122.252.239.107

Basic Info

City: unknown

Region: unknown

Country: India

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
122.252.239.167	spambotsattackproxynormal	122.252.239.167	2021-10-17 21:46:52
122.252.239.167	spambotsattackproxynormal	122.252.239.167	2021-10-17 21:46:32
122.252.239.167	spambotsattackproxynormal	122.252.239.167	2021-10-17 21:46:24
122.252.239.167	spambotsattackproxynormal	122.252.239.167	2021-10-17 21:45:55
122.252.239.5	attack	Repeated brute force against a port	2020-10-10 04:24:18
122.252.239.5	attackbots	2020-10-09T15:00:24.888338paragon sshd[791574]: Failed password for invalid user rpm from 122.252.239.5 port 45906 ssh2 2020-10-09T15:04:44.725484paragon sshd[791650]: Invalid user ghost4 from 122.252.239.5 port 50138 2020-10-09T15:04:44.729385paragon sshd[791650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.252.239.5 2020-10-09T15:04:44.725484paragon sshd[791650]: Invalid user ghost4 from 122.252.239.5 port 50138 2020-10-09T15:04:46.438154paragon sshd[791650]: Failed password for invalid user ghost4 from 122.252.239.5 port 50138 ssh2 ...	2020-10-09 20:22:07
122.252.239.5	attackbotsspam	SSH / Telnet Brute Force Attempts on Honeypot	2020-10-09 12:09:40
122.252.239.5	attackbots	$f2bV_matches	2020-09-23 20:59:40
122.252.239.5	attackspambots	Sep 22 22:25:39 * sshd[12526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.252.239.5 Sep 22 22:25:42 * sshd[12526]: Failed password for invalid user frappe from 122.252.239.5 port 44364 ssh2	2020-09-23 05:07:39
122.252.239.5	attackspam	Aug 30 16:00:21 electroncash sshd[33527]: Failed password for invalid user zyc from 122.252.239.5 port 40904 ssh2 Aug 30 16:05:17 electroncash sshd[36095]: Invalid user cop from 122.252.239.5 port 45210 Aug 30 16:05:17 electroncash sshd[36095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.252.239.5 Aug 30 16:05:17 electroncash sshd[36095]: Invalid user cop from 122.252.239.5 port 45210 Aug 30 16:05:18 electroncash sshd[36095]: Failed password for invalid user cop from 122.252.239.5 port 45210 ssh2 ...	2020-08-31 01:22:00
122.252.239.5	attack	Aug 24 16:17:50 sachi sshd\[16491\]: Failed password for invalid user yanglin from 122.252.239.5 port 42834 ssh2 Aug 24 16:20:43 sachi sshd\[18263\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.252.239.5 user=root Aug 24 16:20:44 sachi sshd\[18263\]: Failed password for root from 122.252.239.5 port 48178 ssh2 Aug 24 16:23:43 sachi sshd\[20092\]: Invalid user zyy from 122.252.239.5 Aug 24 16:23:43 sachi sshd\[20092\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.252.239.5	2020-08-25 14:04:33
122.252.239.5	attackbotsspam	Aug 22 18:06:42 l02a sshd[936]: Invalid user swapnil from 122.252.239.5 Aug 22 18:06:42 l02a sshd[936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.252.239.5 Aug 22 18:06:42 l02a sshd[936]: Invalid user swapnil from 122.252.239.5 Aug 22 18:06:44 l02a sshd[936]: Failed password for invalid user swapnil from 122.252.239.5 port 38060 ssh2	2020-08-23 03:52:09
122.252.239.5	attackspambots	Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-08-17 01:22:08
122.252.239.5	attackbotsspam	Aug 10 21:30:33 gospond sshd[21095]: Failed password for root from 122.252.239.5 port 51554 ssh2 Aug 10 21:30:32 gospond sshd[21095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.252.239.5 user=root Aug 10 21:30:33 gospond sshd[21095]: Failed password for root from 122.252.239.5 port 51554 ssh2 ...	2020-08-11 05:59:59
122.252.239.5	attackspambots	DATE:2020-08-09 21:49:27,IP:122.252.239.5,MATCHES:10,PORT:ssh	2020-08-10 03:58:53

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 122.252.239.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11648
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;122.252.239.107.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012600 1800 900 604800 86400

;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 26 13:43:27 CST 2025
;; MSG SIZE  rcvd: 108

Host info

107.239.252.122.in-addr.arpa domain name pointer ws107-239-252-122.rcil.gov.in.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
107.239.252.122.in-addr.arpa	name = ws107-239-252-122.rcil.gov.in.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.198.56.136	attack	2020-01-13T14:03:08.567525shield sshd\[5429\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.chemical-collective.com user=root 2020-01-13T14:03:09.651948shield sshd\[5429\]: Failed password for root from 185.198.56.136 port 56750 ssh2 2020-01-13T14:07:35.247020shield sshd\[6982\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.chemical-collective.com user=root 2020-01-13T14:07:37.319484shield sshd\[6982\]: Failed password for root from 185.198.56.136 port 56730 ssh2 2020-01-13T14:12:02.415230shield sshd\[8322\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.chemical-collective.com user=root	2020-01-13 22:28:41
66.206.3.42	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-01-13 22:08:51
223.206.233.69	attackbotsspam	Honeypot attack, port: 445, PTR: mx-ll-223.206.233-69.dynamic.3bb.in.th.	2020-01-13 22:30:09
69.94.136.227	attackbotsspam	Jan 13 14:09:12 smtp postfix/smtpd[64782]: NOQUEUE: reject: RCPT from scaffold.kwyali.com[69.94.136.227]: 554 5.7.1 Service unavailable; Client host [69.94.136.227] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=	2020-01-13 21:58:11
187.185.15.89	attack	2020-01-13T13:44:11.564305shield sshd\[25809\]: Invalid user eliane from 187.185.15.89 port 52789 2020-01-13T13:44:11.568730shield sshd\[25809\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.185.15.89 2020-01-13T13:44:13.552958shield sshd\[25809\]: Failed password for invalid user eliane from 187.185.15.89 port 52789 ssh2 2020-01-13T13:47:22.588602shield sshd\[27925\]: Invalid user admin from 187.185.15.89 port 52797 2020-01-13T13:47:22.597348shield sshd\[27925\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.185.15.89	2020-01-13 22:04:19
178.62.60.233	attack	Dec 18 13:42:07 vtv3 sshd[20592]: Failed password for invalid user yunhee from 178.62.60.233 port 47474 ssh2 Dec 18 13:47:27 vtv3 sshd[22993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.60.233 Dec 18 13:58:10 vtv3 sshd[28083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.60.233 Dec 18 13:58:11 vtv3 sshd[28083]: Failed password for invalid user zeine from 178.62.60.233 port 43642 ssh2 Dec 18 14:03:40 vtv3 sshd[30682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.60.233 Dec 18 14:25:07 vtv3 sshd[8390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.60.233 Dec 18 14:25:09 vtv3 sshd[8390]: Failed password for invalid user 1234 from 178.62.60.233 port 56392 ssh2 Dec 18 14:30:18 vtv3 sshd[11469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.60.233 Dec 18 14:44:58 v	2020-01-13 22:11:55
112.85.42.180	attackbotsspam	Fail2Ban - SSH Bruteforce Attempt	2020-01-13 22:27:24
218.161.107.190	attackspambots	Honeypot attack, port: 81, PTR: 218-161-107-190.HINET-IP.hinet.net.	2020-01-13 22:25:23
78.1.16.239	attack	Honeypot attack, port: 445, PTR: 78-1-16-239.adsl.net.t-com.hr.	2020-01-13 22:18:35
103.90.156.253	attackspambots	Automatic report - Port Scan	2020-01-13 22:00:57
91.121.43.62	attack	Honeypot attack, port: 445, PTR: ip62.ip-91-121-43.eu.	2020-01-13 22:14:34
209.250.244.122	attackspambots	Jan 13 06:40:53 cumulus sshd[26329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.250.244.122 user=r.r Jan 13 06:40:55 cumulus sshd[26329]: Failed password for r.r from 209.250.244.122 port 37634 ssh2 Jan 13 06:40:55 cumulus sshd[26329]: Received disconnect from 209.250.244.122 port 37634:11: Bye Bye [preauth] Jan 13 06:40:55 cumulus sshd[26329]: Disconnected from 209.250.244.122 port 37634 [preauth] Jan 13 07:45:14 cumulus sshd[29030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.250.244.122 user=r.r Jan 13 07:45:17 cumulus sshd[29030]: Failed password for r.r from 209.250.244.122 port 32990 ssh2 Jan 13 07:45:17 cumulus sshd[29030]: Received disconnect from 209.250.244.122 port 32990:11: Bye Bye [preauth] Jan 13 07:45:17 cumulus sshd[29030]: Disconnected from 209.250.244.122 port 32990 [preauth] Jan 13 07:59:20 cumulus sshd[29484]: Invalid user shadow from 209.250.244.122 po........ -------------------------------	2020-01-13 22:22:16
205.185.113.104	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-13 21:54:04
14.17.76.176	attack	20 attempts against mh-ssh on cloud.magehost.pro	2020-01-13 22:02:43
129.208.211.22	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-13 21:56:11

Recently Reported IPs

80.99.31.148	248.3.130.62	54.253.106.180	194.52.158.179
76.162.161.149	164.3.49.201	40.214.220.107	42.199.4.141
198.18.205.219	122.241.202.174	77.223.248.0	91.194.104.131
240.110.156.214	73.195.210.232	227.93.178.23	180.81.108.197
145.90.121.172	41.145.196.28	97.9.133.100	139.31.37.205