91.92.149.12 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Iran (Islamic Republic of)

Internet Service Provider: Telecommunication Company of Tehran

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	2020-03-02 03:56:40

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 91.92.149.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7048
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;91.92.149.12.			IN	A

;; AUTHORITY SECTION:
.			536	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020030101 1800 900 604800 86400

;; Query time: 110 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 02 03:56:37 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 12.149.92.91.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 12.149.92.91.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
37.49.231.130	attackspambots	Scanning (more than 2 packets) random ports - tries to find possible vulnerable services	2019-07-17 03:33:26
49.69.47.22	attackbotsspam	abuse-sasl	2019-07-17 03:18:03
23.97.174.247	attack	Many RDP login attempts detected by IDS script	2019-07-17 03:39:04
49.69.42.93	attackbots	abuse-sasl	2019-07-17 03:20:19
178.32.70.1	attackspam	2019-07-16T13:43:44.475566abusebot-6.cloudsearch.cf sshd\[2977\]: Invalid user dspace from 178.32.70.1 port 21329	2019-07-17 03:46:37
89.248.162.168	attackspam	Port scan on 3 port(s): 3129 3287 3493	2019-07-17 03:46:54
94.23.218.74	attack	Jul 16 12:58:39 Ubuntu-1404-trusty-64-minimal sshd\[32058\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.23.218.74 user=root Jul 16 12:58:41 Ubuntu-1404-trusty-64-minimal sshd\[32058\]: Failed password for root from 94.23.218.74 port 34006 ssh2 Jul 16 13:04:04 Ubuntu-1404-trusty-64-minimal sshd\[4131\]: Invalid user trial from 94.23.218.74 Jul 16 13:04:04 Ubuntu-1404-trusty-64-minimal sshd\[4131\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.23.218.74 Jul 16 13:04:06 Ubuntu-1404-trusty-64-minimal sshd\[4131\]: Failed password for invalid user trial from 94.23.218.74 port 45526 ssh2	2019-07-17 03:42:17
49.76.13.49	attackbots	abuse-sasl	2019-07-17 03:08:18
129.204.46.170	attackbots	Reported by AbuseIPDB proxy server.	2019-07-17 03:43:33
68.57.86.37	attackspam	Jul 16 15:24:23 meumeu sshd[26344]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.57.86.37 Jul 16 15:24:25 meumeu sshd[26344]: Failed password for invalid user max from 68.57.86.37 port 58542 ssh2 Jul 16 15:34:15 meumeu sshd[28178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.57.86.37 ...	2019-07-17 03:21:34
85.2.113.122	attackspam	Jul1612:22:17server4dovecot:imap-login:Disconnected:Inactivity\(authfailed\,1attemptsin180secs\):user=\\,method=PLAIN\,rip=85.2.113.122\,lip=148.251.104.70\,TLS\,session=\Jul1612:22:20server4dovecot:imap-login:Disconnected:Inactivity\(authfailed\,1attemptsin179secs\):user=\\,method=PLAIN\,rip=85.2.113.122\,lip=148.251.104.70\,TLS\,session=\Jul1612:53:18server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin7secs\):user=\\,method=PLAIN\,rip=194.230.148.129\,lip=148.251.104.70\,TLS:Connectionclosed\,session=\Jul1612:53:18server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin11secs\):user=\\,method=PLAIN\,rip=194.230.148.129\,lip=148.251.104.70\,TLS:Connectionclosed\,session=\Jul1612:53:25server4dovecot:imap-login:Disconnected\(authfailed\,1attemptsin6secs\):user=\\,method=PLAIN\,rip=194.230.148.129\,lip=148	2019-07-17 03:32:42
49.69.110.9	attack	abuse-sasl	2019-07-17 03:35:50
82.209.198.252	attack	DATE:2019-07-16 13:01:59, IP:82.209.198.252, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc-bis)	2019-07-17 03:02:09
185.175.93.105	attackbotsspam	Scanning (more than 2 packets) random ports - tries to find possible vulnerable services	2019-07-17 03:11:43
46.21.147.248	attack	abuse-sasl	2019-07-17 03:49:28

Recently Reported IPs

133.235.212.208	129.117.12.174	220.251.129.107	64.203.74.86
62.179.24.242	13.143.230.117	215.178.45.165	68.68.44.232
208.228.87.199	168.121.100.208	169.126.104.181	27.247.118.209
210.210.135.51	150.59.220.57	131.196.205.152	75.52.214.234
194.214.39.8	175.9.121.136	184.71.105.42	84.126.200.193