95.85.97.254 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Turkmenistan

Internet Service Provider: State Company of Electro Communications Turkmentelecom

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Honeypot attack, port: 5555, PTR: PTR record not found	2020-02-28 20:04:05

Comments on same subnet:

IP	Type	Details	Datetime
95.85.97.227	attackspambots	Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:55:16.	2019-12-20 23:11:22
95.85.97.227	attackbotsspam	Unauthorized connection attempt from IP address 95.85.97.227 on Port 445(SMB)	2019-12-14 22:55:08
95.85.97.253	attackspambots	Unauthorised access (Oct 13) SRC=95.85.97.253 LEN=40 TTL=50 ID=34607 TCP DPT=8080 WINDOW=28542 SYN Unauthorised access (Oct 13) SRC=95.85.97.253 LEN=40 TTL=50 ID=24619 TCP DPT=8080 WINDOW=33347 SYN Unauthorised access (Oct 11) SRC=95.85.97.253 LEN=40 TTL=50 ID=29981 TCP DPT=8080 WINDOW=24510 SYN	2019-10-13 23:28:23
95.85.97.253	attack	" "	2019-08-12 03:37:54

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 95.85.97.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3760
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;95.85.97.254.			IN	A

;; AUTHORITY SECTION:
.			537	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022800 1800 900 604800 86400

;; Query time: 100 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 20:03:57 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 254.97.85.95.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 254.97.85.95.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
117.69.159.58	attackbotsspam	Sep 7 20:06:21 srv01 postfix/smtpd\[19167\]: warning: unknown\[117.69.159.58\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 7 20:06:32 srv01 postfix/smtpd\[19167\]: warning: unknown\[117.69.159.58\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 7 20:06:48 srv01 postfix/smtpd\[19167\]: warning: unknown\[117.69.159.58\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 7 20:07:06 srv01 postfix/smtpd\[19167\]: warning: unknown\[117.69.159.58\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 7 20:07:17 srv01 postfix/smtpd\[19167\]: warning: unknown\[117.69.159.58\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-09-08 15:33:28
139.155.21.34	attackspambots	SSH login attempts.	2020-09-08 15:49:56
123.172.249.226	attackspam	Brute forcing email accounts	2020-09-08 15:38:08
91.121.65.15	attackbots	...	2020-09-08 16:00:02
187.10.231.238	attackbotsspam	2020-09-08T05:40:14.809093billing sshd[6568]: Failed password for root from 187.10.231.238 port 52154 ssh2 2020-09-08T05:44:24.710773billing sshd[16001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.10.231.238 user=root 2020-09-08T05:44:26.319921billing sshd[16001]: Failed password for root from 187.10.231.238 port 54886 ssh2 ...	2020-09-08 16:02:36
119.45.151.125	attack	Aug 4 15:52:12 server sshd[5691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.151.125 user=root Aug 4 15:52:14 server sshd[5691]: Failed password for invalid user root from 119.45.151.125 port 39852 ssh2 Aug 4 16:14:41 server sshd[7767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.151.125 user=root Aug 4 16:14:43 server sshd[7767]: Failed password for invalid user root from 119.45.151.125 port 44496 ssh2	2020-09-08 15:58:11
211.22.64.206	attack	TCP (SYN) 211.22.64.206:10442 -> port 23, len 44	2020-09-08 15:57:32
182.150.57.34	attackbotsspam	SSH login attempts.	2020-09-08 15:37:43
123.59.62.57	attackbotsspam	Sep 7 19:51:10 server sshd[17914]: Failed password for root from 123.59.62.57 port 41108 ssh2 Sep 7 19:53:47 server sshd[21224]: Failed password for root from 123.59.62.57 port 56361 ssh2 Sep 7 19:56:34 server sshd[24903]: Failed password for root from 123.59.62.57 port 43380 ssh2	2020-09-08 15:42:52
31.202.195.1	attack	Sep 7 19:26:00 scw-focused-cartwright sshd[30118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.202.195.1 Sep 7 19:26:03 scw-focused-cartwright sshd[30118]: Failed password for invalid user user from 31.202.195.1 port 49052 ssh2	2020-09-08 16:06:23
45.162.4.67	attack	SSH login attempts.	2020-09-08 15:25:53
45.142.120.121	attackbots	2020-09-08 10:37:29 auth_plain authenticator failed for (User) [45.142.120.121]: 535 Incorrect authentication data (set_id=m.fr@com.ua) 2020-09-08 10:38:08 auth_plain authenticator failed for (User) [45.142.120.121]: 535 Incorrect authentication data (set_id=jino@com.ua) ...	2020-09-08 15:41:01
41.221.251.19	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-08 15:26:09
190.218.75.82	attackbots	Bruteforce detected by fail2ban	2020-09-08 15:49:43
5.88.132.235	attackbotsspam	Sep 8 06:37:15 sip sshd[1539303]: Failed password for root from 5.88.132.235 port 22164 ssh2 Sep 8 06:41:20 sip sshd[1539331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.88.132.235 user=root Sep 8 06:41:22 sip sshd[1539331]: Failed password for root from 5.88.132.235 port 19290 ssh2 ...	2020-09-08 15:30:08

Recently Reported IPs

158.222.82.26	151.2.186.79	18.127.251.74	124.107.77.5
121.126.118.30	108.221.124.232	58.194.229.187	2.138.156.200
62.192.178.74	52.58.149.138	225.253.95.9	146.74.71.169
32.199.251.210	93.127.145.71	185.254.174.75	121.128.252.120
38.141.25.217	119.231.52.139	31.150.147.187	176.167.101.121