94.20.62.212 - IPInfo

Basic Info

City: Baku

Region: Baku City

Country: Azerbaijan

Internet Service Provider: Delta Telecom Ltd

Hostname: unknown

Organization: Delta Telecom Ltd

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Port Scan: TCP/445	2019-09-10 19:06:14
attackspam	445/tcp 445/tcp 445/tcp... [2019-06-04/08-03]13pkt,1pt.(tcp)	2019-08-03 22:56:25
attackbotsspam	firewall-block, port(s): 445/tcp	2019-07-31 16:53:09
attackspam	SMB Server BruteForce Attack	2019-06-25 02:25:51

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 94.20.62.212
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36163
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;94.20.62.212.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019060400 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jun 05 02:17:01 CST 2019
;; MSG SIZE  rcvd: 116

Host info

Host 212.62.20.94.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 212.62.20.94.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
123.206.17.141	attack	2019-10-22T06:52:46.014607shield sshd\[22767\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.17.141 user=root 2019-10-22T06:52:48.179718shield sshd\[22767\]: Failed password for root from 123.206.17.141 port 43540 ssh2 2019-10-22T06:52:50.664604shield sshd\[22767\]: Failed password for root from 123.206.17.141 port 43540 ssh2 2019-10-22T06:52:53.088470shield sshd\[22767\]: Failed password for root from 123.206.17.141 port 43540 ssh2 2019-10-22T06:52:55.592235shield sshd\[22767\]: Failed password for root from 123.206.17.141 port 43540 ssh2	2019-10-22 15:01:42
139.59.95.216	attackbots	2019-10-22T06:00:20.369278hub.schaetter.us sshd\[25098\]: Invalid user gzidc from 139.59.95.216 port 60056 2019-10-22T06:00:20.382587hub.schaetter.us sshd\[25098\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.95.216 2019-10-22T06:00:22.462712hub.schaetter.us sshd\[25098\]: Failed password for invalid user gzidc from 139.59.95.216 port 60056 ssh2 2019-10-22T06:06:15.747796hub.schaetter.us sshd\[25239\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.95.216 user=root 2019-10-22T06:06:17.569111hub.schaetter.us sshd\[25239\]: Failed password for root from 139.59.95.216 port 41366 ssh2 ...	2019-10-22 15:05:55
82.9.100.141	attackspam	Brute force attempt	2019-10-22 14:41:35
195.154.191.151	attackbots	\[2019-10-22 00:16:21\] NOTICE\[2038\] chan_sip.c: Registration from '\' failed for '195.154.191.151:55095' - Wrong password \[2019-10-22 00:16:21\] SECURITY\[2046\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-22T00:16:21.946-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="309",SessionID="0x7f6130804e48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154.191.151/55095",Challenge="4c7de8aa",ReceivedChallenge="4c7de8aa",ReceivedHash="2a54a76cf5959fd8691a065aeaa9e285" \[2019-10-22 00:17:27\] NOTICE\[2038\] chan_sip.c: Registration from '\' failed for '195.154.191.151:54451' - Wrong password \[2019-10-22 00:17:27\] SECURITY\[2046\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-22T00:17:27.536-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="109",SessionID="0x7f6130477218",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154	2019-10-22 14:50:43
114.239.76.110	attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/114.239.76.110/ CN - 1H : (434) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4134 IP : 114.239.76.110 CIDR : 114.232.0.0/13 PREFIX COUNT : 5430 UNIQUE IP COUNT : 106919680 ATTACKS DETECTED ASN4134 : 1H - 3 3H - 16 6H - 37 12H - 72 24H - 164 DateTime : 2019-10-22 05:54:59 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-10-22 14:47:21
89.99.29.249	attackspam	FTP brute force ...	2019-10-22 14:49:52
59.33.138.26	attack	Automatic report - Port Scan Attack	2019-10-22 14:37:54
104.244.79.146	attackspambots	Invalid user fake from 104.244.79.146 port 40588	2019-10-22 15:07:42
118.92.93.233	attack	$f2bV_matches	2019-10-22 14:54:21
51.77.157.78	attackspam	2019-10-22T04:56:10.952337shield sshd\[888\]: Invalid user abc1234% from 51.77.157.78 port 34296 2019-10-22T04:56:10.958116shield sshd\[888\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.ip-51-77-157.eu 2019-10-22T04:56:12.509155shield sshd\[888\]: Failed password for invalid user abc1234% from 51.77.157.78 port 34296 ssh2 2019-10-22T05:00:06.042772shield sshd\[2238\]: Invalid user admin@pass from 51.77.157.78 port 45076 2019-10-22T05:00:06.045703shield sshd\[2238\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.ip-51-77-157.eu	2019-10-22 14:59:54
80.58.157.231	attackspambots	$f2bV_matches	2019-10-22 15:02:48
107.6.171.133	attackspam	UTC: 2019-10-21 port: 53/tcp	2019-10-22 15:02:04
159.65.155.227	attackbots	Oct 22 02:43:02 xtremcommunity sshd\[768332\]: Invalid user 1234$ABCD from 159.65.155.227 port 57436 Oct 22 02:43:02 xtremcommunity sshd\[768332\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.155.227 Oct 22 02:43:04 xtremcommunity sshd\[768332\]: Failed password for invalid user 1234$ABCD from 159.65.155.227 port 57436 ssh2 Oct 22 02:47:32 xtremcommunity sshd\[768426\]: Invalid user 1 from 159.65.155.227 port 39126 Oct 22 02:47:32 xtremcommunity sshd\[768426\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.155.227 ...	2019-10-22 15:01:21
114.237.155.106	attackbotsspam	Brute force SMTP login attempts.	2019-10-22 14:49:29
182.48.84.6	attackspambots	Oct 22 06:30:11 srv206 sshd[15041]: Invalid user openerp from 182.48.84.6 Oct 22 06:30:11 srv206 sshd[15041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.48.84.6 Oct 22 06:30:11 srv206 sshd[15041]: Invalid user openerp from 182.48.84.6 Oct 22 06:30:12 srv206 sshd[15041]: Failed password for invalid user openerp from 182.48.84.6 port 33774 ssh2 ...	2019-10-22 15:11:25

Recently Reported IPs

26.50.212.11	67.26.232.198	27.88.202.140	118.24.124.84
198.14.36.123	81.128.16.86	72.102.190.166	176.218.198.64
207.195.155.8	118.0.239.106	172.35.28.57	191.219.172.176
78.108.227.54	102.135.6.205	119.224.8.45	141.41.144.105
206.189.16.203	125.113.177.149	119.2.243.0	57.1.131.209