92.245.106.242

Basic Info

City: unknown

Region: unknown

Country: Kyrgyzstan

Internet Service Provider: Mega-Line Ltd.

Hostname: unknown

Organization: Mega-Line Ltd.

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	email spam	2019-10-04 20:26:02
attackbotsspam	2019-08-23 H=\(92-245-106-242.mega.kg\) \[92.245.106.242\] F=\ rejected RCPT \: Mail not accepted. 92.245.106.242 is listed at a DNSBL. 2019-08-23 H=\(92-245-106-242.mega.kg\) \[92.245.106.242\] F=\ rejected RCPT \: Mail not accepted. 92.245.106.242 is listed at a DNSBL. 2019-08-23 H=\(92-245-106-242.mega.kg\) \[92.245.106.242\] F=\ rejected RCPT \<REMOVED@REMOVED.de\>: Mail not accepted. 92.245.106.242 is listed at a DNSBL.	2019-08-24 02:50:34
attackbotsspam	2019-07-28 06:31:18 H=(92-245-106-242.mega.kg) [92.245.106.242]:36115 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-07-28 06:31:19 H=(92-245-106-242.mega.kg) [92.245.106.242]:36115 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/92.245.106.242) 2019-07-28 06:31:19 H=(92-245-106-242.mega.kg) [92.245.106.242]:36115 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/92.245.106.242) ...	2019-07-28 19:43:41
attackspam	proto=tcp . spt=54956 . dpt=25 . (listed on Blocklist de Jun 22) (26)	2019-06-23 13:47:22

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 92.245.106.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28695
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;92.245.106.242.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019042100 1800 900 604800 86400

;; Query time: 7 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sun Apr 21 19:30:26 +08 2019
;; MSG SIZE  rcvd: 118

Host info

242.106.245.92.in-addr.arpa domain name pointer 92-245-106-242.mega.kg.

Nslookup info:

Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
242.106.245.92.in-addr.arpa	name = 92-245-106-242.mega.kg.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
162.62.26.128	attack	[portscan] tcp/43 [WHOIS] *(RWIN=65535)(08041230)	2019-08-05 00:10:20
178.134.170.130	attackbotsspam	[SMB remote code execution attempt: port tcp/445] *(RWIN=8192)(08041230)	2019-08-05 00:09:45
119.167.11.55	attack	[portscan] tcp/23 [TELNET] *(RWIN=5015)(08041230)	2019-08-04 23:34:15
178.150.38.63	attack	[portscan] tcp/23 [TELNET] *(RWIN=38346)(08041230)	2019-08-05 00:09:06
116.212.155.123	spambotsattackproxynormal	2048	2019-08-05 00:18:22
103.207.38.8	attackspambots	[SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(08041230)	2019-08-04 23:39:40
191.83.111.56	attack	[portscan] tcp/23 [TELNET] *(RWIN=64110)(08041230)	2019-08-04 23:21:47
211.43.207.58	attackbots	[SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(08041230)	2019-08-04 23:19:27
123.192.25.172	attackspambots	[portscan] tcp/23 [TELNET] *(RWIN=1533)(08041230)	2019-08-05 00:14:18
77.247.109.232	attackspam	Aug 4 13:10:10 lumpi kernel: INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=77.247.109.232 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=65315 PROTO=TCP SPT=57887 DPT=666 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2019-08-04 23:45:03
23.238.175.148	attackbotsspam	[SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(08041230)	2019-08-04 23:56:12
122.166.237.80	attackbots	[portscan] tcp/23 [TELNET] *(RWIN=65315)(08041230)	2019-08-04 23:31:49
202.10.79.181	attack	[SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(08041230)	2019-08-04 23:19:46
196.218.133.171	attackspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-04 10:44:07,104 INFO [amun_request_handler] PortScan Detected on Port: 445 (196.218.133.171)	2019-08-04 23:21:16
147.78.66.7	attack	[SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(08041230)	2019-08-05 00:12:43

Recently Reported IPs

69.60.21.172	223.64.239.149	182.75.220.118	54.213.206.70
207.250.16.117	60.168.2.95	89.165.162.171	132.239.106.94
119.152.17.218	230.41.42.98	113.163.214.23	196.233.77.224
98.185.114.205	8.243.244.210	92.45.57.193	51.213.239.241
146.16.41.165	213.48.5.218	18.108.194.247	98.51.0.103