85.239.122.45 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: Nokia Solutions and Networks GmbH & Co. KG

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2019-09-12 16:21:19

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.239.122.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50904
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;85.239.122.45.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091200 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Sep 12 16:21:12 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 45.122.239.85.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 45.122.239.85.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
112.85.42.30	attack	Sep 4 23:08:25 vps639187 sshd\[1816\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.30 user=root Sep 4 23:08:27 vps639187 sshd\[1816\]: Failed password for root from 112.85.42.30 port 63160 ssh2 Sep 4 23:08:29 vps639187 sshd\[1816\]: Failed password for root from 112.85.42.30 port 63160 ssh2 ...	2020-09-05 05:33:07
145.239.92.26	attack	Failed password for invalid user from 145.239.92.26 port 40037 ssh2	2020-09-05 05:44:04
111.92.181.8	attackbotsspam	Honeypot attack, port: 5555, PTR: PTR record not found	2020-09-05 05:28:56
91.250.242.12	attack	Failed password for invalid user from 91.250.242.12 port 38450 ssh2	2020-09-05 05:34:38
71.43.31.237	attackbots	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-09-05 05:52:56
107.170.113.190	attack	Sep 4 22:56:08 lnxmysql61 sshd[17730]: Failed password for root from 107.170.113.190 port 33842 ssh2 Sep 4 22:56:08 lnxmysql61 sshd[17730]: Failed password for root from 107.170.113.190 port 33842 ssh2	2020-09-05 05:34:16
58.23.16.254	attackbotsspam	bruteforce detected	2020-09-05 05:43:26
211.155.225.104	attackbots	leo_www	2020-09-05 05:46:57
65.49.194.40	attack	Sep 4 16:52:18 IngegnereFirenze sshd[2887]: Failed password for invalid user kali from 65.49.194.40 port 40966 ssh2 ...	2020-09-05 05:56:44
142.4.14.247	attackbots	Automatic report - Banned IP Access	2020-09-05 05:31:10
108.62.121.180	attackbots	[2020-09-04 17:08:36] NOTICE[1194] chan_sip.c: Registration from '"4005" ' failed for '108.62.121.180:5576' - Wrong password [2020-09-04 17:08:36] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-04T17:08:36.517-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4005",SessionID="0x7f2ddc1178e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/108.62.121.180/5576",Challenge="230c35e5",ReceivedChallenge="230c35e5",ReceivedHash="d95df77b37ada77a48fc4e45ad4dffa4" [2020-09-04 17:08:36] NOTICE[1194] chan_sip.c: Registration from '"4005" ' failed for '108.62.121.180:5576' - Wrong password [2020-09-04 17:08:36] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-04T17:08:36.559-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4005",SessionID="0x7f2ddc00cc78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-09-05 05:35:23
222.186.30.112	attack	Sep 4 23:28:46 vps639187 sshd\[2197\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.112 user=root Sep 4 23:28:48 vps639187 sshd\[2197\]: Failed password for root from 222.186.30.112 port 63125 ssh2 Sep 4 23:28:50 vps639187 sshd\[2197\]: Failed password for root from 222.186.30.112 port 63125 ssh2 ...	2020-09-05 05:38:46
172.245.186.114	attack	TCP (SYN) 172.245.186.114:5483 -> port 22, len 48	2020-09-05 06:01:11
139.211.38.117	attackbots	Telnet Honeypot -> Telnet Bruteforce / Login	2020-09-05 05:36:03
59.1.45.197	attackspambots	Honeypot attack, port: 5555, PTR: PTR record not found	2020-09-05 05:53:14

Recently Reported IPs

193.139.10.23	85.18.48.246	173.244.36.68	202.235.195.1
131.72.222.165	16.27.24.102	112.126.103.139	102.164.64.88
123.193.96.106	112.237.217.5	89.254.209.69	201.119.238.185
176.221.8.202	214.208.221.113	248.87.251.73	248.165.177.227
195.209.148.134	201.186.246.49	58.135.6.109	36.228.168.127