1.241.29.158 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Korea Republic of

Internet Service Provider: SK Broadband Co Ltd

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	2020-03-13 17:58:00 H=\(\[1.241.29.158\]\) \[1.241.29.158\]:15901 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2020-03-13 17:58:15 H=\(\[1.241.29.158\]\) \[1.241.29.158\]:15994 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2020-03-13 17:58:28 H=\(\[1.241.29.158\]\) \[1.241.29.158\]:16068 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-06-01 23:25:19
attackbotsspam	Autoban 1.241.29.158 AUTH/CONNECT	2019-09-23 22:48:53
attackbots	2019-07-03 18:12:12 H=([1.241.29.158]) [1.241.29.158]:11505 I=[10.100.18.20]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=1.241.29.158) 2019-07-03 18:12:12 unexpected disconnection while reading SMTP command from ([1.241.29.158]) [1.241.29.158]:11505 I=[10.100.18.20]:25 (error: Connection reset by peer) 2019-07-03 19:57:34 H=([1.241.29.158]) [1.241.29.158]:20178 I=[10.100.18.20]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=1.241.29.158) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=1.241.29.158	2019-07-06 16:48:33

Type

Details

Datetime

attackspam

2020-03-13 17:58:00 H=\(\[1.241.29.158\]\) \[1.241.29.158\]:15901 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2020-03-13 17:58:15 H=\(\[1.241.29.158\]\) \[1.241.29.158\]:15994 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2020-03-13 17:58:28 H=\(\[1.241.29.158\]\) \[1.241.29.158\]:16068 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
...

2020-06-01 23:25:19

attackbotsspam

Autoban   1.241.29.158 AUTH/CONNECT

2019-09-23 22:48:53

attackbots

2019-07-03 18:12:12 H=([1.241.29.158]) [1.241.29.158]:11505 I=[10.100.18.20]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=1.241.29.158)
2019-07-03 18:12:12 unexpected disconnection while reading SMTP command from ([1.241.29.158]) [1.241.29.158]:11505 I=[10.100.18.20]:25 (error: Connection reset by peer)
2019-07-03 19:57:34 H=([1.241.29.158]) [1.241.29.158]:20178 I=[10.100.18.20]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=1.241.29.158)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=1.241.29.158

2019-07-06 16:48:33

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.241.29.158
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17434
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.241.29.158.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070600 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jul 06 16:48:27 CST 2019
;; MSG SIZE  rcvd: 116

Host info

Host 158.29.241.1.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 158.29.241.1.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
198.199.101.113	attackspam	Feb 8 05:59:20 mail sshd\[15597\]: Invalid user gec from 198.199.101.113 Feb 8 05:59:20 mail sshd\[15597\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.199.101.113 Feb 8 05:59:23 mail sshd\[15597\]: Failed password for invalid user gec from 198.199.101.113 port 58730 ssh2 ...	2020-02-08 13:31:37
185.202.61.123	attackbotsspam	Feb 7 22:48:13 vps46666688 sshd[29247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.202.61.123 Feb 7 22:48:15 vps46666688 sshd[29247]: Failed password for invalid user lsu from 185.202.61.123 port 34842 ssh2 ...	2020-02-08 11:12:35
104.7.66.131	attackbotsspam	Feb 8 04:52:04 game-panel sshd[21201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.7.66.131 Feb 8 04:52:06 game-panel sshd[21201]: Failed password for invalid user anf from 104.7.66.131 port 59162 ssh2 Feb 8 04:59:53 game-panel sshd[21488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.7.66.131	2020-02-08 13:16:07
195.154.181.46	attackbotsspam	Feb 7 sshd[6290]: Invalid user cut from 195.154.181.46 port 38144	2020-02-08 13:06:57
185.156.1.9	attackbotsspam	[portscan] Port scan	2020-02-08 13:30:26
206.189.98.225	attackspambots	SSH Brute-Force reported by Fail2Ban	2020-02-08 13:16:56
45.46.180.6	attackspam	Automatic report - Port Scan Attack	2020-02-08 13:29:05
103.221.244.165	attackspam	Feb 8 05:56:25 legacy sshd[12509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.221.244.165 Feb 8 05:56:26 legacy sshd[12509]: Failed password for invalid user gzf from 103.221.244.165 port 33334 ssh2 Feb 8 05:59:53 legacy sshd[12667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.221.244.165 ...	2020-02-08 13:16:38
187.32.178.33	attackbots	Automatic report - Banned IP Access	2020-02-08 13:11:47
14.98.27.38	attackbots	firewall-block, port(s): 8291/tcp	2020-02-08 13:09:28
182.74.170.54	attackbots	Feb 8 04:04:18 XXX sshd[10551]: Invalid user 666666 from 182.74.170.54 port 52674	2020-02-08 13:10:20
180.250.69.213	attackbotsspam	Feb 8 06:07:28 * sshd[12569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.69.213 Feb 8 06:07:31 * sshd[12569]: Failed password for invalid user uma from 180.250.69.213 port 42994 ssh2	2020-02-08 13:30:44
212.237.34.156	attack	Feb 8 05:56:40 legacy sshd[12534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.34.156 Feb 8 05:56:41 legacy sshd[12534]: Failed password for invalid user dtp from 212.237.34.156 port 42194 ssh2 Feb 8 05:59:57 legacy sshd[12678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.34.156 ...	2020-02-08 13:14:25
49.88.112.70	attack	2020-02-08T04:55:56.102655abusebot-7.cloudsearch.cf sshd[4125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.70 user=root 2020-02-08T04:55:58.513907abusebot-7.cloudsearch.cf sshd[4125]: Failed password for root from 49.88.112.70 port 52182 ssh2 2020-02-08T04:56:00.102991abusebot-7.cloudsearch.cf sshd[4125]: Failed password for root from 49.88.112.70 port 52182 ssh2 2020-02-08T04:55:56.102655abusebot-7.cloudsearch.cf sshd[4125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.70 user=root 2020-02-08T04:55:58.513907abusebot-7.cloudsearch.cf sshd[4125]: Failed password for root from 49.88.112.70 port 52182 ssh2 2020-02-08T04:56:00.102991abusebot-7.cloudsearch.cf sshd[4125]: Failed password for root from 49.88.112.70 port 52182 ssh2 2020-02-08T04:55:56.102655abusebot-7.cloudsearch.cf sshd[4125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.8 ...	2020-02-08 13:01:49
144.217.193.111	attackbotsspam	Feb 7 23:34:32 debian-2gb-nbg1-2 kernel: \[3374114.051858\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=144.217.193.111 DST=195.201.40.59 LEN=52 TOS=0x14 PREC=0x00 TTL=112 ID=7546 DF PROTO=TCP SPT=53525 DPT=81 WINDOW=8192 RES=0x00 SYN URGP=0	2020-02-08 11:13:59

Recently Reported IPs

175.237.247.239	81.134.183.112	15.8.203.37	231.33.95.4
205.149.154.64	9.5.34.0	112.64.93.202	1.30.28.48
56.20.187.73	88.160.196.206	183.88.214.240	21.174.243.40
246.170.73.102	62.109.170.22	231.93.123.20	45.121.121.162
168.23.232.49	28.84.144.76	116.11.64.200	69.154.155.111