252.49.97.29 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 252.49.97.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15568
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;252.49.97.29.			IN	A

;; AUTHORITY SECTION:
.			561	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022032700 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 28 01:02:25 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 29.97.49.252.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 29.97.49.252.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
37.139.0.226	attackspam	Sep 11 19:44:17 game-panel sshd[23454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.139.0.226 Sep 11 19:44:19 game-panel sshd[23454]: Failed password for invalid user deploy from 37.139.0.226 port 52192 ssh2 Sep 11 19:49:59 game-panel sshd[23694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.139.0.226	2019-09-12 04:05:46
81.22.45.252	attackspam	09/11/2019-16:39:01.392270 81.22.45.252 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 85	2019-09-12 04:40:32
51.75.202.218	attackbots	Sep 11 21:28:23 MainVPS sshd[24602]: Invalid user mc from 51.75.202.218 port 34018 Sep 11 21:28:23 MainVPS sshd[24602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.202.218 Sep 11 21:28:23 MainVPS sshd[24602]: Invalid user mc from 51.75.202.218 port 34018 Sep 11 21:28:26 MainVPS sshd[24602]: Failed password for invalid user mc from 51.75.202.218 port 34018 ssh2 Sep 11 21:37:07 MainVPS sshd[25195]: Invalid user alexk from 51.75.202.218 port 57298 ...	2019-09-12 04:34:26
178.156.202.190	attack	ECShop Remote Code Execution Vulnerability, PTR: PTR record not found	2019-09-12 04:27:19
183.134.65.123	attackbots	Sep 11 20:01:22 MK-Soft-VM3 sshd\[7542\]: Invalid user ubuntu from 183.134.65.123 port 36984 Sep 11 20:01:22 MK-Soft-VM3 sshd\[7542\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.134.65.123 Sep 11 20:01:24 MK-Soft-VM3 sshd\[7542\]: Failed password for invalid user ubuntu from 183.134.65.123 port 36984 ssh2 ...	2019-09-12 04:08:45
177.141.124.120	attack	postfix	2019-09-12 04:13:49
206.81.11.216	attackbots	Sep 11 10:22:44 kapalua sshd\[13184\]: Invalid user student from 206.81.11.216 Sep 11 10:22:44 kapalua sshd\[13184\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.11.216 Sep 11 10:22:46 kapalua sshd\[13184\]: Failed password for invalid user student from 206.81.11.216 port 51502 ssh2 Sep 11 10:28:38 kapalua sshd\[13750\]: Invalid user odoo from 206.81.11.216 Sep 11 10:28:38 kapalua sshd\[13750\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.11.216	2019-09-12 04:32:47
141.98.80.80	attackbots	Sep 11 21:30:21 mail postfix/smtpd\[17518\]: warning: unknown\[141.98.80.80\]: SASL PLAIN authentication failed: \ Sep 11 21:30:31 mail postfix/smtpd\[18142\]: warning: unknown\[141.98.80.80\]: SASL PLAIN authentication failed: \ Sep 11 22:01:30 mail postfix/smtpd\[17395\]: warning: unknown\[141.98.80.80\]: SASL PLAIN authentication failed: \ Sep 11 22:01:39 mail postfix/smtpd\[13803\]: warning: unknown\[141.98.80.80\]: SASL PLAIN authentication failed: \	2019-09-12 04:13:32
194.187.249.38	attack	B: Magento admin pass test (wrong country)	2019-09-12 04:23:10
106.75.15.142	attack	Sep 11 21:50:37 plex sshd[32561]: Invalid user bots from 106.75.15.142 port 42260	2019-09-12 04:09:49
178.49.9.210	attackbotsspam	Sep 11 15:39:36 plusreed sshd[21778]: Invalid user alex from 178.49.9.210 ...	2019-09-12 03:58:10
146.88.240.4	attack	RPC Portmapper DUMP Request Detected CVE-2001-1124, PTR: www.arbor-observatory.com.	2019-09-12 04:10:58
149.56.96.78	attackspam	Sep 11 10:14:36 hcbb sshd\[25808\]: Invalid user postgres from 149.56.96.78 Sep 11 10:14:36 hcbb sshd\[25808\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.ip-149-56-96.net Sep 11 10:14:39 hcbb sshd\[25808\]: Failed password for invalid user postgres from 149.56.96.78 port 23562 ssh2 Sep 11 10:20:11 hcbb sshd\[26292\]: Invalid user redmine from 149.56.96.78 Sep 11 10:20:11 hcbb sshd\[26292\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.ip-149-56-96.net	2019-09-12 04:26:24
104.168.145.233	attack	mail relay > 100 attempts 019-09-11 14:55:04 SMTP connection from [104.168.145.233]:61346 (TCP/IP connection count = 1) 2019:09:11-14:55:05 exim-in[11624]: 2019-09-11 14:55:05 H=hwsrv-574506.hostwindsdns.com (hwc-hwp-4966180) [104.168.145.233]:61346 F= rejected RCPT : Relay not permitted 2019:09:11-14:55:05 exim-in[11624]: 2019-09-11 14:55:05 SMTP connection from hwsrv-574506.hostwindsdns.com (hwc-hwp-4966180) [104.168.145.233]:61346 closed by DROP in ACL	2019-09-12 04:12:07
202.91.86.100	attackspam	SSH bruteforce	2019-09-12 04:24:56

Recently Reported IPs

131.33.92.103	217.48.168.226	57.74.8.34	229.100.193.250
23.181.151.237	134.231.209.226	201.243.214.206	46.41.144.38
71.97.222.171	211.84.123.225	4.4.165.248	168.113.177.60
7.131.28.14	46.76.33.147	35.4.3.237	118.153.193.190
242.83.91.219	44.126.141.38	204.187.115.147	251.162.90.139