118.99.94.85 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: Biznet ISP

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	1586231646 - 04/07/2020 05:54:06 Host: 118.99.94.85/118.99.94.85 Port: 445 TCP Blocked	2020-04-07 13:11:24

Comments on same subnet:

IP	Type	Details	Datetime
118.99.94.96	attack	Brute Force	2020-08-28 17:35:36
118.99.94.67	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-07-28 04:21:05
118.99.94.35	attackspam	Unauthorized connection attempt from IP address 118.99.94.35 on Port 445(SMB)	2020-07-01 13:51:26
118.99.94.219	attackspam	Invalid user sniffer from 118.99.94.219 port 26288	2020-04-04 03:49:45
118.99.94.196	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-10 13:32:30
118.99.94.24	attack	Honeypot attack, port: 445, PTR: PTR record not found	2019-07-06 15:08:17

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 118.99.94.85
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36742
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;118.99.94.85.			IN	A

;; AUTHORITY SECTION:
.			341	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020040601 1800 900 604800 86400

;; Query time: 50 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 07 13:11:20 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 85.94.99.118.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 85.94.99.118.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
117.212.94.99	attackbots	Chat Spam	2019-10-05 06:58:22
86.123.255.135	attackbots	Port Scan detected from 86.123.255.135 (RO/Romania/-). 4 hits in the last 290 seconds	2019-10-05 06:59:26
176.118.30.155	attack	2019-10-04T22:56:36.103352shield sshd\[10191\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.118.30.155 user=root 2019-10-04T22:56:38.251173shield sshd\[10191\]: Failed password for root from 176.118.30.155 port 46834 ssh2 2019-10-04T23:01:05.682927shield sshd\[11200\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.118.30.155 user=root 2019-10-04T23:01:07.760329shield sshd\[11200\]: Failed password for root from 176.118.30.155 port 57738 ssh2 2019-10-04T23:05:36.386541shield sshd\[11871\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.118.30.155 user=root	2019-10-05 07:24:54
81.171.85.147	attack	\[2019-10-04 18:41:43\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '81.171.85.147:50825' - Wrong password \[2019-10-04 18:41:43\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-04T18:41:43.139-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="17511",SessionID="0x7f1e1c02d9c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.85.147/50825",Challenge="3748bfa3",ReceivedChallenge="3748bfa3",ReceivedHash="1f5e04f3653bb44af5f508efd371ae26" \[2019-10-04 18:42:28\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '81.171.85.147:59321' - Wrong password \[2019-10-04 18:42:28\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-04T18:42:28.283-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="20975",SessionID="0x7f1e1c4d2348",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.17	2019-10-05 07:03:05
144.217.83.201	attackbots	Oct 5 00:58:02 SilenceServices sshd[21638]: Failed password for root from 144.217.83.201 port 57140 ssh2 Oct 5 01:01:54 SilenceServices sshd[22692]: Failed password for root from 144.217.83.201 port 40566 ssh2	2019-10-05 07:13:08
106.75.15.142	attackspambots	$f2bV_matches	2019-10-05 06:59:06
106.13.125.84	attackbots	Oct 5 00:45:54 v22019058497090703 sshd[13906]: Failed password for root from 106.13.125.84 port 43094 ssh2 Oct 5 00:49:34 v22019058497090703 sshd[14149]: Failed password for root from 106.13.125.84 port 48774 ssh2 ...	2019-10-05 07:18:35
167.114.152.139	attackbotsspam	Oct 5 00:39:03 SilenceServices sshd[16442]: Failed password for root from 167.114.152.139 port 53914 ssh2 Oct 5 00:43:55 SilenceServices sshd[17828]: Failed password for root from 167.114.152.139 port 37792 ssh2	2019-10-05 06:49:39
103.207.98.78	attack	postfix (unknown user, SPF fail or relay access denied)	2019-10-05 07:25:41
178.128.194.116	attackbotsspam	2019-10-04T22:47:57.859827abusebot-3.cloudsearch.cf sshd\[20755\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.194.116 user=root	2019-10-05 06:50:41
37.187.255.81	attackspam	37.187.255.81 - - [04/Oct/2019:23:32:13 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 37.187.255.81 - - [04/Oct/2019:23:32:14 +0200] "POST /wp-login.php HTTP/1.1" 200 1632 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 37.187.255.81 - - [04/Oct/2019:23:32:14 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 37.187.255.81 - - [04/Oct/2019:23:32:14 +0200] "POST /wp-login.php HTTP/1.1" 200 1607 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 37.187.255.81 - - [04/Oct/2019:23:32:14 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 37.187.255.81 - - [04/Oct/2019:23:32:14 +0200] "POST /wp-login.php HTTP/1.1" 200 1608 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-10-05 07:25:54
182.191.119.145	attackspam	Oct 4 16:25:01 localhost kernel: [3958520.893360] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=182.191.119.145 DST=[mungedIP2] LEN=44 TOS=0x08 PREC=0x20 TTL=51 ID=26504 PROTO=TCP SPT=59960 DPT=52869 WINDOW=7153 RES=0x00 SYN URGP=0 Oct 4 16:25:01 localhost kernel: [3958520.893391] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=182.191.119.145 DST=[mungedIP2] LEN=44 TOS=0x08 PREC=0x20 TTL=51 ID=26504 PROTO=TCP SPT=59960 DPT=52869 SEQ=758669438 ACK=0 WINDOW=7153 RES=0x00 SYN URGP=0 OPT (020405AC)	2019-10-05 07:02:23
118.25.125.189	attackspambots	Oct 4 16:24:27 Tower sshd[1926]: Connection from 118.25.125.189 port 42138 on 192.168.10.220 port 22 Oct 4 16:24:29 Tower sshd[1926]: Failed password for root from 118.25.125.189 port 42138 ssh2 Oct 4 16:24:29 Tower sshd[1926]: Received disconnect from 118.25.125.189 port 42138:11: Bye Bye [preauth] Oct 4 16:24:29 Tower sshd[1926]: Disconnected from authenticating user root 118.25.125.189 port 42138 [preauth]	2019-10-05 07:16:36
222.186.15.65	attackspambots	Oct 5 01:17:32 srv206 sshd[13221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.65 user=root Oct 5 01:17:34 srv206 sshd[13221]: Failed password for root from 222.186.15.65 port 34426 ssh2 ...	2019-10-05 07:18:03
173.236.193.44	attack	Automatic report - XMLRPC Attack	2019-10-05 07:16:13

Recently Reported IPs

29.189.51.129	217.112.142.221	111.106.10.236	7.232.136.247
76.213.217.196	200.145.141.69	250.24.153.223	212.81.57.24
186.252.45.169	74.199.0.226	203.218.4.238	244.43.3.179
234.237.19.65	161.196.125.188	3.93.216.22	196.3.195.128
245.249.106.197	108.2.212.51	31.134.43.48	178.235.222.27