153.92.5.20 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
153.92.5.4	attackspam	"[sshd] failed login attempts"	2019-07-12 02:19:58
153.92.5.4	attackbotsspam	Jul 9 01:06:04 ns37 sshd[13834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.92.5.4 Jul 9 01:06:06 ns37 sshd[13834]: Failed password for invalid user testuser from 153.92.5.4 port 57090 ssh2 Jul 9 01:08:50 ns37 sshd[13933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.92.5.4	2019-07-09 08:56:46
153.92.5.4	attack	Jun 29 14:50:52 localhost sshd\[22473\]: Invalid user pw from 153.92.5.4 port 40650 Jun 29 14:50:52 localhost sshd\[22473\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.92.5.4 ...	2019-06-30 00:15:31

Type

Details

Datetime

153.92.5.4

attackspam

"[sshd] failed login attempts"

2019-07-12 02:19:58

153.92.5.4

attackbotsspam

Jul  9 01:06:04 ns37 sshd[13834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.92.5.4
Jul  9 01:06:06 ns37 sshd[13834]: Failed password for invalid user testuser from 153.92.5.4 port 57090 ssh2
Jul  9 01:08:50 ns37 sshd[13933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.92.5.4

2019-07-09 08:56:46

153.92.5.4

attack

Jun 29 14:50:52 localhost sshd\[22473\]: Invalid user pw from 153.92.5.4 port 40650
Jun 29 14:50:52 localhost sshd\[22473\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.92.5.4
...

2019-06-30 00:15:31

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 153.92.5.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49148
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;153.92.5.20.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025021102 1800 900 604800 86400

;; Query time: 40 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 12 13:27:22 CST 2025
;; MSG SIZE  rcvd: 104

Host info

20.5.92.153.in-addr.arpa domain name pointer srv538165.hstgr.cloud.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
20.5.92.153.in-addr.arpa	name = srv538165.hstgr.cloud.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
103.203.39.156	attack	3389BruteforceFW23	2019-12-29 05:31:07
222.186.173.226	attack	Dec 28 16:39:09 linuxvps sshd\[21464\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.226 user=root Dec 28 16:39:12 linuxvps sshd\[21464\]: Failed password for root from 222.186.173.226 port 21919 ssh2 Dec 28 16:39:29 linuxvps sshd\[21694\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.226 user=root Dec 28 16:39:31 linuxvps sshd\[21694\]: Failed password for root from 222.186.173.226 port 61710 ssh2 Dec 28 16:39:50 linuxvps sshd\[21926\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.226 user=root	2019-12-29 05:48:14
159.65.246.30	attackspambots	xmlrpc attack	2019-12-29 05:55:50
85.203.15.121	attackbots	\[2019-12-28 15:45:02\] NOTICE\[2839\] chan_sip.c: Registration from '\' failed for '85.203.15.121:64025' - Wrong password \[2019-12-28 15:45:02\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-28T15:45:02.668-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="3684",SessionID="0x7f0fb41816e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/85.203.15.121/64025",Challenge="491386a0",ReceivedChallenge="491386a0",ReceivedHash="815e395cac85586c24717cc966477e80" \[2019-12-28 15:46:48\] NOTICE\[2839\] chan_sip.c: Registration from '\' failed for '85.203.15.121:53156' - Wrong password \[2019-12-28 15:46:48\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-28T15:46:48.076-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1165",SessionID="0x7f0fb4a47618",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/85.203.15	2019-12-29 05:29:36
123.17.153.222	attack	1577543077 - 12/28/2019 15:24:37 Host: 123.17.153.222/123.17.153.222 Port: 445 TCP Blocked	2019-12-29 05:56:48
190.17.243.137	attackbotsspam	Dec 28 15:24:30 exim[14800]: [1\55] 1ilD12-0003qi-Mo H=137-243-17-190.fibertel.com.ar [190.17.243.137] F= rejected after DATA: This message scored 24.0 spam points.	2019-12-29 05:40:28
51.143.115.136	attack	\[2019-12-28 16:50:24\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-28T16:50:24.743-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="880441902933979",SessionID="0x7f0fb41816e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.143.115.136/61229",ACLName="no_extension_match" \[2019-12-28 16:53:21\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-28T16:53:21.476-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="88000441902933979",SessionID="0x7f0fb4a5a908",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.143.115.136/63788",ACLName="no_extension_match" \[2019-12-28 16:59:11\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-28T16:59:11.683-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="0888441902933979",SessionID="0x7f0fb43ff028",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.143.115.136/56179",ACLName="	2019-12-29 05:59:56
203.146.170.167	attackbotsspam	SSH brutforce	2019-12-29 05:24:58
118.24.255.75	attack	Dec 28 21:56:30 mail sshd[30169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.255.75 Dec 28 21:56:32 mail sshd[30169]: Failed password for invalid user heide from 118.24.255.75 port 56614 ssh2 ...	2019-12-29 05:30:46
106.13.81.162	attackbots	ssh failed login	2019-12-29 05:54:47
80.108.220.67	attackbotsspam	Invalid user backup from 80.108.220.67 port 44558	2019-12-29 05:48:36
193.148.69.157	attack	Dec 28 22:30:11 MK-Soft-VM5 sshd[17635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.148.69.157 Dec 28 22:30:12 MK-Soft-VM5 sshd[17635]: Failed password for invalid user server from 193.148.69.157 port 58574 ssh2 ...	2019-12-29 05:39:43
181.176.164.178	attackspam	181.176.164.178 - - [28/Dec/2019:09:24:49 -0500] "GET /?page=..%2f..%2f..%2fetc%2fpasswd&action=view& HTTP/1.1" 200 17542 "https://ccbrass.com/?page=..%2f..%2f..%2fetc%2fpasswd&action=view&" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0" ...	2019-12-29 05:46:59
85.93.20.34	attack	20 attempts against mh-misbehave-ban on air.magehost.pro	2019-12-29 05:39:12
115.111.89.94	attack	Unauthorized connection attempt detected from IP address 115.111.89.94 to port 22	2019-12-29 05:54:28

Recently Reported IPs

35.212.107.19	166.27.88.59	103.22.124.81	6.161.136.13
167.133.241.32	97.136.96.194	91.54.147.138	152.254.240.9
212.48.97.59	205.147.155.50	56.166.111.185	205.111.43.73
83.134.173.56	38.130.128.228	207.107.38.185	99.151.90.216
186.67.38.202	80.56.124.245	252.149.241.201	180.115.23.54