2.107.52.132 - IPInfo

Basic Info

City: Gandrup

Region: North Denmark

Country: Denmark

Internet Service Provider: TDC

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.107.52.132
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31096
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;2.107.52.132.			IN	A

;; AUTHORITY SECTION:
.			579	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022060700 1800 900 604800 86400

;; Query time: 75 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 07 19:47:11 CST 2022
;; MSG SIZE  rcvd: 105

Host info

132.52.107.2.in-addr.arpa domain name pointer 2-107-52-132-dynamic.dk.customer.tdc.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
132.52.107.2.in-addr.arpa	name = 2-107-52-132-dynamic.dk.customer.tdc.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
162.247.74.202	attackbots	$f2bV_matches	2019-09-01 11:44:42
42.112.185.242	attack	Aug 31 21:02:28 TORMINT sshd\[5182\]: Invalid user admin from 42.112.185.242 Aug 31 21:02:28 TORMINT sshd\[5182\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.112.185.242 Aug 31 21:02:30 TORMINT sshd\[5182\]: Failed password for invalid user admin from 42.112.185.242 port 40898 ssh2 ...	2019-09-01 11:12:00
54.36.149.73	attackbots	Automatic report - Banned IP Access	2019-09-01 11:36:08
103.60.212.2	attackbots	Reported by AbuseIPDB proxy server.	2019-09-01 11:45:02
118.97.113.234	attackbotsspam	f2b trigger Multiple SASL failures	2019-09-01 11:50:35
185.254.122.37	attackspam	Sep 1 03:47:23 h2177944 kernel: \[179119.832601\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.37 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=33773 PROTO=TCP SPT=44419 DPT=39168 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 1 03:47:23 h2177944 kernel: \[179119.886572\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.37 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x20 TTL=245 ID=38484 PROTO=TCP SPT=44419 DPT=44562 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 1 04:47:24 h2177944 kernel: \[182719.927766\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.37 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x20 TTL=245 ID=5525 PROTO=TCP SPT=44419 DPT=48237 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 1 04:47:25 h2177944 kernel: \[182720.789309\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.37 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x20 TTL=245 ID=37536 PROTO=TCP SPT=44419 DPT=64517 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 1 04:47:25 h2177944 kernel: \[182721.568089\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.254.122.37 DST=85.214.11	2019-09-01 11:21:22
187.92.96.242	attack	Aug 31 12:17:10 sachi sshd\[20296\]: Invalid user i from 187.92.96.242 Aug 31 12:17:10 sachi sshd\[20296\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.92.96.242 Aug 31 12:17:13 sachi sshd\[20296\]: Failed password for invalid user i from 187.92.96.242 port 45418 ssh2 Aug 31 12:23:16 sachi sshd\[20797\]: Invalid user git from 187.92.96.242 Aug 31 12:23:16 sachi sshd\[20797\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.92.96.242	2019-09-01 11:33:07
77.247.109.72	attack	\[2019-08-31 23:26:40\] NOTICE\[1829\] chan_sip.c: Registration from '"666" \' failed for '77.247.109.72:5596' - Wrong password \[2019-08-31 23:26:40\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-31T23:26:40.513-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="666",SessionID="0x7f7b302cefa8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.72/5596",Challenge="5acf85d6",ReceivedChallenge="5acf85d6",ReceivedHash="1d25ebd55cadf76a090af71d2c02eeae" \[2019-08-31 23:26:40\] NOTICE\[1829\] chan_sip.c: Registration from '"666" \' failed for '77.247.109.72:5596' - Wrong password \[2019-08-31 23:26:40\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-31T23:26:40.614-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="666",SessionID="0x7f7b301f31b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.2	2019-09-01 11:46:20
119.132.47.75	attackbotsspam	Aug 31 23:30:28 georgia postfix/smtpd[14488]: connect from unknown[119.132.47.75] Aug 31 23:30:29 georgia postfix/smtpd[14488]: warning: unknown[119.132.47.75]: SASL LOGIN authentication failed: authentication failure Aug 31 23:30:29 georgia postfix/smtpd[14488]: lost connection after AUTH from unknown[119.132.47.75] Aug 31 23:30:29 georgia postfix/smtpd[14488]: disconnect from unknown[119.132.47.75] ehlo=1 auth=0/1 commands=1/2 Aug 31 23:30:29 georgia postfix/smtpd[14488]: connect from unknown[119.132.47.75] Aug 31 23:30:30 georgia postfix/smtpd[14488]: warning: unknown[119.132.47.75]: SASL LOGIN authentication failed: authentication failure Aug 31 23:30:31 georgia postfix/smtpd[14488]: lost connection after AUTH from unknown[119.132.47.75] Aug 31 23:30:31 georgia postfix/smtpd[14488]: disconnect from unknown[119.132.47.75] ehlo=1 auth=0/1 commands=1/2 Aug 31 23:30:31 georgia postfix/smtpd[14488]: connect from unknown[119.132.47.75] Aug 31 23:30:32 georgia postfix/smtp........ -------------------------------	2019-09-01 11:25:34
104.238.97.230	attackbotsspam	Looking for resource vulnerabilities	2019-09-01 11:35:43
1.129.109.120	attack	Aug 31 21:44:48 web8 sshd\[19821\]: Invalid user jhon from 1.129.109.120 Aug 31 21:44:48 web8 sshd\[19821\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.129.109.120 Aug 31 21:44:50 web8 sshd\[19821\]: Failed password for invalid user jhon from 1.129.109.120 port 61885 ssh2 Aug 31 21:46:39 web8 sshd\[20802\]: Invalid user sampath from 1.129.109.120 Aug 31 21:46:39 web8 sshd\[20802\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.129.109.120	2019-09-01 11:40:48
167.160.64.69	attackbots	(From noreply@thewordpressclub0474.site) Hi There, Are you presently working with Wordpress/Woocommerce or maybe do you plan to work with it later ? We offer a little over 2500 premium plugins as well as themes 100 percent free to get : http://croad.xyz/Q5vFC Regards, Royal	2019-09-01 11:27:52
185.216.140.52	attackbots	08/31/2019-23:10:07.823672 185.216.140.52 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-09-01 11:51:25
91.214.146.100	attackspam	[portscan] Port scan	2019-09-01 11:44:20
209.97.169.136	attackspambots	Invalid user venom from 209.97.169.136 port 42572	2019-09-01 11:35:09

Recently Reported IPs

55.226.219.19	5.160.148.198	80.199.250.35	58.91.16.226
38.134.121.71	240.172.108.182	175.239.118.236	185.217.125.158
10.8.133.34	114.244.65.241	224.217.125.60	101.36.124.236
182.64.76.87	10.0.125.6	170.157.142.17	56.218.8.199
5.36.86.249	176.106.233.104	105.121.251.114	175.106.57.227