118.139.224.92

Basic Info

City: unknown

Region: unknown

Country: Korea (Republic of)

Internet Service Provider: CJ Hello Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	01/01/2020-07:22:14.835088 118.139.224.92 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2020-01-01 22:39:53

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 118.139.224.92
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18674
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;118.139.224.92.			IN	A

;; AUTHORITY SECTION:
.			529	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019123101 1800 900 604800 86400

;; Query time: 143 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 01 22:39:48 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 92.224.139.118.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		100.100.2.136
Address:	100.100.2.136#53

** server can't find 92.224.139.118.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
128.199.241.107	attack	$f2bV_matches	2020-09-12 14:51:56
151.70.199.74	attack	TCP (SYN) 151.70.199.74:28500 -> port 23, len 44	2020-09-12 15:15:27
200.152.80.164	attackspambots	Automatic report - Banned IP Access	2020-09-12 14:58:21
82.205.8.114	attack	[2020-09-12 03:07:55] NOTICE[1239] chan_sip.c: Registration from '"77" ' failed for '82.205.8.114:5077' - Wrong password [2020-09-12 03:07:55] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-12T03:07:55.270-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="77",SessionID="0x7f4d480961a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/82.205.8.114/5077",Challenge="76b04789",ReceivedChallenge="76b04789",ReceivedHash="f9521f67b8a617b5d8987d0a3e7fc792" [2020-09-12 03:10:23] NOTICE[1239] chan_sip.c: Registration from '"308" ' failed for '82.205.8.114:5060' - Wrong password [2020-09-12 03:10:23] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-12T03:10:23.562-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="308",SessionID="0x7f4d481972d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/82.205.8.114/5 ...	2020-09-12 15:18:39
1.179.128.124	attack	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-09-12 14:43:54
218.92.0.173	attackbotsspam	$f2bV_matches	2020-09-12 14:48:34
61.177.172.61	attackbotsspam	Sep 12 07:08:04 scw-6657dc sshd[31161]: Failed password for root from 61.177.172.61 port 40082 ssh2 Sep 12 07:08:04 scw-6657dc sshd[31161]: Failed password for root from 61.177.172.61 port 40082 ssh2 Sep 12 07:08:08 scw-6657dc sshd[31161]: Failed password for root from 61.177.172.61 port 40082 ssh2 ...	2020-09-12 15:09:31
190.146.87.202	attack	$f2bV_matches	2020-09-12 14:40:58
84.31.5.211	attackbotsspam	Automatic report - Port Scan Attack	2020-09-12 14:35:13
140.206.242.83	attack	$f2bV_matches	2020-09-12 14:52:25
115.51.24.34	attackspambots	2020-09-11T11:55:04.336347dreamphreak.com sshd[276482]: Invalid user pi from 115.51.24.34 port 59232 2020-09-11T11:55:04.347402dreamphreak.com sshd[276483]: Invalid user pi from 115.51.24.34 port 59242 ...	2020-09-12 14:49:02
54.37.14.3	attackspam	Sep 12 06:15:54 scw-6657dc sshd[29088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.14.3 Sep 12 06:15:54 scw-6657dc sshd[29088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.14.3 Sep 12 06:15:56 scw-6657dc sshd[29088]: Failed password for invalid user ftpuser from 54.37.14.3 port 51966 ssh2 ...	2020-09-12 15:05:31
27.7.176.13	attackbots	Telnet Honeypot -> Telnet Bruteforce / Login	2020-09-12 15:15:43
192.241.221.217	attackspam	" "	2020-09-12 15:10:46
128.199.223.233	attack	Sep 11 20:11:02 hpm sshd\[11796\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.223.233 user=root Sep 11 20:11:04 hpm sshd\[11796\]: Failed password for root from 128.199.223.233 port 43794 ssh2 Sep 11 20:15:58 hpm sshd\[12156\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.223.233 user=root Sep 11 20:16:00 hpm sshd\[12156\]: Failed password for root from 128.199.223.233 port 56618 ssh2 Sep 11 20:20:46 hpm sshd\[12492\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.223.233 user=root	2020-09-12 14:43:25

Recently Reported IPs

78.39.230.226	21.44.240.125	221.13.122.113	106.66.38.213
186.243.250.169	62.189.47.25	221.143.194.112	251.161.144.143
123.60.242.37	117.16.193.152	218.91.26.69	218.221.222.151
238.243.203.80	232.134.164.224	113.118.249.168	66.61.172.13
141.11.157.166	105.90.57.144	208.52.238.189	218.165.5.7