Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Lithuania

Internet Service Provider: vCloud public network

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attack
ET CINS Active Threat Intelligence Poor Reputation IP group 82 - port: 19825 proto: tcp cat: Misc Attackbytes: 60
2020-10-10 23:46:13
attackbots
Port scan denied
2020-10-10 15:35:39
attack
Oct  9 22:03:08 ip106 sshd[27627]: Failed password for root from 92.62.131.106 port 35399 ssh2
...
2020-10-10 04:11:34
attackbots
SIP/5060 Probe, BF, Hack -
2020-10-09 20:08:06
attack
Oct  2 00:35:09 xeon sshd[37553]: Failed password for invalid user julia from 92.62.131.106 port 40951 ssh2
2020-10-02 07:13:28
attack
$f2bV_matches
2020-10-01 23:44:30
attack
[N10.H2.VM2] Port Scanner Detected Blocked by UFW
2020-10-01 15:50:50
attack
2020-08-28T16:19:43+0200 Failed SSH Authentication/Brute Force Attack. (Server 5)
2020-08-29 00:15:51
attackbotsspam
Port scan denied
2020-08-25 14:45:58
attackbotsspam
Aug 23 18:29:10 vps647732 sshd[23216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.106
Aug 23 18:29:12 vps647732 sshd[23216]: Failed password for invalid user stacy from 92.62.131.106 port 51257 ssh2
...
2020-08-24 00:49:03
attackbots
*Port Scan* detected from 92.62.131.106 (LT/Lithuania/Vilnius/Vilnius/-). 4 hits in the last 280 seconds
2020-08-20 03:01:22
attackbotsspam
Port scan: Attack repeated for 24 hours
2020-08-10 12:40:21
attackbots
ET CINS Active Threat Intelligence Poor Reputation IP group 90 - port: 27565 proto: tcp cat: Misc Attackbytes: 60
2020-08-09 01:13:10
attackspam
ET CINS Active Threat Intelligence Poor Reputation IP group 91 - port: 2948 proto: tcp cat: Misc Attackbytes: 60
2020-08-06 04:24:50
attackbotsspam
2020-07-22 10:30:34,594 fail2ban.actions        [18606]: NOTICE  [sshd] Ban 92.62.131.106
2020-07-22 10:47:18,680 fail2ban.actions        [18606]: NOTICE  [sshd] Ban 92.62.131.106
2020-07-22 11:00:51,507 fail2ban.actions        [18606]: NOTICE  [sshd] Ban 92.62.131.106
2020-07-22 11:14:30,085 fail2ban.actions        [18606]: NOTICE  [sshd] Ban 92.62.131.106
2020-07-22 11:27:59,016 fail2ban.actions        [18606]: NOTICE  [sshd] Ban 92.62.131.106
...
2020-08-01 20:20:14
attackbotsspam
2020-07-25T08:05:13.093817vps2034 sshd[7673]: Invalid user easy from 92.62.131.106 port 49028
2020-07-25T08:05:13.097019vps2034 sshd[7673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.106
2020-07-25T08:05:13.093817vps2034 sshd[7673]: Invalid user easy from 92.62.131.106 port 49028
2020-07-25T08:05:14.981080vps2034 sshd[7673]: Failed password for invalid user easy from 92.62.131.106 port 49028 ssh2
2020-07-25T08:09:07.720602vps2034 sshd[17468]: Invalid user agp from 92.62.131.106 port 55165
...
2020-07-25 21:29:16
attackbots
Jul 17 22:32:51 jumpserver sshd[109769]: Invalid user vivek from 92.62.131.106 port 41196
Jul 17 22:32:53 jumpserver sshd[109769]: Failed password for invalid user vivek from 92.62.131.106 port 41196 ssh2
Jul 17 22:37:18 jumpserver sshd[109895]: Invalid user ubuntu from 92.62.131.106 port 49634
...
2020-07-18 07:35:00
attack
Jul 15 13:17:56 nextcloud sshd\[32367\]: Invalid user dell from 92.62.131.106
Jul 15 13:17:56 nextcloud sshd\[32367\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.106
Jul 15 13:17:58 nextcloud sshd\[32367\]: Failed password for invalid user dell from 92.62.131.106 port 40096 ssh2
2020-07-15 19:50:18
attackspam
" "
2020-07-13 05:52:31
attackbots
Port scan: Attack repeated for 24 hours
2020-07-10 05:26:00
attackspambots
ET CINS Active Threat Intelligence Poor Reputation IP group 83 - port: 6264 proto: TCP cat: Misc Attack
2020-07-08 21:06:24
attackbotsspam
Jul  8 08:25:22 web1 sshd[18905]: Invalid user man from 92.62.131.106 port 58682
Jul  8 08:25:22 web1 sshd[18905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.106
Jul  8 08:25:22 web1 sshd[18905]: Invalid user man from 92.62.131.106 port 58682
Jul  8 08:25:25 web1 sshd[18905]: Failed password for invalid user man from 92.62.131.106 port 58682 ssh2
Jul  8 08:29:38 web1 sshd[19887]: Invalid user azure from 92.62.131.106 port 35402
Jul  8 08:29:38 web1 sshd[19887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.106
Jul  8 08:29:38 web1 sshd[19887]: Invalid user azure from 92.62.131.106 port 35402
Jul  8 08:29:40 web1 sshd[19887]: Failed password for invalid user azure from 92.62.131.106 port 35402 ssh2
Jul  8 08:32:34 web1 sshd[20649]: Invalid user wang from 92.62.131.106 port 33916
...
2020-07-08 07:34:45
attackspambots
Jul  6 05:55:15 serwer sshd\[26765\]: Invalid user build from 92.62.131.106 port 52390
Jul  6 05:55:15 serwer sshd\[26765\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.106
Jul  6 05:55:17 serwer sshd\[26765\]: Failed password for invalid user build from 92.62.131.106 port 52390 ssh2
...
2020-07-06 12:04:53
attackspambots
Jul  4 07:38:30 plex-server sshd[47587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.106 
Jul  4 07:38:30 plex-server sshd[47587]: Invalid user rosa from 92.62.131.106 port 46269
Jul  4 07:38:32 plex-server sshd[47587]: Failed password for invalid user rosa from 92.62.131.106 port 46269 ssh2
Jul  4 07:41:34 plex-server sshd[48696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.106  user=root
Jul  4 07:41:37 plex-server sshd[48696]: Failed password for root from 92.62.131.106 port 44489 ssh2
...
2020-07-04 16:32:48
attackspam
 TCP (SYN) 92.62.131.106:43540 -> port 13293, len 44
2020-07-04 10:51:19
attackspam
Jul  4 00:45:54 vps639187 sshd\[25924\]: Invalid user yhl from 92.62.131.106 port 41665
Jul  4 00:45:54 vps639187 sshd\[25924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.106
Jul  4 00:45:57 vps639187 sshd\[25924\]: Failed password for invalid user yhl from 92.62.131.106 port 41665 ssh2
...
2020-07-04 06:46:08
attackspam
(sshd) Failed SSH login from 92.62.131.106 (LT/Lithuania/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 27 20:15:21 grace sshd[24270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.106  user=root
Jun 27 20:15:23 grace sshd[24270]: Failed password for root from 92.62.131.106 port 59691 ssh2
Jun 27 20:24:18 grace sshd[25135]: Invalid user tt from 92.62.131.106 port 59351
Jun 27 20:24:19 grace sshd[25135]: Failed password for invalid user tt from 92.62.131.106 port 59351 ssh2
Jun 27 20:27:19 grace sshd[25754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.106  user=root
2020-06-28 04:32:55
attackbots
Jun 20 14:40:49 pve1 sshd[32258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.106 
Jun 20 14:40:50 pve1 sshd[32258]: Failed password for invalid user cistest from 92.62.131.106 port 60731 ssh2
...
2020-06-20 23:05:33
attack
Invalid user jy from 92.62.131.106 port 56464
2020-06-18 13:34:43
attackbots
Jun 17 03:56:40 scw-tender-jepsen sshd[3909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.106
Jun 17 03:56:42 scw-tender-jepsen sshd[3909]: Failed password for invalid user help from 92.62.131.106 port 40335 ssh2
2020-06-17 12:32:57
Comments on same subnet:
IP Type Details Datetime
92.62.131.124 attackspam
Apr  6 07:30:13 server sshd\[32246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.124  user=root
Apr  6 07:30:15 server sshd\[32246\]: Failed password for root from 92.62.131.124 port 36206 ssh2
Apr  6 07:42:46 server sshd\[3115\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.124  user=root
Apr  6 07:42:48 server sshd\[3115\]: Failed password for root from 92.62.131.124 port 40462 ssh2
Apr  6 07:46:42 server sshd\[4270\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.124  user=root
...
2020-04-06 16:15:29
92.62.131.124 attackbots
$f2bV_matches
2020-04-03 07:57:27
92.62.131.124 attackspambots
Mar 25 20:58:20 dev0-dcde-rnet sshd[18421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.124
Mar 25 20:58:22 dev0-dcde-rnet sshd[18421]: Failed password for invalid user nexus from 92.62.131.124 port 36698 ssh2
Mar 25 21:02:56 dev0-dcde-rnet sshd[18475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.124
2020-03-26 04:51:26
92.62.131.124 attackbots
Mar 25 04:47:45 vps sshd[12885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.124 
Mar 25 04:47:46 vps sshd[12885]: Failed password for invalid user www from 92.62.131.124 port 45320 ssh2
Mar 25 04:55:56 vps sshd[13351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.124 
...
2020-03-25 12:56:54
92.62.131.124 attackbotsspam
Invalid user ela from 92.62.131.124 port 50270
2020-03-01 07:50:11
92.62.131.124 attackbotsspam
Feb 12 09:44:52 : SSH login attempts with invalid user
2020-02-13 07:34:48
92.62.131.124 attackbotsspam
Unauthorized connection attempt detected from IP address 92.62.131.124 to port 2220 [J]
2020-02-03 07:00:39
92.62.131.124 attack
Invalid user trilochan from 92.62.131.124 port 56040
2020-02-02 08:03:57
92.62.131.124 attack
Jan 20 20:16:13 itv-usvr-02 sshd[11250]: Invalid user service from 92.62.131.124 port 42192
Jan 20 20:16:13 itv-usvr-02 sshd[11250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.124
Jan 20 20:16:13 itv-usvr-02 sshd[11250]: Invalid user service from 92.62.131.124 port 42192
Jan 20 20:16:15 itv-usvr-02 sshd[11250]: Failed password for invalid user service from 92.62.131.124 port 42192 ssh2
Jan 20 20:20:41 itv-usvr-02 sshd[11270]: Invalid user sanat from 92.62.131.124 port 46324
2020-01-20 21:30:27
92.62.131.124 attackbotsspam
SSH bruteforce (Triggered fail2ban)
2020-01-10 20:03:03
92.62.131.124 attackbotsspam
Jan  9 02:52:07 gw1 sshd[29626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.124
Jan  9 02:52:09 gw1 sshd[29626]: Failed password for invalid user omy from 92.62.131.124 port 55534 ssh2
...
2020-01-09 06:09:02
92.62.131.1 attackspambots
SSH login attempts with user root at 2020-01-02.
2020-01-02 23:59:07
92.62.131.124 attack
SSH invalid-user multiple login try
2019-12-26 14:46:57
92.62.131.124 attackbotsspam
Dec 22 14:57:20 OPSO sshd\[4959\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.124  user=root
Dec 22 14:57:22 OPSO sshd\[4959\]: Failed password for root from 92.62.131.124 port 34820 ssh2
Dec 22 15:02:49 OPSO sshd\[5933\]: Invalid user inatsuki from 92.62.131.124 port 39286
Dec 22 15:02:49 OPSO sshd\[5933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.124
Dec 22 15:02:50 OPSO sshd\[5933\]: Failed password for invalid user inatsuki from 92.62.131.124 port 39286 ssh2
2019-12-22 22:18:19
92.62.131.124 attackspam
Dec 20 12:31:59 sso sshd[28426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.62.131.124
Dec 20 12:32:01 sso sshd[28426]: Failed password for invalid user info from 92.62.131.124 port 57056 ssh2
...
2019-12-20 20:01:53
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 92.62.131.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63823
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;92.62.131.106.			IN	A

;; AUTHORITY SECTION:
.			519	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060501 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jun 06 09:34:29 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 106.131.62.92.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 106.131.62.92.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
103.249.100.12 attackbots
[Aegis] @ 2019-07-02 06:14:52  0100 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack
2020-04-29 19:16:23
183.89.212.197 attackbotsspam
(imapd) Failed IMAP login from 183.89.212.197 (TH/Thailand/mx-ll-183.89.212-197.dynamic.3bb.in.th): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 29 10:41:28 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 8 secs): user=, method=PLAIN, rip=183.89.212.197, lip=5.63.12.44, TLS, session=
2020-04-29 19:24:23
192.185.4.100 attackbots
Website hacking attempt: Improper php file access [php file]
2020-04-29 19:06:37
218.92.0.211 attack
2020-04-29T12:50:07.541359sd-86998 sshd[44751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.211  user=root
2020-04-29T12:50:09.107665sd-86998 sshd[44751]: Failed password for root from 218.92.0.211 port 42801 ssh2
2020-04-29T12:50:11.584338sd-86998 sshd[44751]: Failed password for root from 218.92.0.211 port 42801 ssh2
2020-04-29T12:50:07.541359sd-86998 sshd[44751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.211  user=root
2020-04-29T12:50:09.107665sd-86998 sshd[44751]: Failed password for root from 218.92.0.211 port 42801 ssh2
2020-04-29T12:50:11.584338sd-86998 sshd[44751]: Failed password for root from 218.92.0.211 port 42801 ssh2
2020-04-29T12:50:07.541359sd-86998 sshd[44751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.211  user=root
2020-04-29T12:50:09.107665sd-86998 sshd[44751]: Failed password for root from 218.92.0.211 p
...
2020-04-29 19:30:03
42.200.80.42 attackbots
Wordpress malicious attack:[sshd]
2020-04-29 19:23:54
189.18.243.210 attackspambots
Apr 29 13:10:00 legacy sshd[7343]: Failed password for root from 189.18.243.210 port 41042 ssh2
Apr 29 13:14:41 legacy sshd[7502]: Failed password for root from 189.18.243.210 port 46344 ssh2
Apr 29 13:19:22 legacy sshd[7687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.18.243.210
...
2020-04-29 19:25:06
118.25.63.170 attackbotsspam
Invalid user ubnt from 118.25.63.170 port 27755
2020-04-29 19:15:08
188.36.125.210 attack
Failed password for invalid user root from 188.36.125.210 port 32814 ssh2
2020-04-29 19:11:16
181.48.67.89 attackbotsspam
prod11
...
2020-04-29 19:08:48
82.196.15.195 attackspambots
SSH Brute-Force Attack
2020-04-29 19:26:00
157.230.226.254 attack
Invalid user ps from 157.230.226.254 port 36620
2020-04-29 19:11:47
45.254.25.193 attackspambots
20/4/28@23:52:13: FAIL: Alarm-Intrusion address from=45.254.25.193
...
2020-04-29 19:18:06
222.186.30.35 attackbotsspam
Apr 29 13:09:31 * sshd[14517]: Failed password for root from 222.186.30.35 port 36464 ssh2
2020-04-29 19:10:23
64.225.1.4 attack
Apr 29 07:14:58 vps46666688 sshd[3090]: Failed password for root from 64.225.1.4 port 58326 ssh2
Apr 29 07:18:37 vps46666688 sshd[3330]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.1.4
...
2020-04-29 19:01:55
82.148.92.114 attack
[Aegis] @ 2019-07-02 04:39:56  0100 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack
2020-04-29 19:26:22

Recently Reported IPs

201.182.212.115 106.13.63.114 211.25.201.153 119.45.0.9
185.213.21.15 92.253.234.17 197.219.83.75 186.92.31.215
185.50.10.107 31.41.187.166 162.241.29.139 145.239.86.227
125.119.68.8 37.26.2.122 103.27.63.137 113.188.254.1
77.45.85.112 46.103.180.19 96.225.120.143 47.104.176.235