Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Kazakhstan

Internet Service Provider: KazTransCom JSC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
unauthorized connection attempt
2020-01-12 20:27:45
Comments on same subnet:
IP Type Details Datetime
185.48.149.184 attackbotsspam
Unauthorized connection attempt detected from IP address 185.48.149.184 to port 23 [T]
2020-08-29 22:15:12
185.48.149.81 attackspam
Unauthorized connection attempt detected from IP address 185.48.149.81 to port 445 [T]
2020-06-24 00:37:39
185.48.149.183 attackspam
Honeypot attack, port: 445, PTR: PTR record not found
2019-11-12 21:00:49
185.48.149.114 attackbotsspam
Jul 27 00:27:36 ns41 sshd[22098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.48.149.114
2019-07-27 10:43:07
185.48.149.114 attackspambots
Invalid user nagios from 185.48.149.114 port 48356
2019-07-21 06:06:17
185.48.149.114 attackbotsspam
Jul 20 17:55:00 vibhu-HP-Z238-Microtower-Workstation sshd\[5493\]: Invalid user oracle from 185.48.149.114
Jul 20 17:55:00 vibhu-HP-Z238-Microtower-Workstation sshd\[5493\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.48.149.114
Jul 20 17:55:02 vibhu-HP-Z238-Microtower-Workstation sshd\[5493\]: Failed password for invalid user oracle from 185.48.149.114 port 46855 ssh2
Jul 20 18:00:23 vibhu-HP-Z238-Microtower-Workstation sshd\[5639\]: Invalid user katrin from 185.48.149.114
Jul 20 18:00:23 vibhu-HP-Z238-Microtower-Workstation sshd\[5639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.48.149.114
...
2019-07-20 20:34:12
185.48.149.114 attackbotsspam
Jul  5 05:22:13 lnxmail61 sshd[17044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.48.149.114
2019-07-05 12:07:52
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 185.48.149.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10283
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;185.48.149.80.			IN	A

;; AUTHORITY SECTION:
.			419	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011200 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 12 20:27:41 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 80.149.48.185.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		100.100.2.136
Address:	100.100.2.136#53

** server can't find 80.149.48.185.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
153.36.240.126 attackspam
Jul 15 07:47:19 legacy sshd[24876]: Failed password for root from 153.36.240.126 port 19967 ssh2
Jul 15 07:47:32 legacy sshd[24881]: Failed password for root from 153.36.240.126 port 48717 ssh2
...
2019-07-15 14:03:15
134.209.103.14 attackspambots
Jul 15 08:29:47 pornomens sshd\[4616\]: Invalid user design from 134.209.103.14 port 58300
Jul 15 08:29:47 pornomens sshd\[4616\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.103.14
Jul 15 08:29:49 pornomens sshd\[4616\]: Failed password for invalid user design from 134.209.103.14 port 58300 ssh2
...
2019-07-15 14:44:00
149.56.44.101 attack
SSH bruteforce (Triggered fail2ban)
2019-07-15 14:10:14
85.99.50.194 attackbotsspam
" "
2019-07-15 14:35:50
122.199.225.53 attackbots
Jul 15 06:44:22 debian sshd\[19484\]: Invalid user amandabackup from 122.199.225.53 port 37154
Jul 15 06:44:22 debian sshd\[19484\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.199.225.53
...
2019-07-15 13:50:31
114.233.226.93 attackspam
Caught in portsentry honeypot
2019-07-15 13:51:31
166.111.7.104 attackspam
Jul 15 08:09:00 localhost sshd\[9339\]: Invalid user unix from 166.111.7.104 port 50153
Jul 15 08:09:00 localhost sshd\[9339\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.111.7.104
Jul 15 08:09:02 localhost sshd\[9339\]: Failed password for invalid user unix from 166.111.7.104 port 50153 ssh2
2019-07-15 14:22:50
142.93.208.158 attack
Jul 15 06:58:32 localhost sshd\[61898\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.208.158  user=root
Jul 15 06:58:34 localhost sshd\[61898\]: Failed password for root from 142.93.208.158 port 46674 ssh2
...
2019-07-15 14:08:36
123.206.30.76 attack
Jul 15 07:40:24 OPSO sshd\[12501\]: Invalid user fluffy from 123.206.30.76 port 33138
Jul 15 07:40:24 OPSO sshd\[12501\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.30.76
Jul 15 07:40:25 OPSO sshd\[12501\]: Failed password for invalid user fluffy from 123.206.30.76 port 33138 ssh2
Jul 15 07:46:31 OPSO sshd\[13125\]: Invalid user virl from 123.206.30.76 port 57974
Jul 15 07:46:31 OPSO sshd\[13125\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.30.76
2019-07-15 13:53:52
123.152.151.219 attackbots
Automatic report - Port Scan Attack
2019-07-15 14:28:40
201.80.108.83 attack
Jul 15 08:15:30 vps647732 sshd[7464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.83
Jul 15 08:15:33 vps647732 sshd[7464]: Failed password for invalid user r from 201.80.108.83 port 30798 ssh2
...
2019-07-15 14:33:54
65.19.167.132 attackbotsspam
Unauthorized access detected from banned ip
2019-07-15 14:09:26
171.217.124.138 attackbotsspam
port 23 attempt blocked
2019-07-15 14:39:56
139.219.10.63 attackbotsspam
Jul 15 06:43:48 localhost sshd\[60944\]: Invalid user ubuntu from 139.219.10.63 port 47716
Jul 15 06:43:48 localhost sshd\[60944\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.10.63
...
2019-07-15 13:58:30
60.173.224.52 attackbots
DATE:2019-07-15_08:29:53, IP:60.173.224.52, PORT:1433 MSSQL brute force auth on honeypot server (honey-neo-dc)
2019-07-15 14:42:44

Recently Reported IPs

162.203.98.223 95.165.0.173 71.84.81.8 216.239.190.201
176.92.117.2 168.70.51.13 125.59.198.146 123.12.185.33
96.230.90.129 95.233.92.244 84.241.1.183 41.63.1.38
223.197.165.129 223.17.71.146 200.194.45.73 200.53.20.116
193.252.53.194 187.137.122.237 186.96.127.170 176.105.105.54