94.53.205.52 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Romania

Internet Service Provider: SC Nextgen Communications SRL

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt detected from IP address 94.53.205.52 to port 80 [J]	2020-01-20 19:15:17

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.53.205.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 597
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.53.205.52.			IN	A

;; AUTHORITY SECTION:
.			310	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012000 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 20 19:15:14 CST 2020
;; MSG SIZE  rcvd: 116

Host info

52.205.53.94.in-addr.arpa domain name pointer 94-53-205-52.next-gen.ro.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
52.205.53.94.in-addr.arpa	name = 94-53-205-52.next-gen.ro.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
100.37.210.134	attackbotsspam	Apr 3 18:27:07 ws19vmsma01 sshd[53761]: Failed password for root from 100.37.210.134 port 42278 ssh2 ...	2020-04-04 08:09:43
189.90.255.173	attackbots	2020-04-04T00:05:31.860662rocketchat.forhosting.nl sshd[6658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.90.255.173 user=root 2020-04-04T00:05:33.737603rocketchat.forhosting.nl sshd[6658]: Failed password for root from 189.90.255.173 port 48009 ssh2 2020-04-04T00:09:54.438555rocketchat.forhosting.nl sshd[6742]: Invalid user uo from 189.90.255.173 port 52862 ...	2020-04-04 07:43:05
193.112.74.137	attackspambots	Invalid user nk from 193.112.74.137 port 57999	2020-04-04 08:03:40
139.59.124.118	attackspambots	Apr 3 23:51:58 srv01 sshd[12665]: Invalid user dbMon from 139.59.124.118 port 50678 Apr 3 23:51:58 srv01 sshd[12665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.124.118 Apr 3 23:51:58 srv01 sshd[12665]: Invalid user dbMon from 139.59.124.118 port 50678 Apr 3 23:52:00 srv01 sshd[12665]: Failed password for invalid user dbMon from 139.59.124.118 port 50678 ssh2 Apr 3 23:56:02 srv01 sshd[12947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.124.118 user=root Apr 3 23:56:04 srv01 sshd[12947]: Failed password for root from 139.59.124.118 port 34410 ssh2 ...	2020-04-04 08:05:53
103.145.12.41	attack	[2020-04-03 19:40:39] NOTICE[12114] chan_sip.c: Registration from '"7003" ' failed for '103.145.12.41:5732' - Wrong password [2020-04-03 19:40:39] SECURITY[12128] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-03T19:40:39.038-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="7003",SessionID="0x7f020c033c08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.41/5732",Challenge="077823ba",ReceivedChallenge="077823ba",ReceivedHash="d3ab55f5273c1eb3b48bb51b1c232268" [2020-04-03 19:40:39] NOTICE[12114] chan_sip.c: Registration from '"7003" ' failed for '103.145.12.41:5732' - Wrong password [2020-04-03 19:40:39] SECURITY[12128] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-03T19:40:39.153-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="7003",SessionID="0x7f020c04b958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UD ...	2020-04-04 07:57:19
91.218.65.137	attack	2020-04-04T10:22:17.905673luisaranguren sshd[2744667]: Failed password for root from 91.218.65.137 port 53231 ssh2 2020-04-04T10:22:19.251514luisaranguren sshd[2744667]: Disconnected from authenticating user root 91.218.65.137 port 53231 [preauth] ...	2020-04-04 08:06:56
221.122.67.66	attackspam	Invalid user lq from 221.122.67.66 port 58361	2020-04-04 08:06:08
152.32.173.74	attackspam	SSH Invalid Login	2020-04-04 08:13:22
83.21.76.232	attackbots	Automatic report - Port Scan Attack	2020-04-04 08:07:15
69.30.232.138	attack	firewall-block, port(s): 11211/udp	2020-04-04 07:54:33
222.186.175.150	attackspambots	Apr 4 01:45:08 vmanager6029 sshd\[26218\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.150 user=root Apr 4 01:45:10 vmanager6029 sshd\[26216\]: error: PAM: Authentication failure for root from 222.186.175.150 Apr 4 01:45:12 vmanager6029 sshd\[26219\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.150 user=root	2020-04-04 07:46:53
212.92.108.4	attackspambots	(From garysgrant@yahoo.com) Hоw to mаke $10,000 Рer day FASТ: http://zxtiazwj.telenovisaint.com/a3	2020-04-04 08:18:29
175.24.59.130	attack	2020-04-03T22:41:15.696234dmca.cloudsearch.cf sshd[2835]: Invalid user onealert from 175.24.59.130 port 42248 2020-04-03T22:41:15.702556dmca.cloudsearch.cf sshd[2835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.59.130 2020-04-03T22:41:15.696234dmca.cloudsearch.cf sshd[2835]: Invalid user onealert from 175.24.59.130 port 42248 2020-04-03T22:41:18.246676dmca.cloudsearch.cf sshd[2835]: Failed password for invalid user onealert from 175.24.59.130 port 42248 ssh2 2020-04-03T22:47:14.055843dmca.cloudsearch.cf sshd[3316]: Invalid user jy from 175.24.59.130 port 49586 2020-04-03T22:47:14.061699dmca.cloudsearch.cf sshd[3316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.59.130 2020-04-03T22:47:14.055843dmca.cloudsearch.cf sshd[3316]: Invalid user jy from 175.24.59.130 port 49586 2020-04-03T22:47:15.556836dmca.cloudsearch.cf sshd[3316]: Failed password for invalid user jy from 175.24.59.130 port ...	2020-04-04 08:00:18
92.118.160.13	attackspambots	firewall-block, port(s): 5907/tcp	2020-04-04 07:44:51
125.227.236.60	attackbots	5x Failed Password	2020-04-04 07:49:03

Recently Reported IPs

201.114.213.23	201.103.107.136	200.29.99.30	196.202.13.225
194.0.64.68	191.100.24.207	189.212.115.76	189.172.192.162
189.165.135.188	188.194.134.159	185.46.169.83	178.142.21.99
151.235.208.17	143.255.243.129	143.255.242.198	131.196.104.175
125.46.23.166	123.181.120.179	206.189.44.246	120.237.50.44