City: unknown
Region: unknown
Country: Kazakhstan
Internet Service Provider: Kar-Tel LLC
Hostname: unknown
Organization: unknown
Usage Type: Mobile ISP
| Type | Details | Datetime |
|---|---|---|
| attackspambots | Aug 13 23:03:03 aragorn sshd[21364]: Invalid user ubnt from 85.29.149.50 Aug 13 23:03:05 aragorn sshd[21367]: Invalid user ubnt from 85.29.149.50 Aug 13 23:03:05 aragorn sshd[21369]: Invalid user UBNT from 85.29.149.50 Aug 13 23:03:06 aragorn sshd[21371]: Invalid user UBNT from 85.29.149.50 ... |
2019-08-14 12:08:39 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.29.149.50
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28427
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;85.29.149.50. IN A
;; AUTHORITY SECTION:
. 2338 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019051600 1800 900 604800 86400
;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu May 16 19:58:31 CST 2019
;; MSG SIZE rcvd: 116
50.149.29.85.in-addr.arpa domain name pointer comp148-50.2day.kz.
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
50.149.29.85.in-addr.arpa name = comp148-50.2day.kz.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 88.242.129.224 | attack | Unauthorized connection attempt detected from IP address 88.242.129.224 to port 1022 |
2020-01-08 07:42:40 |
| 218.92.0.175 | attack | Jan 8 00:11:59 plex sshd[12860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.175 user=root Jan 8 00:12:00 plex sshd[12860]: Failed password for root from 218.92.0.175 port 41079 ssh2 |
2020-01-08 07:12:52 |
| 218.92.0.148 | attack | Jan 7 23:07:38 124388 sshd[12690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.148 user=root Jan 7 23:07:40 124388 sshd[12690]: Failed password for root from 218.92.0.148 port 52800 ssh2 Jan 7 23:07:38 124388 sshd[12690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.148 user=root Jan 7 23:07:40 124388 sshd[12690]: Failed password for root from 218.92.0.148 port 52800 ssh2 Jan 7 23:07:43 124388 sshd[12690]: Failed password for root from 218.92.0.148 port 52800 ssh2 |
2020-01-08 07:10:14 |
| 49.88.112.61 | attackspam | Jan 8 00:21:13 MK-Soft-VM4 sshd[23266]: Failed password for root from 49.88.112.61 port 16521 ssh2 Jan 8 00:21:19 MK-Soft-VM4 sshd[23266]: Failed password for root from 49.88.112.61 port 16521 ssh2 ... |
2020-01-08 07:22:50 |
| 46.41.137.21 | attack | Unauthorized connection attempt detected from IP address 46.41.137.21 to port 2220 [J] |
2020-01-08 07:44:57 |
| 5.188.62.25 | attackbotsspam | Malicious brute force vulnerability hacking attacks |
2020-01-08 07:21:50 |
| 180.250.210.133 | attackbotsspam | Jan 8 00:22:37 legacy sshd[6908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.210.133 Jan 8 00:22:39 legacy sshd[6908]: Failed password for invalid user avahi from 180.250.210.133 port 50269 ssh2 Jan 8 00:24:42 legacy sshd[7029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.210.133 ... |
2020-01-08 07:38:51 |
| 153.19.70.28 | attack | Unauthorized connection attempt detected from IP address 153.19.70.28 to port 23 [J] |
2020-01-08 07:31:39 |
| 118.25.94.212 | attack | Unauthorized connection attempt detected from IP address 118.25.94.212 to port 2220 [J] |
2020-01-08 07:45:29 |
| 187.35.172.230 | attack | Jan 7 22:18:35 grey postfix/smtpd\[24234\]: NOQUEUE: reject: RCPT from unknown\[187.35.172.230\]: 554 5.7.1 Service unavailable\; Client host \[187.35.172.230\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[187.35.172.230\]\; from=\ |
2020-01-08 07:08:04 |
| 185.245.96.83 | attackbotsspam | Unauthorized connection attempt detected from IP address 185.245.96.83 to port 2220 [J] |
2020-01-08 07:15:11 |
| 212.237.3.8 | attack | Unauthorized connection attempt detected from IP address 212.237.3.8 to port 2220 [J] |
2020-01-08 07:13:08 |
| 185.176.27.166 | attackspam | 01/08/2020-00:10:47.292879 185.176.27.166 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2020-01-08 07:36:26 |
| 125.227.255.79 | attackbotsspam | Unauthorized connection attempt detected from IP address 125.227.255.79 to port 2220 [J] |
2020-01-08 07:39:06 |
| 31.42.254.24 | attackbots | Jan 7 22:17:48 icecube postfix/smtpd[21873]: NOQUEUE: reject: RCPT from unknown[31.42.254.24]: 554 5.7.1 Service unavailable; Client host [31.42.254.24] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/31.42.254.24; from= |
2020-01-08 07:43:50 |