185.48.149.80 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Kazakhstan

Internet Service Provider: KazTransCom JSC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	unauthorized connection attempt	2020-01-12 20:27:45

Comments on same subnet:

IP	Type	Details	Datetime
185.48.149.184	attackbotsspam	Unauthorized connection attempt detected from IP address 185.48.149.184 to port 23 [T]	2020-08-29 22:15:12
185.48.149.81	attackspam	Unauthorized connection attempt detected from IP address 185.48.149.81 to port 445 [T]	2020-06-24 00:37:39
185.48.149.183	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2019-11-12 21:00:49
185.48.149.114	attackbotsspam	Jul 27 00:27:36 ns41 sshd[22098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.48.149.114	2019-07-27 10:43:07
185.48.149.114	attackspambots	Invalid user nagios from 185.48.149.114 port 48356	2019-07-21 06:06:17
185.48.149.114	attackbotsspam	Jul 20 17:55:00 vibhu-HP-Z238-Microtower-Workstation sshd\[5493\]: Invalid user oracle from 185.48.149.114 Jul 20 17:55:00 vibhu-HP-Z238-Microtower-Workstation sshd\[5493\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.48.149.114 Jul 20 17:55:02 vibhu-HP-Z238-Microtower-Workstation sshd\[5493\]: Failed password for invalid user oracle from 185.48.149.114 port 46855 ssh2 Jul 20 18:00:23 vibhu-HP-Z238-Microtower-Workstation sshd\[5639\]: Invalid user katrin from 185.48.149.114 Jul 20 18:00:23 vibhu-HP-Z238-Microtower-Workstation sshd\[5639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.48.149.114 ...	2019-07-20 20:34:12
185.48.149.114	attackbotsspam	Jul 5 05:22:13 lnxmail61 sshd[17044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.48.149.114	2019-07-05 12:07:52

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 185.48.149.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10283
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;185.48.149.80.			IN	A

;; AUTHORITY SECTION:
.			419	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011200 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 12 20:27:41 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 80.149.48.185.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		100.100.2.136
Address:	100.100.2.136#53

** server can't find 80.149.48.185.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
78.187.46.108	attackbots	Unauthorized connection attempt from IP address 78.187.46.108 on Port 445(SMB)	2020-04-22 23:14:40
45.195.151.226	attack	Lines containing failures of 45.195.151.226 Apr 22 13:45:29 kmh-vmh-001-fsn03 sshd[4720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.195.151.226 user=r.r Apr 22 13:45:31 kmh-vmh-001-fsn03 sshd[4720]: Failed password for r.r from 45.195.151.226 port 34084 ssh2 Apr 22 13:45:33 kmh-vmh-001-fsn03 sshd[4720]: Received disconnect from 45.195.151.226 port 34084:11: Bye Bye [preauth] Apr 22 13:45:33 kmh-vmh-001-fsn03 sshd[4720]: Disconnected from authenticating user r.r 45.195.151.226 port 34084 [preauth] Apr 22 13:51:55 kmh-vmh-001-fsn03 sshd[17665]: Invalid user ubuntu from 45.195.151.226 port 44346 Apr 22 13:51:55 kmh-vmh-001-fsn03 sshd[17665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.195.151.226 Apr 22 13:51:57 kmh-vmh-001-fsn03 sshd[17665]: Failed password for invalid user ubuntu from 45.195.151.226 port 44346 ssh2 Apr 22 13:51:58 kmh-vmh-001-fsn03 sshd[17665]: Received disco........ ------------------------------	2020-04-22 22:51:58
46.98.123.191	attackspam	Unauthorized connection attempt from IP address 46.98.123.191 on Port 445(SMB)	2020-04-22 23:13:35
188.162.201.182	attack	Honeypot attack, port: 445, PTR: client.yota.ru.	2020-04-22 23:26:17
198.108.66.236	attackbots	Apr 22 14:02:40 debian-2gb-nbg1-2 kernel: \[9815914.330709\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=198.108.66.236 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=32 ID=16685 PROTO=TCP SPT=63956 DPT=7778 WINDOW=1024 RES=0x00 SYN URGP=0	2020-04-22 23:00:46
103.91.219.80	attackbots	Apr 22 15:01:21 eventyay sshd[8808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.91.219.80 Apr 22 15:01:23 eventyay sshd[8808]: Failed password for invalid user ubuntu1 from 103.91.219.80 port 34908 ssh2 Apr 22 15:06:56 eventyay sshd[8864]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.91.219.80 ...	2020-04-22 22:46:37
197.45.163.117	attackspam	(imapd) Failed IMAP login from 197.45.163.117 (EG/Egypt/host-197.45.163.117.tedata.net): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 22 16:32:25 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 4 secs): user=, method=PLAIN, rip=197.45.163.117, lip=5.63.12.44, TLS: Connection closed, session=	2020-04-22 23:17:06
85.105.77.99	attackbots	Unauthorized connection attempt from IP address 85.105.77.99 on Port 445(SMB)	2020-04-22 23:15:25
210.9.47.154	attackbots	Apr 22 16:19:07 roki-contabo sshd\[21366\]: Invalid user test from 210.9.47.154 Apr 22 16:19:07 roki-contabo sshd\[21366\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.9.47.154 Apr 22 16:19:09 roki-contabo sshd\[21366\]: Failed password for invalid user test from 210.9.47.154 port 38196 ssh2 Apr 22 16:35:39 roki-contabo sshd\[21853\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.9.47.154 user=root Apr 22 16:35:41 roki-contabo sshd\[21853\]: Failed password for root from 210.9.47.154 port 44680 ssh2 ...	2020-04-22 22:49:21
181.55.127.245	attackbots	Apr 22 13:58:25 nextcloud sshd\[15285\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.55.127.245 user=root Apr 22 13:58:27 nextcloud sshd\[15285\]: Failed password for root from 181.55.127.245 port 42625 ssh2 Apr 22 14:02:28 nextcloud sshd\[21068\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.55.127.245 user=root	2020-04-22 23:16:00
91.203.65.227	attack	Unauthorized connection attempt from IP address 91.203.65.227 on Port 445(SMB)	2020-04-22 23:21:47
181.30.8.146	attack	Total attacks: 6	2020-04-22 22:44:24
158.69.80.71	attackbotsspam	Apr 22 21:39:50 webhost01 sshd[2181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.80.71 Apr 22 21:39:51 webhost01 sshd[2181]: Failed password for invalid user ow from 158.69.80.71 port 55650 ssh2 ...	2020-04-22 23:10:03
185.153.199.52	attackspam	Apr 22 14:02:29 debian-2gb-nbg1-2 kernel: \[9815902.710218\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.153.199.52 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=2154 PROTO=TCP SPT=48031 DPT=13389 WINDOW=1024 RES=0x00 SYN URGP=0	2020-04-22 23:13:54
117.194.166.198	attackspambots	Apr 22 14:56:04 master sshd[26141]: Failed password for invalid user admin from 117.194.166.198 port 56444 ssh2	2020-04-22 22:59:51

Recently Reported IPs

162.203.98.223	95.165.0.173	71.84.81.8	216.239.190.201
176.92.117.2	168.70.51.13	125.59.198.146	123.12.185.33
96.230.90.129	95.233.92.244	84.241.1.183	41.63.1.38
223.197.165.129	223.17.71.146	200.194.45.73	200.53.20.116
193.252.53.194	187.137.122.237	186.96.127.170	176.105.105.54