89.237.192.94 - IPInfo

Basic Info

City: Osh

Region: Osh

Country: Kyrgyzstan

Internet Service Provider: O!

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
89.237.192.168	attackbotsspam	Jun 29 05:58:24 smtp postfix/smtpd[21519]: NOQUEUE: reject: RCPT from unknown[89.237.192.168]: 554 5.7.1 Service unavailable; Client host [89.237.192.168] blocked using cbl.abuseat.org; Blocked - see http://www.abuseat.org/lookup.cgi?ip=89.237.192.168; from= to= proto=ESMTP helo=<[89.237.192.168]> ...	2020-06-29 12:16:39
89.237.192.11	attackspam	Automatic report - Port Scan Attack	2020-01-07 06:44:48
89.237.192.100	attack	Unauthorized connection attempt detected from IP address 89.237.192.100 to port 445	2019-12-26 16:57:07
89.237.192.217	attackspambots	Automatic report - Port Scan Attack	2019-12-15 15:56:39
89.237.192.129	attackspambots	[portscan] tcp/1433 [MsSQL] in sorbs:'listed [spam]' in Unsubscore:'listed' *(RWIN=8192)(11190859)	2019-11-19 19:46:58
89.237.192.13	attackspam	Automatic report - Port Scan Attack	2019-11-14 17:38:08
89.237.192.189	attackspam	Unauthorized connection attempt from IP address 89.237.192.189 on Port 445(SMB)	2019-11-05 03:37:09
89.237.192.233	attack	Sep 5 13:26:42 mxgate1 postfix/postscreen[13738]: CONNECT from [89.237.192.233]:16940 to [176.31.12.44]:25 Sep 5 13:26:42 mxgate1 postfix/dnsblog[14425]: addr 89.237.192.233 listed by domain zen.spamhaus.org as 127.0.0.4 Sep 5 13:26:42 mxgate1 postfix/dnsblog[14425]: addr 89.237.192.233 listed by domain zen.spamhaus.org as 127.0.0.3 Sep 5 13:26:42 mxgate1 postfix/dnsblog[14425]: addr 89.237.192.233 listed by domain zen.spamhaus.org as 127.0.0.11 Sep 5 13:26:42 mxgate1 postfix/dnsblog[14424]: addr 89.237.192.233 listed by domain cbl.abuseat.org as 127.0.0.2 Sep 5 13:26:42 mxgate1 postfix/dnsblog[14428]: addr 89.237.192.233 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Sep 5 13:26:42 mxgate1 postfix/dnsblog[14427]: addr 89.237.192.233 listed by domain b.barracudacentral.org as 127.0.0.2 Sep 5 13:26:43 mxgate1 postfix/postscreen[13738]: PREGREET 37 after 0.26 from [89.237.192.233]:16940: EHLO 213-145-145-78.static.ktnet.kg Sep 5 13:26:43 mxgate1 postfix/posts........ -------------------------------	2019-09-06 04:12:54
89.237.192.167	attackbotsspam	Autoban 89.237.192.167 AUTH/CONNECT	2019-08-05 13:55:30
89.237.192.40	attackspam	Unauthorised access (Jul 1) SRC=89.237.192.40 LEN=52 TTL=116 ID=28985 DF TCP DPT=21 WINDOW=8192 SYN	2019-07-01 17:06:44
89.237.192.17	attackspam	Mail sent to address hacked/leaked from atari.st	2019-06-24 18:23:06

Whois info:

% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '89.237.192.0 - 89.237.199.255'

% Abuse contact for '89.237.192.0 - 89.237.199.255' is 'azolotko@kt.kg'

inetnum:        89.237.192.0 - 89.237.199.255
netname:        KYRGYZTELEKOM-PPPOE-OSH
descr:          KYRGYZTELEKOM-PPPOE-OSH
country:        KG
remarks:        INFRA-AW
admin-c:        MF11865-RIPE
tech-c:         MF11865-RIPE
status:         ASSIGNED PA
mnt-by:         KTNET-MNT
created:        2014-08-07T06:25:49Z
last-modified:  2015-03-18T04:04:44Z
source:         RIPE

person:         Alex Z
address:        96 Chui avenue, Bishkek, Kyrgyzstan
phone:          +996 312 620042
nic-hdl:        MF11865-RIPE
mnt-by:         KTNET-MNT
created:        2012-03-28T09:21:25Z
last-modified:  2020-09-28T05:13:21Z
source:         RIPE # Filtered

% Information related to '89.237.192.0/19AS12997'

route:          89.237.192.0/19
descr:          KTNET-KG
origin:         AS12997
mnt-by:         KTNET-MNT
created:        2014-05-19T08:31:56Z
last-modified:  2014-05-19T08:31:56Z
source:         RIPE

% This query was served by the RIPE Database Query Service version 1.121.2 (BUSA)

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 89.237.192.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2555
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;89.237.192.94.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026032301 1800 900 604800 86400

;; Query time: 34 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 24 03:27:10 CST 2026
;; MSG SIZE  rcvd: 106

Host info

94.192.237.89.in-addr.arpa domain name pointer 89-237-192-94.pppoe.ktnet.kg.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
94.192.237.89.in-addr.arpa	name = 89-237-192-94.pppoe.ktnet.kg.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.173.154	attack	Aug 29 07:24:25 roki-contabo sshd\[22799\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.154 user=root Aug 29 07:24:26 roki-contabo sshd\[22799\]: Failed password for root from 222.186.173.154 port 34814 ssh2 Aug 29 07:24:43 roki-contabo sshd\[22801\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.154 user=root Aug 29 07:24:45 roki-contabo sshd\[22801\]: Failed password for root from 222.186.173.154 port 37546 ssh2 Aug 29 07:25:07 roki-contabo sshd\[22803\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.154 user=root ...	2020-08-29 13:40:57
154.85.103.6	attack	(sshd) Failed SSH login from 154.85.103.6 (US/United States/-): 5 in the last 3600 secs	2020-08-29 13:42:07
217.170.206.2	attackbotsspam	Icarus honeypot on github	2020-08-29 13:14:52
103.94.6.69	attackspam	Aug 29 07:06:40 minden010 sshd[12621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.6.69 Aug 29 07:06:42 minden010 sshd[12621]: Failed password for invalid user mat from 103.94.6.69 port 55227 ssh2 Aug 29 07:08:32 minden010 sshd[13212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.6.69 ...	2020-08-29 13:44:35
185.66.233.61	attackspam	Automatic report - XMLRPC Attack	2020-08-29 13:10:41
45.112.149.179	attack	IP 45.112.149.179 attacked honeypot on port: 5000 at 8/28/2020 8:58:14 PM	2020-08-29 13:31:22
103.145.12.177	attackspambots	[2020-08-29 00:38:15] NOTICE[1185] chan_sip.c: Registration from '"902" ' failed for '103.145.12.177:5169' - Wrong password [2020-08-29 00:38:15] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-29T00:38:15.173-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="902",SessionID="0x7f10c43e3a48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.177/5169",Challenge="67c5c9df",ReceivedChallenge="67c5c9df",ReceivedHash="c4d8d1ba304c03f0515c153fac3fd1f9" [2020-08-29 00:38:15] NOTICE[1185] chan_sip.c: Registration from '"902" ' failed for '103.145.12.177:5169' - Wrong password [2020-08-29 00:38:15] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-29T00:38:15.300-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="902",SessionID="0x7f10c459e698",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.1 ...	2020-08-29 13:18:23
51.38.83.164	attack	Invalid user skynet from 51.38.83.164 port 39600	2020-08-29 13:25:39
186.10.125.209	attackbots	Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-08-29 13:43:53
203.176.138.108	attack	Icarus honeypot on github	2020-08-29 13:12:23
185.156.73.44	attack	Port scan: Attack repeated for 24 hours	2020-08-29 13:41:30
78.188.58.174	attackbotsspam	Icarus honeypot on github	2020-08-29 13:18:08
220.133.230.111	attackbotsspam	port 23	2020-08-29 13:40:03
116.196.65.202	attack	(sshd) Failed SSH login from 116.196.65.202 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 29 07:24:25 srv sshd[30998]: Invalid user ftpuser from 116.196.65.202 port 40246 Aug 29 07:24:27 srv sshd[30998]: Failed password for invalid user ftpuser from 116.196.65.202 port 40246 ssh2 Aug 29 07:25:04 srv sshd[31029]: Invalid user ansible from 116.196.65.202 port 44302 Aug 29 07:25:06 srv sshd[31029]: Failed password for invalid user ansible from 116.196.65.202 port 44302 ssh2 Aug 29 07:25:36 srv sshd[31041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.65.202 user=root	2020-08-29 13:21:34
223.80.124.112	attack	port 23	2020-08-29 13:28:17

Recently Reported IPs

121.133.164.83	71.87.244.69	62.28.132.104	34.38.195.167
173.20.44.60	217.15.156.199	10.110.6.230	132.66.242.3
2606:4700:10::6816:4338	2606:4700:10::6814:9964	2606:4700:10::ac43:1166	109.167.82.155
2606:4700:10::ac43:120e	2606:4700:10::ac43:747	2606:4700:10::6816:519	2606:4700:10::6816:2847
2606:4700:10::6816:3403	2606:4700:10::6814:9810	2606:4700:10::6814:9189	2606:4700:10::ac43:876