212.112.118.2 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Kyrgyzstan

Internet Service Provider: AKNET Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Oct 30 12:45:51 mxgate1 postfix/postscreen[24367]: CONNECT from [212.112.118.2]:31093 to [176.31.12.44]:25 Oct 30 12:45:51 mxgate1 postfix/dnsblog[24368]: addr 212.112.118.2 listed by domain zen.spamhaus.org as 127.0.0.4 Oct 30 12:45:51 mxgate1 postfix/dnsblog[24368]: addr 212.112.118.2 listed by domain zen.spamhaus.org as 127.0.0.11 Oct 30 12:45:51 mxgate1 postfix/dnsblog[24371]: addr 212.112.118.2 listed by domain cbl.abuseat.org as 127.0.0.2 Oct 30 12:45:51 mxgate1 postfix/dnsblog[24369]: addr 212.112.118.2 listed by domain b.barracudacentral.org as 127.0.0.2 Oct 30 12:45:51 mxgate1 postfix/postscreen[24367]: PREGREET 22 after 0.14 from [212.112.118.2]:31093: EHLO [212.112.118.2] Oct 30 12:45:51 mxgate1 postfix/postscreen[24367]: DNSBL rank 4 for [212.112.118.2]:31093 Oct x@x Oct 30 12:45:51 mxgate1 postfix/postscreen[24367]: HANGUP after 0.42 from [212.112.118.2]:31093 in tests after SMTP handshake Oct 30 12:45:51 mxgate1 postfix/postscreen[24367]: DISCONNECT [212......... -------------------------------	2019-10-30 23:08:20

Type

Details

Datetime

attackbotsspam

Oct 30 12:45:51 mxgate1 postfix/postscreen[24367]: CONNECT from [212.112.118.2]:31093 to [176.31.12.44]:25
Oct 30 12:45:51 mxgate1 postfix/dnsblog[24368]: addr 212.112.118.2 listed by domain zen.spamhaus.org as 127.0.0.4
Oct 30 12:45:51 mxgate1 postfix/dnsblog[24368]: addr 212.112.118.2 listed by domain zen.spamhaus.org as 127.0.0.11
Oct 30 12:45:51 mxgate1 postfix/dnsblog[24371]: addr 212.112.118.2 listed by domain cbl.abuseat.org as 127.0.0.2
Oct 30 12:45:51 mxgate1 postfix/dnsblog[24369]: addr 212.112.118.2 listed by domain b.barracudacentral.org as 127.0.0.2
Oct 30 12:45:51 mxgate1 postfix/postscreen[24367]: PREGREET 22 after 0.14 from [212.112.118.2]:31093: EHLO [212.112.118.2]

Oct 30 12:45:51 mxgate1 postfix/postscreen[24367]: DNSBL rank 4 for [212.112.118.2]:31093
Oct x@x
Oct 30 12:45:51 mxgate1 postfix/postscreen[24367]: HANGUP after 0.42 from [212.112.118.2]:31093 in tests after SMTP handshake
Oct 30 12:45:51 mxgate1 postfix/postscreen[24367]: DISCONNECT [212.........
-------------------------------

2019-10-30 23:08:20

Comments on same subnet:

IP	Type	Details	Datetime
212.112.118.169	attack	Unauthorized connection attempt detected from IP address 212.112.118.169 to port 23 [T]	2020-08-16 04:02:09
212.112.118.165	attackbots	Unauthorized connection attempt from IP address 212.112.118.165 on Port 445(SMB)	2020-03-09 09:10:58
212.112.118.194	attackspam	Feb 3 14:29:35 grey postfix/smtpd\[28850\]: NOQUEUE: reject: RCPT from unknown\[212.112.118.194\]: 554 5.7.1 Service unavailable\; Client host \[212.112.118.194\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=212.112.118.194\; from=\ to=\ proto=ESMTP helo=\<212-112-118-194.aknet.kg\> ...	2020-02-03 22:17:51
212.112.118.45	attackspam	Honeypot attack, port: 445, PTR: 212-112-118-45.aknet.kg.	2020-01-27 22:41:54

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 212.112.118.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43051
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;212.112.118.2.			IN	A

;; AUTHORITY SECTION:
.			370	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019103000 1800 900 604800 86400

;; Query time: 111 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 30 23:08:09 CST 2019
;; MSG SIZE  rcvd: 117

Host info

2.118.112.212.in-addr.arpa domain name pointer 212-112-118-2.aknet.kg.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
2.118.112.212.in-addr.arpa	name = 212-112-118-2.aknet.kg.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
119.147.88.77	attackbots	Invalid user admin from 119.147.88.77 port 43450	2020-02-25 04:11:04
208.109.53.185	attackbotsspam	Automatic report - XMLRPC Attack	2020-02-25 04:11:23
195.175.57.182	attackspam	Feb 24 14:22:21 debian-2gb-nbg1-2 kernel: \[4809741.858457\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=195.175.57.182 DST=195.201.40.59 LEN=52 TOS=0x00 PREC=0x00 TTL=110 ID=3572 DF PROTO=TCP SPT=52445 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0	2020-02-25 04:13:19
46.252.205.153	attack	Automatic report - Banned IP Access	2020-02-25 04:36:12
177.11.41.201	attackspam	Port 22 Scan, PTR: None	2020-02-25 04:09:06
112.17.132.242	attackspam	suspicious action Mon, 24 Feb 2020 13:40:55 -0300	2020-02-25 04:18:25
58.222.107.253	attackbots	Feb 24 14:22:17 [snip] sshd[333]: Invalid user deploy from 58.222.107.253 port 26910 Feb 24 14:22:17 [snip] sshd[333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.222.107.253 Feb 24 14:22:19 [snip] sshd[333]: Failed password for invalid user deploy from 58.222.107.253 port 26910 ssh2[...]	2020-02-25 04:15:29
106.75.4.19	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-25 04:37:44
54.39.10.56	attackspam	Automatic report - SSH Brute-Force Attack	2020-02-25 04:01:08
14.230.8.46	attackspambots	Email rejected due to spam filtering	2020-02-25 03:55:25
80.82.78.100	attackbotsspam	80.82.78.100 was recorded 26 times by 13 hosts attempting to connect to the following ports: 1030,1051,1045. Incident counter (4h, 24h, all-time): 26, 115, 19599	2020-02-25 04:07:51
185.143.223.163	attack	Email address brute-force	2020-02-25 04:02:41
180.76.110.70	attackspam	SSH Brute-Force reported by Fail2Ban	2020-02-25 04:32:51
37.59.47.80	attackspambots	Automatic report - XMLRPC Attack	2020-02-25 03:53:17
161.189.83.105	attack	Feb 24 14:22:51 sshd[22813]: Failed password for invalid user oracle from 161.189.83.105 port 36644 ssh2	2020-02-25 03:54:57

Recently Reported IPs

27.106.10.71	110.141.138.92	77.138.121.231	73.174.125.138
117.205.15.105	181.52.85.249	151.215.111.95	7.206.70.35
173.144.126.230	71.64.18.250	205.60.217.202	82.230.145.95
245.174.216.232	203.177.252.222	203.37.169.8	149.77.241.194
217.4.110.163	6.128.147.154	114.101.33.112	212.191.16.158