118.140.149.74

Basic Info

City: unknown

Region: unknown

Country: Hong Kong

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
118.140.149.10	attackbotsspam	[Wed Sep 25 09:53:53.762310 2019] [:error] [pid 28619] [client 118.140.149.10:48950] [client 118.140.149.10] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 21)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "127.0.0.1"] [uri "/cgi-bin/ViewLog.asp"] [unique_id "XYtjYcIPKh5wbvUtUbd9UQAAAAU"] ...	2019-09-25 21:54:54
118.140.149.10	attackspam	port scan and connect, tcp 23 (telnet)	2019-09-24 08:46:40
118.140.149.10	attack	Honeypot attack, port: 23, PTR: PTR record not found	2019-09-07 14:38:27

Type

Details

Datetime

118.140.149.10

attackbotsspam

[Wed Sep 25 09:53:53.762310 2019] [:error] [pid 28619] [client 118.140.149.10:48950] [client 118.140.149.10] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 21)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "127.0.0.1"] [uri "/cgi-bin/ViewLog.asp"] [unique_id "XYtjYcIPKh5wbvUtUbd9UQAAAAU"]
...

2019-09-25 21:54:54

118.140.149.10

attackspam

port scan and connect, tcp 23 (telnet)

2019-09-24 08:46:40

118.140.149.10

attack

Honeypot attack, port: 23, PTR: PTR record not found

2019-09-07 14:38:27

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 118.140.149.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11900
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;118.140.149.74.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 69 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 07:00:36 CST 2022
;; MSG SIZE  rcvd: 107

Host info

74.149.140.118.in-addr.arpa domain name pointer static-bbs-74-149-140-118-on-nets.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
74.149.140.118.in-addr.arpa	name = static-bbs-74-149-140-118-on-nets.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
103.207.7.114	attack	failed_logins	2020-09-03 19:22:27
106.13.50.219	attackspam	(sshd) Failed SSH login from 106.13.50.219 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 3 01:43:25 server sshd[13990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.50.219 user=root Sep 3 01:43:27 server sshd[13990]: Failed password for root from 106.13.50.219 port 49370 ssh2 Sep 3 02:00:52 server sshd[18563]: Invalid user guest from 106.13.50.219 port 50700 Sep 3 02:00:54 server sshd[18563]: Failed password for invalid user guest from 106.13.50.219 port 50700 ssh2 Sep 3 02:03:49 server sshd[19321]: Invalid user postgres from 106.13.50.219 port 56616	2020-09-03 19:25:41
80.82.77.212	attack	UDP ports : 17 / 1433 / 1604 / 1701 / 1723 / 1900 / 3283 / 3702 / 5353 / 8888 / 17185 / 32769 / 49152 / 49154	2020-09-03 19:26:12
165.22.42.154	attack	TCP (SYN) 165.22.42.154:51672 -> port 443, len 44	2020-09-03 19:46:09
129.205.118.115	attackbots	20/9/3@07:23:48: FAIL: Alarm-Intrusion address from=129.205.118.115 ...	2020-09-03 19:58:34
132.145.242.238	attackbotsspam	Sep 2 22:17:19 php1 sshd\[4618\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238 user=root Sep 2 22:17:22 php1 sshd\[4618\]: Failed password for root from 132.145.242.238 port 33583 ssh2 Sep 2 22:21:02 php1 sshd\[4877\]: Invalid user min from 132.145.242.238 Sep 2 22:21:02 php1 sshd\[4877\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.242.238 Sep 2 22:21:04 php1 sshd\[4877\]: Failed password for invalid user min from 132.145.242.238 port 36132 ssh2	2020-09-03 19:41:05
185.153.199.146	attack	Port-scan: detected 442 distinct ports within a 24-hour window.	2020-09-03 20:02:13
101.89.219.59	attack	Unauthorized connection attempt detected from IP address 101.89.219.59 to port 233 [T]	2020-09-03 19:20:52
190.121.231.130	attack	TCP (SYN) 190.121.231.130:64311 -> port 445, len 52	2020-09-03 19:44:10
5.14.243.84	attack	firewall-block, port(s): 80/tcp	2020-09-03 19:48:19
89.248.172.85	attackbotsspam	firewall-block, port(s): 43041/tcp, 43200/tcp	2020-09-03 19:25:21
178.19.250.44	attackspam	TCP (SYN) 178.19.250.44:779 -> port 23, len 44	2020-09-03 19:50:53
125.211.119.98	attackbots	TCP (SYN) 125.211.119.98:59792 -> port 1433, len 52	2020-09-03 20:04:26
1.64.173.182	attackbots	20 attempts against mh-ssh on cloud	2020-09-03 19:21:22
118.27.19.93	attackspam	Sep 3 18:18:04 webhost01 sshd[9540]: Failed password for root from 118.27.19.93 port 34504 ssh2 ...	2020-09-03 19:27:29

Recently Reported IPs

122.117.142.45	115.55.54.19	192.177.188.231	93.87.60.184
193.233.228.34	172.70.110.41	27.43.178.182	52.70.20.110
195.133.143.77	200.71.72.173	47.21.19.222	1.215.116.138
164.90.220.226	171.217.49.136	89.94.72.152	194.59.164.12
45.170.140.1	5.54.83.136	115.49.245.160	223.167.75.133