213.252.1.127 - IPInfo

Basic Info

City: Munich

Region: Bayern

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
213.252.140.118	attackbots	Invalid user support from 213.252.140.118 port 41084	2020-01-15 04:21:26
213.252.140.118	attackspambots	Automatic report - XMLRPC Attack	2019-10-30 12:19:01
213.252.140.118	attackbotsspam	Automatic report - XMLRPC Attack	2019-10-05 15:26:59

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 213.252.1.127
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36024
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;213.252.1.127.			IN	A

;; AUTHORITY SECTION:
.			385	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022110200 1800 900 604800 86400

;; Query time: 116 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 02 23:39:37 CST 2022
;; MSG SIZE  rcvd: 106

Host info

127.1.252.213.in-addr.arpa domain name pointer 127.ipandmore.de.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
127.1.252.213.in-addr.arpa	name = 127.ipandmore.de.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
196.218.5.243	attackspambots	Honeypot attack, port: 81, PTR: host-196.218.5.243-static.tedata.net.	2020-09-17 04:44:11
161.35.200.85	attack	TCP (SYN) 161.35.200.85:47507 -> port 27478, len 44	2020-09-17 05:04:43
212.83.138.123	attackspam	[2020-09-16 16:53:12] NOTICE[1239] chan_sip.c: Registration from '"1621" ' failed for '212.83.138.123:5074' - Wrong password [2020-09-16 16:53:12] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-16T16:53:12.052-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1621",SessionID="0x7f4d482e4338",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.138.123/5074",Challenge="2e3af6c1",ReceivedChallenge="2e3af6c1",ReceivedHash="2def2e063bc80713147af7d2219d2cb5" [2020-09-16 16:55:09] NOTICE[1239] chan_sip.c: Registration from '"1721" ' failed for '212.83.138.123:5067' - Wrong password [2020-09-16 16:55:09] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-16T16:55:09.729-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1721",SessionID="0x7f4d480d6c18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-09-17 05:08:04
27.50.21.157	attack	Unauthorized connection attempt from IP address 27.50.21.157 on Port 445(SMB)	2020-09-17 04:49:13
89.158.126.203	attackspambots	Sep 16 17:00:55 ssh2 sshd[64064]: User root from 89-158-126-203.rev.numericable.fr not allowed because not listed in AllowUsers Sep 16 17:00:56 ssh2 sshd[64064]: Failed password for invalid user root from 89.158.126.203 port 38108 ssh2 Sep 16 17:00:56 ssh2 sshd[64064]: Connection closed by invalid user root 89.158.126.203 port 38108 [preauth] ...	2020-09-17 05:15:43
94.102.57.240	attackbotsspam	[MK-VM3] Blocked by UFW	2020-09-17 04:52:38
209.141.54.111	attackbotsspam	Sep 16 22:55:45 hidden sshd[13308]: Invalid user rongey from 209.141.54.111 port 54520 Sep 16 22:55:45 hidden sshd[13308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.141.54.111 Sep 16 22:55:47 hidden sshd[13308]: Failed password for invalid user rongey from 209.141.54.111 port 54520 ssh2	2020-09-17 05:03:49
222.186.42.137	attackbots	Sep 16 21:57:52 rocket sshd[14451]: Failed password for root from 222.186.42.137 port 11130 ssh2 Sep 16 21:58:01 rocket sshd[14462]: Failed password for root from 222.186.42.137 port 44501 ssh2 ...	2020-09-17 05:03:02
213.160.156.181	attack	SSH brutforce	2020-09-17 04:59:48
185.117.215.9	attack	$f2bV_matches	2020-09-17 04:55:20
2.228.87.254	attackbots	Unauthorized connection attempt from IP address 2.228.87.254 on Port 445(SMB)	2020-09-17 05:16:14
204.48.20.244	attackspambots	firewall-block, port(s): 26932/tcp	2020-09-17 04:45:11
37.152.178.44	attackbotsspam	Sep 16 14:56:21 Tower sshd[5559]: Connection from 37.152.178.44 port 42406 on 192.168.10.220 port 22 rdomain "" Sep 16 14:56:24 Tower sshd[5559]: Failed password for root from 37.152.178.44 port 42406 ssh2 Sep 16 14:56:24 Tower sshd[5559]: Received disconnect from 37.152.178.44 port 42406:11: Bye Bye [preauth] Sep 16 14:56:24 Tower sshd[5559]: Disconnected from authenticating user root 37.152.178.44 port 42406 [preauth]	2020-09-17 04:59:34
58.214.84.149	attackspambots	Cluster member 67.227.229.95 (US/United States/host.cjthedj97.me) said, DENY 58.214.84.149, Reason:[(sshd) Failed SSH login from 58.214.84.149 (CN/China/-): 1 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER	2020-09-17 05:01:58
222.186.31.83	attack	$f2bV_matches	2020-09-17 05:07:33

Recently Reported IPs

77.213.98.181	198.146.184.192	213.252.1.106	68.62.255.86
111.219.71.19	113.127.11.223	221.114.26.12	51.77.61.129
80.231.98.128	215.164.230.219	138.21.34.4	95.96.123.147
101.119.228.175	194.169.170.193	194.169.170.60	0.100.103.70
56.210.36.207	103.109.56.228	74.206.157.155	162.32.173.65