92.39.217.54 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: MTS PJSC

Hostname: unknown

Organization: unknown

Usage Type: Mobile ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	port scan and connect, tcp 80 (http)	2020-03-10 17:48:49

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 92.39.217.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19757
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;92.39.217.54.			IN	A

;; AUTHORITY SECTION:
.			541	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031000 1800 900 604800 86400

;; Query time: 69 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 10 17:48:46 CST 2020
;; MSG SIZE  rcvd: 116

Host info

54.217.39.92.in-addr.arpa domain name pointer 217-54.izhnt.ru.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
54.217.39.92.in-addr.arpa	name = 217-54.izhnt.ru.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
91.134.231.81	attack	2020-09-20 14:29:47.280093-0500 localhost smtpd[65370]: NOQUEUE: reject: RCPT from unknown[91.134.231.81]: 450 4.7.25 Client host rejected: cannot find your hostname, [91.134.231.81]; from= to= proto=ESMTP helo=	2020-09-21 13:01:08
148.70.149.39	attack	fail2ban detected brute force on sshd	2020-09-21 12:55:48
213.142.135.106	attackspam	Port scanning [2 denied]	2020-09-21 13:25:12
159.89.94.13	attackspambots	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	2020-09-21 13:30:10
179.184.0.112	attackspam	3x Failed Password	2020-09-21 13:04:10
223.19.119.152	attack	TCP (SYN) 223.19.119.152:31453 -> port 23, len 40	2020-09-21 13:19:49
212.70.149.4	attackbots	Sep 21 07:01:25 relay postfix/smtpd\[12323\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 21 07:04:32 relay postfix/smtpd\[22716\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 21 07:07:39 relay postfix/smtpd\[12323\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 21 07:10:42 relay postfix/smtpd\[22716\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 21 07:13:47 relay postfix/smtpd\[12323\]: warning: unknown\[212.70.149.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-09-21 13:22:47
51.83.134.233	attackbots	SSH brute-force attempt	2020-09-21 13:29:41
79.37.243.21	attack	Sep 20 18:50:21 pl1server sshd[24283]: Invalid user pi from 79.37.243.21 port 44278 Sep 20 18:50:21 pl1server sshd[24282]: Invalid user pi from 79.37.243.21 port 44276 Sep 20 18:50:21 pl1server sshd[24283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.37.243.21 Sep 20 18:50:21 pl1server sshd[24282]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.37.243.21 Sep 20 18:50:23 pl1server sshd[24283]: Failed password for invalid user pi from 79.37.243.21 port 44278 ssh2 Sep 20 18:50:23 pl1server sshd[24282]: Failed password for invalid user pi from 79.37.243.21 port 44276 ssh2 Sep 20 18:50:23 pl1server sshd[24283]: Connection closed by 79.37.243.21 port 44278 [preauth] Sep 20 18:50:23 pl1server sshd[24282]: Connection closed by 79.37.243.21 port 44276 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=79.37.243.21	2020-09-21 12:56:06
122.156.96.208	attackspam	Listed on zen-spamhaus also barracudaCentral and abuseat.org / proto=6 . srcport=27997 . dstport=23 . (2340)	2020-09-21 13:00:17
222.186.175.151	attackbots	$f2bV_matches	2020-09-21 12:53:42
106.124.130.114	attack	SSH brute-force attempt	2020-09-21 13:16:29
181.143.228.170	attack	SSHD brute force attack detected from [181.143.228.170]	2020-09-21 13:18:08
109.123.117.244	attackspam	Port scan denied	2020-09-21 13:18:52
81.25.72.56	attackbotsspam	2020-09-20T17:03:05Z - RDP login failed multiple times. (81.25.72.56)	2020-09-21 13:06:34

Recently Reported IPs

14.243.115.254	45.118.144.16	13.228.78.194	171.228.208.83
113.165.167.45	111.242.144.199	89.64.148.176	252.188.168.126
60.179.75.241	125.161.164.198	58.187.54.204	180.175.176.131
121.128.198.188	223.204.223.247	106.13.102.247	87.123.158.39
174.219.20.44	149.0.182.239	35.229.206.196	221.215.154.73