123.149.137.166

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
123.149.137.105	attackspambots	Sep 1 13:29:22 shivevps sshd[28985]: Did not receive identification string from 123.149.137.105 port 35294 ...	2020-09-02 02:39:20
123.149.137.150	attackbotsspam	Sep 1 13:30:30 shivevps sshd[29993]: Did not receive identification string from 123.149.137.150 port 58782 ...	2020-09-02 01:23:35
123.149.137.120	attackbots	Aug 26 04:40:51 shivevps sshd[24711]: Bad protocol version identification '\024' from 123.149.137.120 port 48668 Aug 26 04:41:00 shivevps sshd[24825]: Bad protocol version identification '\024' from 123.149.137.120 port 48734 Aug 26 04:41:06 shivevps sshd[25092]: Bad protocol version identification '\024' from 123.149.137.120 port 48814 Aug 26 04:41:16 shivevps sshd[25457]: Bad protocol version identification '\024' from 123.149.137.120 port 49028 ...	2020-08-26 15:16:12
123.149.137.88	attack	[Mon Feb 10 14:38:25.501730 2020] [evasive20:error] [pid 11907] [client 123.149.137.88:56224] client denied by server configuration: /var/www/html/webadmin [Mon Feb 10 14:38:26.887926 2020] [evasive20:error] [pid 13619] [client 123.149.137.88:56220] client denied by server configuration: /var/www/html/webadmin [Mon Feb 10 14:38:27.705328 2020] [evasive20:error] [pid 13660] [client 123.149.137.88:56208] client denied by server configuration: /var/www/html/webadmin [Mon Feb 10 14:38:27.955381 2020] [evasive20:error] [pid 13660] [client 123.149.137.88:56208] client denied by server configuration: /var/www/html/webadmin [Mon Feb 10 14:38:28.723840 2020] [evasive20:error] [pid 13660] [client 123.149.137.88:56208] client denied by server configuration: /var/www/html/webadmin ...	2020-02-11 02:50:07

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 123.149.137.166
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21113
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;123.149.137.166.		IN	A

;; AUTHORITY SECTION:
.			412	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030901 1800 900 604800 86400

;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 10 05:58:01 CST 2022
;; MSG SIZE  rcvd: 108

Host info

Host 166.137.149.123.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 166.137.149.123.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
37.49.230.229	attack	Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-08-06 20:20:24
85.209.0.252	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 83 - port: 22 proto: tcp cat: Misc Attackbytes: 74	2020-08-06 20:40:31
142.93.46.172	attack	142.93.46.172 - - [06/Aug/2020:12:54:33 +0100] "POST /wp-login.php HTTP/1.1" 200 1791 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.46.172 - - [06/Aug/2020:12:54:35 +0100] "POST /wp-login.php HTTP/1.1" 200 1772 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.46.172 - - [06/Aug/2020:12:54:39 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-06 20:09:24
177.47.8.250	attack	From: Grupo Recovery (Notícia boa pra você)	2020-08-06 20:16:02
218.92.0.206	attackspambots	Aug 6 12:22:39 santamaria sshd\[29968\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.206 user=root Aug 6 12:22:42 santamaria sshd\[29968\]: Failed password for root from 218.92.0.206 port 21069 ssh2 Aug 6 12:23:45 santamaria sshd\[29996\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.206 user=root ...	2020-08-06 20:34:12
37.187.113.144	attack	Aug 6 13:59:43 piServer sshd[11021]: Failed password for root from 37.187.113.144 port 53220 ssh2 Aug 6 14:04:26 piServer sshd[11583]: Failed password for root from 37.187.113.144 port 44536 ssh2 ...	2020-08-06 20:23:13
5.62.62.55	attackspam	0,69-11/03 [bc01/m11] PostRequest-Spammer scoring: helsinki	2020-08-06 20:04:33
5.57.35.137	attackbots	1596691059 - 08/06/2020 07:17:39 Host: 5.57.35.137/5.57.35.137 Port: 445 TCP Blocked	2020-08-06 20:30:38
111.230.203.22	attack	111.230.203.22 - - \[06/Aug/2020:07:18:02 +0200\] "POST /wp-login.php HTTP/1.0" 200 6827 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 111.230.203.22 - - \[06/Aug/2020:07:18:06 +0200\] "POST /wp-login.php HTTP/1.0" 200 6642 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 111.230.203.22 - - \[06/Aug/2020:07:18:10 +0200\] "POST /wp-login.php HTTP/1.0" 200 6639 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-08-06 20:06:52
113.162.247.223	attackspambots	20/8/6@01:18:02: FAIL: Alarm-Network address from=113.162.247.223 ...	2020-08-06 20:14:56
101.99.15.57	attackspam	Automatic report - Banned IP Access	2020-08-06 20:05:08
49.88.112.115	attackbotsspam	Unauthorized connection attempt detected from IP address 49.88.112.115 to port 22	2020-08-06 20:35:28
66.205.156.117	attackbots	Automated report (2020-08-05T23:17:27-06:00). Spambot detected.	2020-08-06 20:42:51
139.59.57.2	attack	Aug 6 13:21:33 hidden sshd[23924]: Failed password for hidden from 139.59.57.2 port 45200 ssh2 Aug 6 13:26:12 hidden sshd[24516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.57.2 user=root Aug 6 13:26:14 hidden sshd[24516]: Failed password for hidden from 139.59.57.2 port 56488 ssh2	2020-08-06 20:10:00
65.97.252.131	attackbots	Aug 6 12:16:13 h2646465 sshd[10128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.97.252.131 user=root Aug 6 12:16:15 h2646465 sshd[10128]: Failed password for root from 65.97.252.131 port 45936 ssh2 Aug 6 12:27:23 h2646465 sshd[11582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.97.252.131 user=root Aug 6 12:27:25 h2646465 sshd[11582]: Failed password for root from 65.97.252.131 port 60154 ssh2 Aug 6 12:31:18 h2646465 sshd[12261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.97.252.131 user=root Aug 6 12:31:20 h2646465 sshd[12261]: Failed password for root from 65.97.252.131 port 44292 ssh2 Aug 6 12:35:15 h2646465 sshd[12903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.97.252.131 user=root Aug 6 12:35:16 h2646465 sshd[12903]: Failed password for root from 65.97.252.131 port 56650 ssh2 Aug 6 12:39:10 h2646465 ssh	2020-08-06 20:33:58

Recently Reported IPs

123.149.137.164	123.149.137.167	123.149.137.168	123.149.137.172
123.149.137.173	123.149.137.174	123.149.137.176	123.149.137.178
123.149.137.18	123.149.137.180	123.149.137.183	123.149.137.184
123.149.137.186	123.149.137.191	123.149.137.193	123.149.137.194
123.149.137.197	123.149.137.20	123.149.137.202	123.149.137.205