Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Iran (ISLAMIC Republic Of)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.204.89.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2863
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;85.204.89.52.			IN	A

;; AUTHORITY SECTION:
.			201	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021300 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 18:23:19 CST 2022
;; MSG SIZE  rcvd: 105
Host info
Host 52.89.204.85.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 52.89.204.85.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
51.75.28.25 attackbots
Sep 29 07:37:46 XXX sshd[30009]: Invalid user www from 51.75.28.25 port 39970
2020-09-29 18:55:04
167.172.179.103 attackspam
167.172.179.103 - - [29/Sep/2020:10:57:44 +0200] "POST /xmlrpc.php HTTP/1.1" 403 21243 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
167.172.179.103 - - [29/Sep/2020:11:18:33 +0200] "POST /xmlrpc.php HTTP/1.1" 403 7334 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-29 18:58:26
106.13.39.56 attackbots
Sep 29 10:31:13 ip-172-31-42-142 sshd\[1572\]: Invalid user magic from 106.13.39.56\
Sep 29 10:31:15 ip-172-31-42-142 sshd\[1572\]: Failed password for invalid user magic from 106.13.39.56 port 51132 ssh2\
Sep 29 10:34:21 ip-172-31-42-142 sshd\[1591\]: Invalid user demo2 from 106.13.39.56\
Sep 29 10:34:24 ip-172-31-42-142 sshd\[1591\]: Failed password for invalid user demo2 from 106.13.39.56 port 35768 ssh2\
Sep 29 10:37:41 ip-172-31-42-142 sshd\[1615\]: Failed password for root from 106.13.39.56 port 48630 ssh2\
2020-09-29 18:52:17
187.72.114.230 attack
Unauthorized connection attempt from IP address 187.72.114.230 on Port 445(SMB)
2020-09-29 19:20:28
118.189.139.212 attack
CMS (WordPress or Joomla) login attempt.
2020-09-29 19:12:25
194.153.88.147 attack
Sep 29 05:01:21 mail sshd[20804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.153.88.147
Sep 29 05:01:22 mail sshd[20804]: Failed password for invalid user albert from 194.153.88.147 port 65427 ssh2
...
2020-09-29 19:17:24
41.216.103.121 attackspambots
Sep 28 13:32:53 propaganda sshd[92464]: Connection from 41.216.103.121 port 59110 on 10.0.0.161 port 22 rdomain ""
Sep 28 13:32:53 propaganda sshd[92464]: error: kex_exchange_identification: Connection closed by remote host
2020-09-29 19:00:07
34.71.117.197 attackspambots
(PERMBLOCK) 34.71.117.197 (US/United States/197.117.71.34.bc.googleusercontent.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
2020-09-29 18:42:35
118.25.39.110 attackspambots
Sep 29 05:21:20 marvibiene sshd[19226]: Failed password for root from 118.25.39.110 port 39324 ssh2
Sep 29 05:26:41 marvibiene sshd[19467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.39.110 
Sep 29 05:26:43 marvibiene sshd[19467]: Failed password for invalid user www from 118.25.39.110 port 41194 ssh2
2020-09-29 19:07:00
89.250.148.154 attackbots
$f2bV_matches
2020-09-29 19:10:03
45.138.74.165 attack
Lines containing failures of 45.138.74.165
Sep 27 05:41:31 nbi-636 postfix/smtpd[19199]: warning: hostname 19639.vm.hostglobal.ws does not resolve to address 45.138.74.165
Sep 27 05:41:31 nbi-636 postfix/smtpd[19199]: connect from unknown[45.138.74.165]
Sep x@x
Sep 27 05:41:31 nbi-636 postfix/smtpd[19199]: disconnect from unknown[45.138.74.165] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4
Übereinsservermungen in Binärdatei /var/log/apache/pucorp.org.log


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.138.74.165
2020-09-29 18:52:41
125.166.29.107 attackbotsspam
Automatic report - Port Scan Attack
2020-09-29 19:05:40
94.191.93.211 attackbotsspam
Sep 29 10:05:59 DAAP sshd[11543]: Invalid user siva from 94.191.93.211 port 57450
Sep 29 10:05:59 DAAP sshd[11543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.93.211
Sep 29 10:05:59 DAAP sshd[11543]: Invalid user siva from 94.191.93.211 port 57450
Sep 29 10:06:01 DAAP sshd[11543]: Failed password for invalid user siva from 94.191.93.211 port 57450 ssh2
Sep 29 10:10:56 DAAP sshd[11653]: Invalid user mysql from 94.191.93.211 port 50314
...
2020-09-29 18:59:43
68.183.146.178 attackspambots
2020-09-29 04:47:10,965 fail2ban.actions: WARNING [ssh] Ban 68.183.146.178
2020-09-29 19:10:32
139.186.67.94 attackspambots
Invalid user android from 139.186.67.94 port 49488
2020-09-29 18:52:01

Recently Reported IPs

85.204.93.60 85.206.23.227 85.208.202.56 85.208.202.71
85.208.209.39 85.209.149.129 85.208.98.38 85.209.42.88
85.214.246.2 85.215.230.238 85.212.142.20 85.215.226.214
85.215.229.129 85.21.240.163 85.217.236.167 85.215.213.34
85.218.171.127 85.217.240.170 85.221.134.48 85.221.138.40