5.166.106.52 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: JSC ER-Telecom Holding

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Unauthorized connection attempt detected from IP address 5.166.106.52 to port 23	2019-12-29 16:55:09

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 5.166.106.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17993
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;5.166.106.52.			IN	A

;; AUTHORITY SECTION:
.			597	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122900 1800 900 604800 86400

;; Query time: 82 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Dec 29 16:55:04 CST 2019
;; MSG SIZE  rcvd: 116

Host info

52.106.166.5.in-addr.arpa domain name pointer 5x166x106x52.dynamic.barnaul.ertelecom.ru.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
52.106.166.5.in-addr.arpa	name = 5x166x106x52.dynamic.barnaul.ertelecom.ru.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
109.153.174.110	attackspambots	Hits on port : 9530	2020-02-11 22:00:45
80.66.81.36	attack	Feb 11 13:46:37 heicom postfix/smtpd\[9776\]: warning: unknown\[80.66.81.36\]: SASL LOGIN authentication failed: authentication failure Feb 11 13:46:47 heicom postfix/smtpd\[9776\]: warning: unknown\[80.66.81.36\]: SASL LOGIN authentication failed: authentication failure Feb 11 13:47:42 heicom postfix/smtpd\[9776\]: warning: unknown\[80.66.81.36\]: SASL LOGIN authentication failed: authentication failure Feb 11 13:47:51 heicom postfix/smtpd\[9776\]: warning: unknown\[80.66.81.36\]: SASL LOGIN authentication failed: authentication failure Feb 11 13:49:06 heicom postfix/smtpd\[9776\]: warning: unknown\[80.66.81.36\]: SASL LOGIN authentication failed: authentication failure ...	2020-02-11 21:54:59
222.186.31.83	attackspambots	Feb 11 14:57:53 MK-Soft-VM5 sshd[15350]: Failed password for root from 222.186.31.83 port 33262 ssh2 Feb 11 14:57:56 MK-Soft-VM5 sshd[15350]: Failed password for root from 222.186.31.83 port 33262 ssh2 ...	2020-02-11 22:08:49
217.182.70.125	attackspam	Feb 11 09:05:47 plusreed sshd[25066]: Invalid user vcz from 217.182.70.125 ...	2020-02-11 22:11:39
103.9.159.66	attackbotsspam	Feb 11 10:44:37 firewall sshd[14850]: Invalid user cjl from 103.9.159.66 Feb 11 10:44:39 firewall sshd[14850]: Failed password for invalid user cjl from 103.9.159.66 port 40724 ssh2 Feb 11 10:49:07 firewall sshd[14998]: Invalid user zbg from 103.9.159.66 ...	2020-02-11 21:52:50
122.116.146.199	attack	unauthorized connection attempt	2020-02-11 21:48:38
109.117.222.13	attackbotsspam	Unauthorised access (Feb 11) SRC=109.117.222.13 LEN=44 TTL=55 ID=9490 TCP DPT=23 WINDOW=58091 SYN	2020-02-11 21:34:28
197.254.106.78	attackspambots	unauthorized connection attempt	2020-02-11 21:29:31
5.198.160.164	attackspambots	DATE:2020-02-11 14:49:01, IP:5.198.160.164, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2020-02-11 22:02:25
196.89.219.9	attackspam	unauthorized connection attempt	2020-02-11 21:29:59
222.186.175.212	attack	Feb 11 14:58:52 dedicated sshd[18639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.212 user=root Feb 11 14:58:54 dedicated sshd[18639]: Failed password for root from 222.186.175.212 port 36068 ssh2	2020-02-11 22:03:46
52.73.169.169	attackbots	firewall-block, port(s): 123/udp	2020-02-11 22:01:41
45.56.172.38	attackspam	[2020-02-11 01:59:51] NOTICE[1148] chan_sip.c: Registration from '' failed for '45.56.172.38:50201' - Wrong password [2020-02-11 01:59:51] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-11T01:59:51.828-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="25322100",SessionID="0x7fd82c3c1c38",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.56.172.38/50201",Challenge="6cbca7d6",ReceivedChallenge="6cbca7d6",ReceivedHash="a03d09644d19b5e992a22b346e8d219c" [2020-02-11 01:59:55] NOTICE[1148] chan_sip.c: Registration from '' failed for '45.56.172.38:53405' - Wrong password [2020-02-11 01:59:55] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-11T01:59:55.271-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="25321100",SessionID="0x7fd82cfcf5b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/ ...	2020-02-11 21:31:27
61.224.68.144	attackspam	unauthorized connection attempt	2020-02-11 21:30:54
49.36.158.201	attackbots	1581428937 - 02/11/2020 14:48:57 Host: 49.36.158.201/49.36.158.201 Port: 445 TCP Blocked	2020-02-11 22:07:20

Recently Reported IPs

185.176.56.101	185.108.164.178	183.78.152.14	180.150.176.130
179.228.25.203	179.187.164.207	179.183.44.50	179.98.175.77
190.102.206.6	179.25.6.213	175.203.248.150	173.68.158.87
149.3.3.27	123.145.14.230	104.191.250.56	103.49.52.142
95.9.93.223	88.249.104.125	80.180.63.171	80.174.87.215