95.52.29.92 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: OJSC North-West Telecom

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	19/7/29@13:33:55: FAIL: IoT-SSH address from=95.52.29.92 19/7/29@13:33:56: FAIL: IoT-SSH address from=95.52.29.92 ...	2019-07-30 07:58:01

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 95.52.29.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28961
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;95.52.29.92.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072901 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jul 30 07:57:54 CST 2019
;; MSG SIZE  rcvd: 115

Host info

92.29.52.95.in-addr.arpa domain name pointer 95-52-29-92.dynamic.murmansk.dslavangard.ru.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
92.29.52.95.in-addr.arpa	name = 95-52-29-92.dynamic.murmansk.dslavangard.ru.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
107.173.6.121	attackspam	Registration form abuse	2020-05-05 05:02:30
47.220.146.49	attack	May 4 20:25:55 ip-172-31-61-156 sshd[8015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.220.146.49 May 4 20:25:55 ip-172-31-61-156 sshd[8015]: Invalid user qy from 47.220.146.49 May 4 20:25:57 ip-172-31-61-156 sshd[8015]: Failed password for invalid user qy from 47.220.146.49 port 45948 ssh2 May 4 20:29:39 ip-172-31-61-156 sshd[8172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.220.146.49 user=root May 4 20:29:40 ip-172-31-61-156 sshd[8172]: Failed password for root from 47.220.146.49 port 58348 ssh2 ...	2020-05-05 05:06:11
129.28.58.6	attackspambots	May 4 22:27:08 tuxlinux sshd[23296]: Invalid user centos from 129.28.58.6 port 39864 May 4 22:27:08 tuxlinux sshd[23296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.58.6 May 4 22:27:08 tuxlinux sshd[23296]: Invalid user centos from 129.28.58.6 port 39864 May 4 22:27:08 tuxlinux sshd[23296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.58.6 May 4 22:27:08 tuxlinux sshd[23296]: Invalid user centos from 129.28.58.6 port 39864 May 4 22:27:08 tuxlinux sshd[23296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.58.6 May 4 22:27:10 tuxlinux sshd[23296]: Failed password for invalid user centos from 129.28.58.6 port 39864 ssh2 ...	2020-05-05 04:48:42
107.152.243.55	attackspam	Registration form abuse	2020-05-05 05:00:32
61.160.107.66	attack	$f2bV_matches	2020-05-05 05:09:36
121.229.6.166	attack	May 4 21:09:21 localhost sshd[103347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.6.166 user=root May 4 21:09:23 localhost sshd[103347]: Failed password for root from 121.229.6.166 port 33028 ssh2 May 4 21:14:56 localhost sshd[103747]: Invalid user zjw from 121.229.6.166 port 36066 May 4 21:14:56 localhost sshd[103747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.6.166 May 4 21:14:56 localhost sshd[103747]: Invalid user zjw from 121.229.6.166 port 36066 May 4 21:14:58 localhost sshd[103747]: Failed password for invalid user zjw from 121.229.6.166 port 36066 ssh2 ...	2020-05-05 05:27:31
132.148.246.171	attackbotsspam	May 4 21:33:18 ns382633 sshd\[3943\]: Invalid user eclipse_s1000d_v12_0 from 132.148.246.171 port 19208 May 4 21:33:18 ns382633 sshd\[3943\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.148.246.171 May 4 21:33:20 ns382633 sshd\[3943\]: Failed password for invalid user eclipse_s1000d_v12_0 from 132.148.246.171 port 19208 ssh2 May 4 22:26:54 ns382633 sshd\[14791\]: Invalid user arkserver from 132.148.246.171 port 19208 May 4 22:26:54 ns382633 sshd\[14791\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.148.246.171	2020-05-05 05:01:15
212.129.41.188	attackspambots	[2020-05-04 16:48:27] NOTICE[1170] chan_sip.c: Registration from '' failed for '212.129.41.188:60826' - Wrong password [2020-05-04 16:48:27] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-04T16:48:27.276-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="75",SessionID="0x7f6c08391b78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.129.41.188/60826",Challenge="1ae520c2",ReceivedChallenge="1ae520c2",ReceivedHash="4cd6f2471baca7f96e29887aadf34c3c" [2020-05-04 16:49:07] NOTICE[1170] chan_sip.c: Registration from '' failed for '212.129.41.188:55106' - Wrong password [2020-05-04 16:49:07] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-04T16:49:07.934-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="833",SessionID="0x7f6c080b1a48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.129.41.188/5 ...	2020-05-05 05:10:47
157.230.25.211	attackspambots	SSH Brute-Force. Ports scanning.	2020-05-05 04:57:54
111.231.75.83	attack	$f2bV_matches	2020-05-05 05:04:37
138.88.96.2	attackbots	May 4 23:10:26 home sshd[32358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.88.96.2 May 4 23:10:28 home sshd[32358]: Failed password for invalid user sprint from 138.88.96.2 port 60878 ssh2 May 4 23:13:36 home sshd[458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.88.96.2 ...	2020-05-05 05:21:17
3.136.252.217	attackbots	WordPress brute force	2020-05-05 04:50:15
66.249.65.144	attack	caw-Joomla User : try to access forms...	2020-05-05 04:49:51
142.93.109.231	attackbotsspam	2020-05-04T20:39:33.175528shield sshd\[11184\]: Invalid user mx from 142.93.109.231 port 47674 2020-05-04T20:39:33.179103shield sshd\[11184\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.109.231 2020-05-04T20:39:35.294872shield sshd\[11184\]: Failed password for invalid user mx from 142.93.109.231 port 47674 ssh2 2020-05-04T20:42:37.562092shield sshd\[12230\]: Invalid user nn from 142.93.109.231 port 50546 2020-05-04T20:42:37.565691shield sshd\[12230\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.109.231	2020-05-05 04:48:13
171.100.28.254	attackbots	Trying ports that it shouldn't be.	2020-05-05 05:27:13

Recently Reported IPs

177.129.206.188	84.241.199.192	182.71.184.254	149.202.65.224
98.155.96.13	46.201.21.27	201.77.98.129	216.200.240.139
193.103.168.67	91.93.56.11	2.73.109.215	200.73.18.203
118.187.4.194	168.61.165.178	139.170.194.6	206.189.119.22
185.210.36.137	93.240.162.198	103.208.206.69	114.15.155.161