98.2.94.85 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 98.2.94.85
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65505
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;98.2.94.85.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024121001 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Dec 11 09:26:47 CST 2024
;; MSG SIZE  rcvd: 103

Host info

85.94.2.98.in-addr.arpa domain name pointer syn-098-002-094-085.res.spectrum.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
85.94.2.98.in-addr.arpa	name = syn-098-002-094-085.res.spectrum.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
168.61.54.57	attackspambots	Sep 26 18:12:46 vmi369945 sshd\[10981\]: Invalid user 238 from 168.61.54.57 Sep 26 18:12:46 vmi369945 sshd\[10981\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.61.54.57 Sep 26 18:12:47 vmi369945 sshd\[10981\]: Failed password for invalid user 238 from 168.61.54.57 port 29190 ssh2 Sep 26 18:31:13 vmi369945 sshd\[11191\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.61.54.57 user=root Sep 26 18:31:15 vmi369945 sshd\[11191\]: Failed password for root from 168.61.54.57 port 54201 ssh2 ...	2020-09-27 00:35:05
118.70.239.146	attackbotsspam	Automatic report - Banned IP Access	2020-09-27 00:27:56
119.122.115.41	attackbotsspam	Listed on barracudaCentral plus zen-spamhaus / proto=6 . srcport=35876 . dstport=445 . (3540)	2020-09-27 00:27:40
5.255.253.138	attackbotsspam	[Sat Sep 26 03:36:50.928764 2020] [:error] [pid 16537:tid 140694825400064] [client 5.255.253.138:61924] [client 5.255.253.138] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/coreruleset-3.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "756"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "X25U4pu7GLUg53phw52smgAAAC0"] ...	2020-09-27 00:35:37
52.183.114.152	attackbotsspam	Invalid user 198 from 52.183.114.152 port 24569	2020-09-27 00:44:32
185.147.215.8	attack	[2020-09-26 12:36:21] NOTICE[1159] chan_sip.c: Registration from '' failed for '185.147.215.8:54834' - Wrong password [2020-09-26 12:36:21] SECURITY[1198] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-26T12:36:21.378-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1845",SessionID="0x7fcaa02d7a38",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8/54834",Challenge="1a0714ec",ReceivedChallenge="1a0714ec",ReceivedHash="1d30015aaeea2ceacfdf24fdab7d6911" [2020-09-26 12:36:47] NOTICE[1159] chan_sip.c: Registration from '' failed for '185.147.215.8:65443' - Wrong password [2020-09-26 12:36:47] SECURITY[1198] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-26T12:36:47.253-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1910",SessionID="0x7fcaa0194a08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8 ...	2020-09-27 00:43:14
192.42.116.22	attackbotsspam	Sep 26 18:09:32 hidden sshd[16677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.42.116.22 Sep 26 18:09:34 hidden sshd[16677]: Failed password for invalid user admin from 192.42.116.22 port 37180 ssh2 Sep 26 18:10:43 hidden sshd[18298]: Invalid user admin from 192.42.116.22 port 52642	2020-09-27 00:56:08
137.135.125.41	attackbots	Sep 25 22:11:29 roki-contabo sshd\[25935\]: Invalid user admin from 137.135.125.41 Sep 25 22:11:29 roki-contabo sshd\[25935\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.135.125.41 Sep 25 22:11:31 roki-contabo sshd\[25935\]: Failed password for invalid user admin from 137.135.125.41 port 23512 ssh2 Sep 26 00:37:34 roki-contabo sshd\[682\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.135.125.41 user=root Sep 26 00:37:36 roki-contabo sshd\[682\]: Failed password for root from 137.135.125.41 port 64288 ssh2 Sep 25 22:11:29 roki-contabo sshd\[25935\]: Invalid user admin from 137.135.125.41 Sep 25 22:11:29 roki-contabo sshd\[25935\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.135.125.41 Sep 25 22:11:31 roki-contabo sshd\[25935\]: Failed password for invalid user admin from 137.135.125.41 port 23512 ssh2 Sep 26 00:37:34 roki-contabo sshd\ ...	2020-09-27 00:42:10
177.94.211.211	attackbotsspam	20/9/25@16:36:22: FAIL: Alarm-Network address from=177.94.211.211 20/9/25@16:36:23: FAIL: Alarm-Network address from=177.94.211.211 ...	2020-09-27 00:58:00
74.120.14.21	attackspambots	TCP (SYN) 74.120.14.21:50821 -> port 11211, len 44	2020-09-27 00:29:52
51.105.58.206	attack	Sep 26 16:04:01 IngegnereFirenze sshd[7388]: Failed password for invalid user 238 from 51.105.58.206 port 54926 ssh2 ...	2020-09-27 00:45:37
114.33.46.170	attackbots	SSH login attempts.	2020-09-27 01:00:14
52.242.90.140	attackbotsspam	Sep 26 18:57:04 rancher-0 sshd[317264]: Invalid user 193 from 52.242.90.140 port 2298 ...	2020-09-27 01:01:14
157.56.10.63	attackspambots	Automatic report - Port Scan Attack	2020-09-27 00:52:46
81.71.9.75	attackbots	Invalid user paul from 81.71.9.75 port 37632	2020-09-27 00:34:07

Recently Reported IPs

141.225.22.125	164.173.231.3	63.249.244.48	182.194.135.55
101.196.115.148	44.102.176.158	214.165.203.132	221.237.105.17
223.69.189.71	43.2.20.198	4.237.51.244	156.225.30.133
21.105.71.101	170.27.172.55	232.74.236.125	201.133.181.159
187.45.54.213	193.65.39.229	154.57.210.30	147.101.91.185