92.204.164.42 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: Host Europe GmbH

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	1601805098 - 10/04/2020 11:51:38 Host: 92.204.164.42/92.204.164.42 Port: 22 TCP Blocked	2020-10-05 05:46:31
attackspambots	1601805098 - 10/04/2020 11:51:38 Host: 92.204.164.42/92.204.164.42 Port: 22 TCP Blocked	2020-10-04 21:43:02

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 92.204.164.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25419
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;92.204.164.42.			IN	A

;; AUTHORITY SECTION:
.			532	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020100301 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 04 13:29:24 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 42.164.204.92.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 42.164.204.92.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.243.180.39	attack	Sat, 19 Oct 2019 22:44:43 -0400 Received: from [185.243.180.39] (port=18202 helo=closegroan.best) From: "Xone Phone" Xphone smartphone spam	2019-10-20 18:19:29
92.119.160.106	attack	Oct 20 11:27:47 mc1 kernel: \[2850024.725737\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.106 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=4411 PROTO=TCP SPT=42798 DPT=16885 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 20 11:29:09 mc1 kernel: \[2850107.382461\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.106 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=5496 PROTO=TCP SPT=42798 DPT=16813 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 20 11:36:20 mc1 kernel: \[2850537.730979\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.106 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=42239 PROTO=TCP SPT=42798 DPT=17479 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2019-10-20 18:16:47
2605:6400:300:3::2	attackbotsspam	SS5,WP GET /2016/wp-login.php GET /2016/wp-login.php	2019-10-20 18:03:50
118.193.31.19	attack	fail2ban	2019-10-20 18:39:50
206.81.8.14	attackbotsspam	Oct 20 11:57:20 localhost sshd\[25711\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.8.14 user=root Oct 20 11:57:23 localhost sshd\[25711\]: Failed password for root from 206.81.8.14 port 50398 ssh2 Oct 20 12:00:54 localhost sshd\[26092\]: Invalid user admin from 206.81.8.14 port 44324	2019-10-20 18:15:10
46.38.144.32	attackbots	Oct 20 12:10:27 relay postfix/smtpd\[32317\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 20 12:11:03 relay postfix/smtpd\[6117\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 20 12:13:48 relay postfix/smtpd\[32317\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 20 12:14:24 relay postfix/smtpd\[15866\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 20 12:17:04 relay postfix/smtpd\[5622\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-10-20 18:23:23
14.161.8.40	attack	scan z	2019-10-20 18:24:28
80.13.21.150	attackspambots	Unauthorised access (Oct 20) SRC=80.13.21.150 LEN=44 TOS=0x08 PREC=0x40 TTL=240 ID=54110 TCP DPT=139 WINDOW=1024 SYN	2019-10-20 18:12:47
106.12.132.187	attackspambots	Invalid user cunningham from 106.12.132.187 port 56828	2019-10-20 18:21:27
188.254.0.224	attackspambots	2019-09-07T14:18:38.652205-07:00 suse-nuc sshd[23051]: Invalid user test from 188.254.0.224 port 35382 ...	2019-10-20 18:38:23
112.84.91.214	attackspam	$f2bV_matches	2019-10-20 18:28:21
157.245.111.175	attackspam	Automatic report - Banned IP Access	2019-10-20 18:08:55
189.101.61.218	attackbots	2019-10-20T07:43:21.384159wiz-ks3 sshd[2775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.101.61.218 user=root 2019-10-20T07:43:22.807986wiz-ks3 sshd[2775]: Failed password for root from 189.101.61.218 port 60653 ssh2 2019-10-20T07:57:09.957922wiz-ks3 sshd[2802]: Invalid user application-data from 189.101.61.218 port 54126 2019-10-20T07:57:09.960045wiz-ks3 sshd[2802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.101.61.218 2019-10-20T07:57:09.957922wiz-ks3 sshd[2802]: Invalid user application-data from 189.101.61.218 port 54126 2019-10-20T07:57:12.387379wiz-ks3 sshd[2802]: Failed password for invalid user application-data from 189.101.61.218 port 54126 ssh2 2019-10-20T08:02:04.257368wiz-ks3 sshd[2830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.101.61.218 user=root 2019-10-20T08:02:05.515538wiz-ks3 sshd[2830]: Failed password for root from 189.101.61.218 port 45337	2019-10-20 18:18:56
58.221.49.157	attack	10/20/2019-04:18:21.679070 58.221.49.157 Protocol: 6 ET SCAN Suspicious inbound to mySQL port 3306	2019-10-20 18:10:01
190.119.190.122	attack	Automatic report - Banned IP Access	2019-10-20 18:05:48

Recently Reported IPs

17.68.39.43	209.240.73.28	46.15.168.146	151.210.231.252
184.104.84.239	180.115.19.223	176.170.183.146	142.185.191.14
154.222.30.134	120.34.24.172	57.253.203.87	192.241.134.101
95.9.227.216	165.227.129.37	203.158.177.71	159.138.186.134
140.143.22.116	192.241.235.26	139.155.1.137	162.54.169.172