92.52.208.245 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Hungary

Internet Service Provider: Giganet Internet Szolgaltato Kft

Hostname: unknown

Organization: MVM NET Zrt.

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	445/tcp 445/tcp 445/tcp... [2019-08-15/09-30]6pkt,1pt.(tcp)	2019-09-30 22:05:42
attack	firewall-block, port(s): 445/tcp	2019-07-01 23:27:11

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 92.52.208.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41525
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;92.52.208.245.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070100 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 01 23:26:58 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 245.208.52.92.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.82.98
Address:	183.60.82.98#53

Non-authoritative answer:
*** Can't find 245.208.52.92.in-addr.arpa.: No answer

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
80.95.88.40	attackspam	Automatic report - Port Scan Attack	2019-08-16 16:49:43
218.2.234.6	attack	Aug 16 10:32:56 nextcloud sshd\[10965\]: Invalid user www02 from 218.2.234.6 Aug 16 10:32:56 nextcloud sshd\[10965\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.2.234.6 Aug 16 10:32:58 nextcloud sshd\[10965\]: Failed password for invalid user www02 from 218.2.234.6 port 2808 ssh2 ...	2019-08-16 16:43:04
92.118.37.70	attackspam	Multiport scan : 9 ports scanned 3319 3329 3339 3349 3359 3369 3379 3409 3489	2019-08-16 16:46:04
79.137.79.167	attack	Aug 16 15:45:55 lcl-usvr-02 sshd[12126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.79.167 user=root Aug 16 15:45:56 lcl-usvr-02 sshd[12126]: Failed password for root from 79.137.79.167 port 53746 ssh2 Aug 16 15:45:59 lcl-usvr-02 sshd[12126]: Failed password for root from 79.137.79.167 port 53746 ssh2 Aug 16 15:45:55 lcl-usvr-02 sshd[12126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.79.167 user=root Aug 16 15:45:56 lcl-usvr-02 sshd[12126]: Failed password for root from 79.137.79.167 port 53746 ssh2 Aug 16 15:45:59 lcl-usvr-02 sshd[12126]: Failed password for root from 79.137.79.167 port 53746 ssh2 Aug 16 15:45:55 lcl-usvr-02 sshd[12126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.79.167 user=root Aug 16 15:45:56 lcl-usvr-02 sshd[12126]: Failed password for root from 79.137.79.167 port 53746 ssh2 Aug 16 15:45:59 lcl-usvr-02 sshd[12126]: Failed password	2019-08-16 17:07:55
35.188.16.212	attackbots	Aug 16 10:23:43 mail sshd\[16446\]: Failed password for invalid user test from 35.188.16.212 port 38060 ssh2 Aug 16 10:28:01 mail sshd\[16903\]: Invalid user miller from 35.188.16.212 port 59156 Aug 16 10:28:01 mail sshd\[16903\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.188.16.212 Aug 16 10:28:04 mail sshd\[16903\]: Failed password for invalid user miller from 35.188.16.212 port 59156 ssh2 Aug 16 10:32:26 mail sshd\[17349\]: Invalid user mailman1 from 35.188.16.212 port 52020	2019-08-16 17:07:27
185.220.100.252	attackspam	fail2ban	2019-08-16 17:21:11
128.199.95.60	attack	Aug 16 10:57:43 vps691689 sshd[2405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.95.60 Aug 16 10:57:45 vps691689 sshd[2405]: Failed password for invalid user roo from 128.199.95.60 port 50406 ssh2 ...	2019-08-16 17:22:24
198.245.49.37	attackspam	Aug 16 10:59:16 vps691689 sshd[2452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.245.49.37 Aug 16 10:59:18 vps691689 sshd[2452]: Failed password for invalid user pw from 198.245.49.37 port 60208 ssh2 Aug 16 11:03:27 vps691689 sshd[2541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.245.49.37 ...	2019-08-16 17:12:05
106.12.89.190	attack	Aug 15 23:16:05 php1 sshd\[4493\]: Invalid user rwalter from 106.12.89.190 Aug 15 23:16:05 php1 sshd\[4493\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.89.190 Aug 15 23:16:07 php1 sshd\[4493\]: Failed password for invalid user rwalter from 106.12.89.190 port 38938 ssh2 Aug 15 23:21:32 php1 sshd\[5240\]: Invalid user cha from 106.12.89.190 Aug 15 23:21:32 php1 sshd\[5240\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.89.190	2019-08-16 17:28:06
124.156.200.56	attack	Detected by a2Analyst.	2019-08-16 16:47:42
47.89.184.195	attackbotsspam	37215/tcp [2019-08-16]1pkt	2019-08-16 17:25:03
80.211.221.137	attack	\[2019-08-16 08:45:08\] NOTICE\[23191\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '"601" \' failed for '80.211.221.137:5439' \(callid: 886638000\) - Failed to authenticate \[2019-08-16 08:45:08\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-08-16T08:45:08.978+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="886638000",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/80.211.221.137/5439",Challenge="1565937908/b5c255e169892ea5c27fec7d46fda0ba",Response="05491e2e473f03265e3b7862f952ad8b",ExpectedResponse="" \[2019-08-16 08:45:09\] NOTICE\[29653\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '"601" \' failed for '80.211.221.137:5439' \(callid: 886638000\) - Failed to authenticate \[2019-08-16 08:45:09\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-08-16T08:45:09.027+0200",Severi	2019-08-16 17:06:49
185.175.93.19	attack	Scanning (more than 2 packets) random ports - tries to find possible vulnerable services	2019-08-16 17:14:39
94.28.35.254	attackbotsspam	[portscan] Port scan	2019-08-16 17:16:42
185.175.93.18	attackspam	08/16/2019-04:45:01.049092 185.175.93.18 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-08-16 17:19:07

Recently Reported IPs

160.219.42.178	165.17.229.73	20.7.133.27	27.120.62.87
200.94.105.185	126.25.131.12	191.53.57.217	184.28.112.161
200.94.105.186	74.6.132.125	59.94.210.152	170.35.239.76
34.76.19.1	47.143.42.53	91.182.33.41	1.36.127.38
181.142.122.64	190.104.233.92	161.162.172.216	132.131.18.248