212.112.118.5 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Kyrgyzstan

Internet Service Provider: unknown

Hostname: unknown

Organization: AKNET Ltd.

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
212.112.118.169	attack	Unauthorized connection attempt detected from IP address 212.112.118.169 to port 23 [T]	2020-08-16 04:02:09
212.112.118.165	attackbots	Unauthorized connection attempt from IP address 212.112.118.165 on Port 445(SMB)	2020-03-09 09:10:58
212.112.118.194	attackspam	Feb 3 14:29:35 grey postfix/smtpd\[28850\]: NOQUEUE: reject: RCPT from unknown\[212.112.118.194\]: 554 5.7.1 Service unavailable\; Client host \[212.112.118.194\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=212.112.118.194\; from=\ to=\ proto=ESMTP helo=\<212-112-118-194.aknet.kg\> ...	2020-02-03 22:17:51
212.112.118.45	attackspam	Honeypot attack, port: 445, PTR: 212-112-118-45.aknet.kg.	2020-01-27 22:41:54
212.112.118.2	attackbotsspam	Oct 30 12:45:51 mxgate1 postfix/postscreen[24367]: CONNECT from [212.112.118.2]:31093 to [176.31.12.44]:25 Oct 30 12:45:51 mxgate1 postfix/dnsblog[24368]: addr 212.112.118.2 listed by domain zen.spamhaus.org as 127.0.0.4 Oct 30 12:45:51 mxgate1 postfix/dnsblog[24368]: addr 212.112.118.2 listed by domain zen.spamhaus.org as 127.0.0.11 Oct 30 12:45:51 mxgate1 postfix/dnsblog[24371]: addr 212.112.118.2 listed by domain cbl.abuseat.org as 127.0.0.2 Oct 30 12:45:51 mxgate1 postfix/dnsblog[24369]: addr 212.112.118.2 listed by domain b.barracudacentral.org as 127.0.0.2 Oct 30 12:45:51 mxgate1 postfix/postscreen[24367]: PREGREET 22 after 0.14 from [212.112.118.2]:31093: EHLO [212.112.118.2] Oct 30 12:45:51 mxgate1 postfix/postscreen[24367]: DNSBL rank 4 for [212.112.118.2]:31093 Oct x@x Oct 30 12:45:51 mxgate1 postfix/postscreen[24367]: HANGUP after 0.42 from [212.112.118.2]:31093 in tests after SMTP handshake Oct 30 12:45:51 mxgate1 postfix/postscreen[24367]: DISCONNECT [212......... -------------------------------	2019-10-30 23:08:20

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 212.112.118.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33650
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;212.112.118.5.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019061702 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jun 18 16:17:39 CST 2019
;; MSG SIZE  rcvd: 117

Host info

5.118.112.212.in-addr.arpa domain name pointer 212-112-118-5.aknet.kg.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
5.118.112.212.in-addr.arpa	name = 212-112-118-5.aknet.kg.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
42.112.20.32	attack	SSH brute force attempt (f)	2020-09-06 05:30:56
103.133.105.36	attackbots	Sep 5 19:53:15 artelis kernel: [1895574.197468] [UFW BLOCK] IN=eth0 OUT= MAC=c2:45:3b:cb:6e:17:ec:38:73:0c:70:30:08:00 SRC=103.133.105.36 DST=167.99.196.43 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=6041 PROTO=TCP SPT=53448 DPT=41292 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 5 19:53:28 artelis kernel: [1895587.628440] [UFW BLOCK] IN=eth0 OUT= MAC=c2:45:3b:cb:6e:17:ec:38:73:0c:18:30:08:00 SRC=103.133.105.36 DST=167.99.196.43 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=5429 PROTO=TCP SPT=53448 DPT=21178 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 5 19:54:32 artelis kernel: [1895651.526319] [UFW BLOCK] IN=eth0 OUT= MAC=c2:45:3b:cb:6e:17:ec:38:73:0c:70:30:08:00 SRC=103.133.105.36 DST=167.99.196.43 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=50119 PROTO=TCP SPT=53448 DPT=58838 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 5 19:54:57 artelis kernel: [1895676.135676] [UFW BLOCK] IN=eth0 OUT= MAC=c2:45:3b:cb:6e:17:ec:38:73:0c:18:30:08:00 SRC=103.133.105.36 DST=167.99.196.43 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=20863 PROTO=TCP SPT ...	2020-09-06 05:18:23
128.199.204.26	attackspambots	2020-09-05T21:43:36.442208snf-827550 sshd[2103]: Failed password for invalid user cron from 128.199.204.26 port 50448 ssh2 2020-09-05T21:51:11.849855snf-827550 sshd[2138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.204.26 user=root 2020-09-05T21:51:13.703555snf-827550 sshd[2138]: Failed password for root from 128.199.204.26 port 57048 ssh2 ...	2020-09-06 05:15:24
193.228.91.123	attack	SSH Login Bruteforce	2020-09-06 05:08:04
206.189.28.69	attackspam	Port Scan ...	2020-09-06 05:24:26
45.143.223.106	attackbotsspam	[2020-09-05 17:13:14] NOTICE[1194][C-00000f3f] chan_sip.c: Call from '' (45.143.223.106:63929) to extension '00441904911024' rejected because extension not found in context 'public'. [2020-09-05 17:13:14] SECURITY[1233] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-05T17:13:14.866-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00441904911024",SessionID="0x7f2ddc0f4e48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.223.106/63929",ACLName="no_extension_match" [2020-09-05 17:13:47] NOTICE[1194][C-00000f41] chan_sip.c: Call from '' (45.143.223.106:49698) to extension '011441904911024' rejected because extension not found in context 'public'. [2020-09-05 17:13:47] SECURITY[1233] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-05T17:13:47.677-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441904911024",SessionID="0x7f2ddc1b7848",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-09-06 05:22:48
59.127.253.45	attackbotsspam	port scan and connect, tcp 23 (telnet)	2020-09-06 05:02:07
39.115.113.146	attackbotsspam	prod11 ...	2020-09-06 05:03:30
51.83.98.104	attackspambots	Sep 5 18:08:54 vps-51d81928 sshd[237468]: Failed password for invalid user ki from 51.83.98.104 port 48650 ssh2 Sep 5 18:12:56 vps-51d81928 sshd[237498]: Invalid user lcc from 51.83.98.104 port 55266 Sep 5 18:12:56 vps-51d81928 sshd[237498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.98.104 Sep 5 18:12:56 vps-51d81928 sshd[237498]: Invalid user lcc from 51.83.98.104 port 55266 Sep 5 18:12:58 vps-51d81928 sshd[237498]: Failed password for invalid user lcc from 51.83.98.104 port 55266 ssh2 ...	2020-09-06 05:06:44
162.214.111.167	attackbots	" "	2020-09-06 05:22:34
112.85.42.174	attackspambots	Sep 5 22:56:39 vps647732 sshd[8735]: Failed password for root from 112.85.42.174 port 55938 ssh2 Sep 5 22:56:50 vps647732 sshd[8735]: Failed password for root from 112.85.42.174 port 55938 ssh2 ...	2020-09-06 05:02:25
220.128.159.121	attack	" "	2020-09-06 05:01:09
103.78.88.90	attack	Port Scan ...	2020-09-06 05:25:33
113.229.226.221	attackspambots	Port probing on unauthorized port 23	2020-09-06 05:19:41
192.241.227.216	attackspam	Honeypot hit: [2020-09-05 19:53:14 +0300] Connected from 192.241.227.216 to (HoneypotIP):21	2020-09-06 05:15:54

Recently Reported IPs

76.252.218.156	156.212.204.134	60.23.18.243	62.239.60.183
52.67.36.84	41.80.234.133	113.44.24.113	108.171.244.20
2.150.133.237	38.101.211.5	202.88.254.65	180.31.191.205
78.35.46.6	197.251.207.20	70.123.92.218	79.228.209.119
191.52.179.154	84.2.228.3	84.166.108.205	105.159.221.1