92.118.161.20 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Lithuania

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
92.118.161.61	attack	Port Scan/VNC login attempt ...	2020-10-14 03:14:39
92.118.161.5	attackspam	92.118.161.5 - - [13/Oct/2020:18:10:54 +0200] "GET / HTTP/1.1" 200 612 "-" "NetSystemsResearch studies the availability of various services across the internet. Our website is netsystemsresearch.com"	2020-10-14 02:37:42
92.118.161.61	attackspambots	67/tcp 465/tcp 1234/tcp... [2020-08-14/10-13]119pkt,81pt.(tcp),4pt.(udp),1tp.(icmp)	2020-10-13 18:31:55
92.118.161.5	attackspambots	TCP (SYN) 92.118.161.5:49847 -> port 21, len 44	2020-10-13 17:51:29
92.118.161.57	attack	SSH login attempts.	2020-10-12 04:06:06
92.118.161.57	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-10-11 20:04:49
92.118.161.57	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 81 - port: 5351 proto: udp cat: Misc Attackbytes: 60	2020-10-11 12:03:47
92.118.161.57	attackspam	ET CINS Active Threat Intelligence Poor Reputation IP group 81 - port: 5351 proto: udp cat: Misc Attackbytes: 60	2020-10-11 05:28:41
92.118.161.29	attack	srv02 Mass scanning activity detected Target: 1717 ..	2020-10-10 01:43:47
92.118.161.29	attackbotsspam	firewall-block, port(s): 443/tcp	2020-10-09 17:27:52
92.118.161.41	attack	Fail2Ban Ban Triggered	2020-10-08 03:10:15
92.118.161.41	attackbotsspam	TCP port : 8020	2020-10-07 19:24:01
92.118.161.37	attackspam	Probing wordpress site	2020-10-07 06:32:55
92.118.161.5	attackspambots	Unauthorized IMAP connection attempt	2020-10-07 04:31:55
92.118.161.17	attack	TCP (SYN) 92.118.161.17:50098 -> port 8000, len 44	2020-10-07 01:06:23

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 92.118.161.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53997
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;92.118.161.20.			IN	A

;; AUTHORITY SECTION:
.			377	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022091400 1800 900 604800 86400

;; Query time: 378 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 14 22:15:37 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 20.161.118.92.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 20.161.118.92.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
188.124.32.138	attack	RDP Brute-Force (Grieskirchen RZ1)	2019-11-28 23:16:31
222.186.175.163	attackspam	Nov 28 10:39:02 plusreed sshd[1047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.163 user=root Nov 28 10:39:04 plusreed sshd[1047]: Failed password for root from 222.186.175.163 port 37952 ssh2 ...	2019-11-28 23:42:03
187.44.113.33	attack	2019-11-28T14:42:10.564248shield sshd\[25419\]: Invalid user tracy from 187.44.113.33 port 35532 2019-11-28T14:42:10.569677shield sshd\[25419\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.44.113.33 2019-11-28T14:42:13.262568shield sshd\[25419\]: Failed password for invalid user tracy from 187.44.113.33 port 35532 ssh2 2019-11-28T14:48:36.300286shield sshd\[27171\]: Invalid user reception from 187.44.113.33 port 39087 2019-11-28T14:48:36.305418shield sshd\[27171\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.44.113.33	2019-11-28 23:13:44
221.239.62.137	attackbotsspam	SSH/22 MH Probe, BF, Hack -	2019-11-28 23:18:03
112.85.42.227	attack	Nov 28 10:25:35 TORMINT sshd\[17756\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.227 user=root Nov 28 10:25:37 TORMINT sshd\[17756\]: Failed password for root from 112.85.42.227 port 43288 ssh2 Nov 28 10:27:47 TORMINT sshd\[17978\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.227 user=root ...	2019-11-28 23:38:35
148.70.59.114	attack	SSH brute-force: detected 8 distinct usernames within a 24-hour window.	2019-11-28 23:35:45
49.88.112.71	attack	2019-11-28T15:10:48.097516abusebot-6.cloudsearch.cf sshd\[8699\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.71 user=root	2019-11-28 23:39:39
103.212.71.88	attack	[ThuNov2815:40:19.1678162019][:error][pid31979:tid47933153044224][client103.212.71.88:35150][client103.212.71.88]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles$disablethisruleifyourequireaccesstofilesthatendwith.sql$"][severity"CRITICAL"][hostname"www.ilgiornaledelticino.ch"][uri"/04-2019.sql"][unique_id"Xd-cU4rVVANNdvmEfl138gAAANE"][ThuNov2815:40:20.7098292019][:error][pid31905:tid47933159347968][client103.212.71.88:35338][client103.212.71.88]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch"\\\\\\\\.sql\$"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf"][line"1288"][id"350590"][rev"2"][msg"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessrawSQLfiles$disablethisruleifyourequireaccesstofilesthatendwith.sql$"][se	2019-11-28 23:37:08
139.219.6.50	attackbotsspam	firewall-block, port(s): 40864/tcp	2019-11-28 23:45:23
5.189.205.160	attack	REQUESTED PAGE: /hsvc_gallery/main.php?g2_view=shutterfly.PrintPhotos&g2_itemId=1477&g2_returnUrl=http%3A%2F%2Fwww2.hsvc.co.nz%2Fhsvc_gallery%2Fmain.php%3Fg2_itemId%3D1477&g2_authToken=9ccfb24f9a31	2019-11-28 23:28:41
185.53.88.78	attack	Fail2Ban Ban Triggered	2019-11-28 23:50:07
222.187.200.229	attack	Nov 28 21:40:34 itv-usvr-01 sshd[10884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.187.200.229 user=root Nov 28 21:40:35 itv-usvr-01 sshd[10884]: Failed password for root from 222.187.200.229 port 51178 ssh2	2019-11-28 23:31:06
200.54.78.178	attackspam	2019-11-28 H=$007gmail.com$ \[200.54.78.178\] F=\ rejected RCPT \: Mail not accepted. 200.54.78.178 is listed at a DNSBL. 2019-11-28 H=$007gmail.com$ \[200.54.78.178\] F=\ rejected RCPT \<REMOVED@REMOVED.de\>: Mail not accepted. 200.54.78.178 is listed at a DNSBL. 2019-11-28 H=$007gmail.com$ \[200.54.78.178\] F=\ rejected RCPT \<REMOVEDREMOVEDlast.fm@REMOVED.de\>: recipient blacklisted	2019-11-28 23:04:12
180.168.141.246	attack	Nov 28 15:40:41 icinga sshd[19257]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.168.141.246 Nov 28 15:40:43 icinga sshd[19257]: Failed password for invalid user 321 from 180.168.141.246 port 53128 ssh2 ...	2019-11-28 23:30:10
218.92.0.212	attackspam	Nov 25 04:49:58 srv sshd\[28882\]: error: PAM: Authentication failure for root from 218.92.0.212 Nov 25 04:50:01 srv sshd\[28885\]: error: PAM: Authentication failure for root from 218.92.0.212 Nov 25 04:50:05 srv sshd\[28947\]: error: PAM: Authentication failure for root from 218.92.0.212 ...	2019-11-28 23:05:26

Recently Reported IPs

92.118.160.192	196.52.43.82	167.94.145.182	185.62.190.77
92.118.37.130	92.118.160.228	185.62.190.237	92.118.161.34
45.141.86.114	188.209.52.94	89.248.172.152	92.118.161.201
45.132.187.30	45.141.86.247	45.141.86.112	167.94.145.122
169.53.184.23	45.141.86.85	200.87.31.167	185.62.189.88