123.158.49.253

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
123.158.49.153	attackbotsspam	Fail2Ban Ban Triggered	2020-04-27 20:54:06
123.158.49.61	attack	Unauthorized connection attempt detected from IP address 123.158.49.61 to port 8081 [J]	2020-03-02 17:11:48
123.158.49.116	attack	Unauthorized connection attempt detected from IP address 123.158.49.116 to port 9090 [T]	2020-01-30 09:02:48
123.158.49.42	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5417081adc48513e \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.096783921 Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:12:19
123.158.49.221	attackspambots	The IP has triggered Cloudflare WAF. CF-Ray: 5416912b8c4493fa \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: ip.skk.moe \| User-Agent: Mozilla/5.066704189 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36 \| CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 02:40:29
123.158.49.98	attackspambots	The%20IP%20has%20triggered%20Cloudflare%20WAF.%20Report%20generated%20by%20Cloudflare-WAF-to-AbuseIPDB%20(https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB)	2019-11-19 04:41:55

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 123.158.49.253
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38320
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;123.158.49.253.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012200 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 22 20:21:32 CST 2025
;; MSG SIZE  rcvd: 107

Host info

Host 253.49.158.123.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 253.49.158.123.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
69.119.85.43	attackspam	(sshd) Failed SSH login from 69.119.85.43 (US/United States/ool-4577552b.dyn.optonline.net): 10 in the last 3600 secs	2020-10-11 21:31:40
62.201.120.141	attackspam	Oct 11 16:04:33 dignus sshd[8527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.201.120.141 user=root Oct 11 16:04:35 dignus sshd[8527]: Failed password for root from 62.201.120.141 port 45658 ssh2 Oct 11 16:08:26 dignus sshd[8543]: Invalid user sql from 62.201.120.141 port 54116 Oct 11 16:08:26 dignus sshd[8543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.201.120.141 Oct 11 16:08:28 dignus sshd[8543]: Failed password for invalid user sql from 62.201.120.141 port 54116 ssh2 ...	2020-10-11 21:17:17
139.59.138.115	attackspam	Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):	2020-10-11 21:16:04
203.251.11.118	attackbotsspam	2020-10-11T09:32:11.076946server.espacesoutien.com sshd[32223]: Failed password for invalid user sales from 203.251.11.118 port 34104 ssh2 2020-10-11T09:36:12.046147server.espacesoutien.com sshd[448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.251.11.118 user=root 2020-10-11T09:36:13.270465server.espacesoutien.com sshd[448]: Failed password for root from 203.251.11.118 port 39548 ssh2 2020-10-11T09:40:10.615287server.espacesoutien.com sshd[1231]: Invalid user james from 203.251.11.118 port 45006 ...	2020-10-11 21:18:13
159.89.9.22	attackbotsspam	Oct 11 12:15:30 ns308116 sshd[30875]: Invalid user birmingham from 159.89.9.22 port 58244 Oct 11 12:15:30 ns308116 sshd[30875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.9.22 Oct 11 12:15:32 ns308116 sshd[30875]: Failed password for invalid user birmingham from 159.89.9.22 port 58244 ssh2 Oct 11 12:24:47 ns308116 sshd[980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.9.22 user=root Oct 11 12:24:49 ns308116 sshd[980]: Failed password for root from 159.89.9.22 port 39588 ssh2 ...	2020-10-11 21:26:21
46.142.164.107	attackspambots	TCP (SYN) 46.142.164.107:35736 -> port 22, len 44	2020-10-11 21:40:55
180.157.124.73	attackspambots	E-Mail Spam (RBL) [REJECTED]	2020-10-11 21:25:20
119.45.187.6	attackspambots	SSH login attempts.	2020-10-11 21:01:32
220.90.23.22	attack	Port Scan: TCP/443	2020-10-11 21:15:49
45.129.33.8	attackspambots	TCP (SYN) 45.129.33.8:54139 -> port 30117, len 44	2020-10-11 21:37:36
194.61.27.248	attack	TCP port : 3389	2020-10-11 21:11:16
64.202.189.187	attackbotsspam	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-10-11 21:04:42
205.144.171.147	attack	(mod_security) mod_security (id:949110) triggered by 205.144.171.147 (US/United States/205-144-171-147.alchemy.net): 5 in the last 14400 secs; ID: rub	2020-10-11 21:35:47
113.208.119.154	attack	SSH login attempts.	2020-10-11 21:27:20
45.55.36.216	attackbotsspam	Oct 11 02:03:43 v22019038103785759 sshd\[10274\]: Invalid user testwww from 45.55.36.216 port 53922 Oct 11 02:03:44 v22019038103785759 sshd\[10274\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.36.216 Oct 11 02:03:46 v22019038103785759 sshd\[10274\]: Failed password for invalid user testwww from 45.55.36.216 port 53922 ssh2 Oct 11 02:10:21 v22019038103785759 sshd\[10990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.36.216 user=root Oct 11 02:10:23 v22019038103785759 sshd\[10990\]: Failed password for root from 45.55.36.216 port 46678 ssh2 ...	2020-10-11 21:17:43

Recently Reported IPs

6.206.133.185	84.181.224.132	210.224.190.194	74.242.120.10
71.86.94.55	58.86.217.225	8.209.147.46	221.69.103.130
16.69.185.2	87.200.25.219	2.187.201.179	198.181.140.200
133.87.147.129	144.221.217.141	142.252.115.193	142.91.40.239
35.121.119.147	98.106.123.123	215.119.211.119	214.20.99.205