City: Sofia
Region: Sofia Region
Country: Bulgaria
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '95.111.117.0 - 95.111.117.255'
% Abuse contact for '95.111.117.0 - 95.111.117.255' is 'RIPE.Abuse@a1.bg'
inetnum: 95.111.117.0 - 95.111.117.255
netname: A1-0603-1
country: BG
admin-c: SSS126-RIPE
tech-c: SSS126-RIPE
status: ASSIGNED PA
mnt-by: AS13124-MNT
mnt-by: SPNET-MNT
mnt-by: MNT-MEGALAN
created: 2020-03-06T13:56:02Z
last-modified: 2020-03-06T13:56:02Z
source: RIPE
person: Stoyan Stoyanov
org: ORG-IL1-RIPE
address: Bulgaria, Sofia, 1 Kukush street, area Ilinden, building M7 # 1 Kukush street, M7
mnt-by: AS13124-MNT
phone: +359 88220
nic-hdl: SSS126-RIPE
created: 2008-10-29T08:24:20Z
last-modified: 2022-01-11T06:27:12Z
source: RIPE # Filtered
% Information related to '95.111.117.0/24AS29580'
route: 95.111.117.0/24
origin: AS29580
descr: A1BG_RSBG_SFN
mnt-by: SPNET-MNT
mnt-by: HOMELAN-MNT
created: 2020-03-06T13:58:04Z
last-modified: 2026-01-08T12:58:20Z
source: RIPE
% This query was served by the RIPE Database Query Service version 1.123 (SHETLAND); <<>> DiG 9.10.3-P4-Ubuntu <<>> 95.111.117.44
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62853
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;95.111.117.44. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026071200 1800 900 604800 86400
;; Query time: 28 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jul 12 19:00:34 CST 2026
;; MSG SIZE rcvd: 10644.117.111.95.in-addr.arpa domain name pointer ip-95-111-117-44.home.megalan.bg.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
44.117.111.95.in-addr.arpa name = ip-95-111-117-44.home.megalan.bg.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 59.125.71.194 | attackspam | Honeypot attack, port: 81, PTR: 59-125-71-194.HINET-IP.hinet.net. |
2020-07-04 10:44:20 |
| 190.5.242.114 | attack | Jul 4 04:09:34 serwer sshd\[28863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.5.242.114 user=root Jul 4 04:09:35 serwer sshd\[28863\]: Failed password for root from 190.5.242.114 port 49537 ssh2 Jul 4 04:15:34 serwer sshd\[29497\]: Invalid user kelvin from 190.5.242.114 port 60642 Jul 4 04:15:34 serwer sshd\[29497\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.5.242.114 ... |
2020-07-04 11:01:32 |
| 158.140.171.122 | attackspam | Unauthorized connection attempt from IP address 158.140.171.122 on Port 445(SMB) |
2020-07-04 10:34:36 |
| 117.131.60.58 | attack | Jul 4 01:45:54 ip-172-31-62-245 sshd\[31804\]: Invalid user rizal from 117.131.60.58\ Jul 4 01:45:56 ip-172-31-62-245 sshd\[31804\]: Failed password for invalid user rizal from 117.131.60.58 port 19736 ssh2\ Jul 4 01:49:18 ip-172-31-62-245 sshd\[31842\]: Invalid user paul from 117.131.60.58\ Jul 4 01:49:20 ip-172-31-62-245 sshd\[31842\]: Failed password for invalid user paul from 117.131.60.58 port 27717 ssh2\ Jul 4 01:52:50 ip-172-31-62-245 sshd\[31899\]: Invalid user vnc from 117.131.60.58\ |
2020-07-04 10:37:09 |
| 71.6.231.8 | attackspam | Honeypot attack, port: 81, PTR: PTR record not found |
2020-07-04 10:41:26 |
| 14.235.251.128 | attackbots | Honeypot attack, port: 445, PTR: static.vnpt.vn. |
2020-07-04 11:04:28 |
| 213.157.41.62 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-07-04 10:57:02 |
| 118.24.153.230 | attack | Jul 4 00:19:15 jumpserver sshd[320410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.153.230 Jul 4 00:19:15 jumpserver sshd[320410]: Invalid user tomcat from 118.24.153.230 port 54146 Jul 4 00:19:17 jumpserver sshd[320410]: Failed password for invalid user tomcat from 118.24.153.230 port 54146 ssh2 ... |
2020-07-04 10:49:30 |
| 164.52.24.180 | attack | Honeypot hit. |
2020-07-04 10:59:40 |
| 136.232.185.198 | attackspambots | Unauthorized connection attempt from IP address 136.232.185.198 on Port 445(SMB) |
2020-07-04 10:31:37 |
| 60.246.3.97 | attackbots | (imapd) Failed IMAP login from 60.246.3.97 (MO/Macao/nz3l97.bb60246.ctm.net): 1 in the last 3600 secs |
2020-07-04 10:47:41 |
| 51.79.86.177 | attackbotsspam | Attempt to hack Wordpress Login, XMLRPC or other login |
2020-07-04 10:28:30 |
| 141.98.9.137 | attackspam | Jul 3 23:34:21 dns1 sshd[32010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.137 Jul 3 23:34:23 dns1 sshd[32010]: Failed password for invalid user operator from 141.98.9.137 port 36920 ssh2 Jul 3 23:35:04 dns1 sshd[32095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.137 |
2020-07-04 10:42:44 |
| 125.124.32.85 | attackspam | $f2bV_matches |
2020-07-04 11:07:18 |
| 89.250.148.154 | attackbots | Jul 4 04:26:28 hosting sshd[22040]: Invalid user hduser from 89.250.148.154 port 50486 ... |
2020-07-04 10:28:17 |