:35:00
125.27.255.222	attack	1587902409 - 04/26/2020 14:00:09 Host: 125.27.255.222/125.27.255.222 Port: 445 TCP Blocked	2020-04-27 01:46:06
211.145.49.129	attack	Apr 26 17:18:58 scw-6657dc sshd[7724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.145.49.129 Apr 26 17:18:58 scw-6657dc sshd[7724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.145.49.129 Apr 26 17:19:00 scw-6657dc sshd[7724]: Failed password for invalid user vnc from 211.145.49.129 port 28553 ssh2 ...	2020-04-27 01:36:32
193.82.253.203	attackspam	Apr 26 12:00:20 hermescis postfix/smtpd[26171]: NOQUEUE: reject: RCPT from 193-82-253-203.tpgi.com.au[193.82.253.203]: 550 5.1.1 : Recipient address rejected:* from= to= proto=ESMTP helo=<193-82-253-203.tpgi.com.au>	2020-04-27 01:28:26
217.9.144.5	attack	Unauthorized connection attempt from IP address 217.9.144.5 on Port 445(SMB)	2020-04-27 01:45:14
122.176.27.136	attackbots	9673/tcp 8089/tcp 8089/tcp [2020-04-06/26]3pkt	2020-04-27 01:20:45
88.102.244.211	attack	Apr 26 16:32:16 *** sshd[28105]: User root from 88.102.244.211 not allowed because not listed in AllowUsers	2020-04-27 01:27:25
49.37.142.211	attackspam	Unauthorized connection attempt from IP address 49.37.142.211 on Port 445(SMB)	2020-04-27 01:32:20

Recently Reported IPs

176.99.114.151	58.45.108.89	134.236.230.247	96.8.113.39
45.184.155.254	82.159.200.114	49.233.10.160	201.8.46.215
194.49.68.118	39.86.81.190	200.77.198.179	92.118.132.101
216.107.129.129	222.135.86.173	185.97.122.253	125.133.15.117
138.19.126.80	182.64.217.39	117.69.31.249	82.178.115.219