2.135.197.30 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Kazakhstan

Internet Service Provider: JSC Kazakhtelecom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Brute forcing RDP port 3389	2020-07-30 18:31:00

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 2.135.197.30
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35407
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;2.135.197.30.			IN	A

;; AUTHORITY SECTION:
.			499	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020073000 1800 900 604800 86400

;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jul 30 18:30:52 CST 2020
;; MSG SIZE  rcvd: 116

Host info

30.197.135.2.in-addr.arpa domain name pointer 2.135.197.30.megaline.telecom.kz.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
30.197.135.2.in-addr.arpa	name = 2.135.197.30.megaline.telecom.kz.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
188.239.16.144	attackspambots	This is the word of honor hacker.	2019-10-14 21:28:59
82.196.14.222	attackspam	$f2bV_matches	2019-10-14 21:49:22
35.201.243.170	attackbotsspam	Oct 14 01:57:19 tdfoods sshd\[3720\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.243.201.35.bc.googleusercontent.com user=root Oct 14 01:57:21 tdfoods sshd\[3720\]: Failed password for root from 35.201.243.170 port 27104 ssh2 Oct 14 02:01:12 tdfoods sshd\[4024\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.243.201.35.bc.googleusercontent.com user=root Oct 14 02:01:13 tdfoods sshd\[4024\]: Failed password for root from 35.201.243.170 port 57448 ssh2 Oct 14 02:05:00 tdfoods sshd\[4322\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.243.201.35.bc.googleusercontent.com user=root	2019-10-14 21:30:15
176.31.253.55	attackbotsspam	Oct 14 13:45:27 SilenceServices sshd[31143]: Failed password for root from 176.31.253.55 port 54256 ssh2 Oct 14 13:49:22 SilenceServices sshd[32193]: Failed password for root from 176.31.253.55 port 37656 ssh2	2019-10-14 21:44:15
98.156.148.239	attackspambots	Oct 14 13:52:20 host sshd\[33897\]: Invalid user Santos_123 from 98.156.148.239 port 33122 Oct 14 13:52:20 host sshd\[33897\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.156.148.239 ...	2019-10-14 21:59:43
190.146.32.200	attackspam	Oct 14 01:44:01 sachi sshd\[2002\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.146.32.200 user=root Oct 14 01:44:02 sachi sshd\[2002\]: Failed password for root from 190.146.32.200 port 54044 ssh2 Oct 14 01:48:38 sachi sshd\[2394\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.146.32.200 user=root Oct 14 01:48:40 sachi sshd\[2394\]: Failed password for root from 190.146.32.200 port 36688 ssh2 Oct 14 01:53:17 sachi sshd\[2746\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.146.32.200 user=root	2019-10-14 21:32:18
45.142.195.5	attack	Oct 14 15:52:45 andromeda postfix/smtpd\[50382\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: authentication failure Oct 14 15:52:52 andromeda postfix/smtpd\[48504\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: authentication failure Oct 14 15:52:57 andromeda postfix/smtpd\[50382\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: authentication failure Oct 14 15:53:34 andromeda postfix/smtpd\[47090\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: authentication failure Oct 14 15:53:41 andromeda postfix/smtpd\[47090\]: warning: unknown\[45.142.195.5\]: SASL LOGIN authentication failed: authentication failure	2019-10-14 21:54:39
201.149.22.37	attackbotsspam	2019-10-14T13:31:31.519580abusebot.cloudsearch.cf sshd\[17057\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.149.22.37 user=root	2019-10-14 21:38:09
185.228.135.10	attackbots	Oct 14 13:52:42 v22018076622670303 sshd\[12894\]: Invalid user admin from 185.228.135.10 port 35275 Oct 14 13:52:42 v22018076622670303 sshd\[12894\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.228.135.10 Oct 14 13:52:44 v22018076622670303 sshd\[12894\]: Failed password for invalid user admin from 185.228.135.10 port 35275 ssh2 ...	2019-10-14 21:42:10
185.90.118.27	attack	10/14/2019-09:12:27.930667 185.90.118.27 Protocol: 6 ET SCAN Potential SSH Scan	2019-10-14 21:28:34
222.186.175.216	attackbots	Brute force attempt	2019-10-14 21:35:06
217.112.128.168	attackspambots	Postfix DNSBL listed. Trying to send SPAM.	2019-10-14 21:36:07
74.208.224.227	attack	Automatic report - Port Scan Attack	2019-10-14 21:50:27
112.27.129.154	attackbotsspam	Oct 14 REMOVED dovecot: imap-login: Disconnected $auth failed, 1 attempts in 5 secs$: user=\, method=PLAIN, rip=112.27.129.154, lip=REMOVED, TLS: Disconnected, session=\<3zj6St6UOIBwG4Ga\> Oct 14 REMOVED dovecot: imap-login: Disconnected $auth failed, 1 attempts in 4 secs$: user=\, method=PLAIN, rip=112.27.129.154, lip=REMOVED, TLS, session=\ Oct 14 REMOVED dovecot: imap-login: Disconnected $auth failed, 1 attempts in 5 secs$: user=\, method=PLAIN, rip=112.27.129.154, lip=REMOVED, TLS: Disconnected, session=\	2019-10-14 21:48:00
45.45.45.45	attack	14.10.2019 11:52:18 Recursive DNS scan	2019-10-14 22:00:58

Recently Reported IPs

2001:1b50::82:195:225:157	40.117.209.114	18.228.4.248	14.166.112.99
106.104.151.170	223.150.10.59	105.96.11.65	116.58.233.235
201.55.142.73	171.235.197.16	123.201.72.89	103.127.93.187
116.58.233.214	180.254.8.146	62.149.145.88	177.207.117.194
45.131.108.84	197.47.26.42	112.78.10.143	54.67.21.244