124.150.132.70

Basic Info

City: unknown

Region: unknown

Country: Republic of China (ROC)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
124.150.132.74	attackbotsspam	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-06-02 22:54:13
124.150.132.74	attackspambots	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-05-15 07:36:51
124.150.132.74	attackbots	WordPress login Brute force / Web App Attack on client site.	2020-03-08 23:06:36
124.150.132.74	attackbots	CMS (WordPress or Joomla) login attempt.	2020-03-06 16:52:38
124.150.132.28	attack	(mod_security) mod_security (id:230011) triggered by 124.150.132.28 (TW/Taiwan/-): 5 in the last 3600 secs	2020-03-02 06:22:34
124.150.132.79	attackbots	124.150.132.79 - - [25/Jul/2019:23:12:08 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 124.150.132.79 - - [25/Jul/2019:23:12:09 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 124.150.132.79 - - [25/Jul/2019:23:12:11 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 124.150.132.79 - - [25/Jul/2019:23:12:12 +0200] "POST /wp-login.php HTTP/1.1" 200 1486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 124.150.132.79 - - [25/Jul/2019:23:12:13 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 124.150.132.79 - - [25/Jul/2019:23:12:15 +0200] "POST /wp-login.php HTTP/1.1" 200 1486 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-07-26 06:00:07

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.150.132.70
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43260
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;124.150.132.70.			IN	A

;; AUTHORITY SECTION:
.			299	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 80 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 12:15:03 CST 2022
;; MSG SIZE  rcvd: 107

Host info

70.132.150.124.in-addr.arpa domain name pointer linplesk30.pumo.com.tw.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
70.132.150.124.in-addr.arpa	name = linplesk30.pumo.com.tw.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
178.46.163.3	attackspambots	failed_logins	2019-07-16 17:08:25
27.15.183.57	attack	port scan and connect, tcp 23 (telnet)	2019-07-16 17:10:19
185.222.211.243	attackspambots	SASL Brute Force	2019-07-16 17:04:39
27.254.206.238	attackbots	Jul 16 04:42:58 MK-Soft-VM3 sshd\[20030\]: Invalid user sz from 27.254.206.238 port 44268 Jul 16 04:42:58 MK-Soft-VM3 sshd\[20030\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.206.238 Jul 16 04:43:01 MK-Soft-VM3 sshd\[20030\]: Failed password for invalid user sz from 27.254.206.238 port 44268 ssh2 ...	2019-07-16 16:32:57
185.222.211.234	attackspam	$f2bV_matches	2019-07-16 16:46:01
51.158.97.68	attack	firewall-block, port(s): 445/tcp	2019-07-16 16:28:20
104.238.81.58	attackbots	Jul 16 08:56:01 nginx sshd[7565]: Invalid user oracle from 104.238.81.58 Jul 16 08:56:01 nginx sshd[7565]: Received disconnect from 104.238.81.58 port 44834:11: Normal Shutdown, Thank you for playing [preauth]	2019-07-16 16:30:37
5.135.182.84	attackspam	Jul 16 14:14:29 vibhu-HP-Z238-Microtower-Workstation sshd\[5344\]: Invalid user ubuntu from 5.135.182.84 Jul 16 14:14:29 vibhu-HP-Z238-Microtower-Workstation sshd\[5344\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.182.84 Jul 16 14:14:31 vibhu-HP-Z238-Microtower-Workstation sshd\[5344\]: Failed password for invalid user ubuntu from 5.135.182.84 port 54854 ssh2 Jul 16 14:21:08 vibhu-HP-Z238-Microtower-Workstation sshd\[6876\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.182.84 user=root Jul 16 14:21:10 vibhu-HP-Z238-Microtower-Workstation sshd\[6876\]: Failed password for root from 5.135.182.84 port 51700 ssh2 ...	2019-07-16 16:56:49
84.39.33.198	attackbotsspam	Jul 16 11:12:19 pornomens sshd\[13113\]: Invalid user ts5 from 84.39.33.198 port 43684 Jul 16 11:12:19 pornomens sshd\[13113\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.39.33.198 Jul 16 11:12:21 pornomens sshd\[13113\]: Failed password for invalid user ts5 from 84.39.33.198 port 43684 ssh2 ...	2019-07-16 17:13:42
185.222.211.242	attackbots	Jul 16 08:51:01 relay postfix/smtpd\[1267\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.242\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[185.222.211.2\]\> Jul 16 08:51:01 relay postfix/smtpd\[1267\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.242\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[185.222.211.2\]\> Jul 16 08:51:01 relay postfix/smtpd\[1267\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.242\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[185.222.211.2\]\> Jul 16 08:51:01 relay postfix/smtpd\[1267\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.242\]: 554 5.7.1 \: Relay access denied\; from=\	2019-07-16 17:05:55
106.66.205.187	attackspambots	MagicSpam Rule: valid_helo_domain; Spammer IP: 106.66.205.187	2019-07-16 16:49:38
185.222.211.244	attackspambots	Jul 16 09:02:55 relay postfix/smtpd\[1266\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.244\]: 554 5.7.1 \: Relay access denied\; from=\<4vl4kxvnciiida06@happygifts.ru\> to=\ proto=ESMTP helo=\<\[185.222.211.2\]\> Jul 16 09:02:55 relay postfix/smtpd\[1266\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.244\]: 554 5.7.1 \: Relay access denied\; from=\<4vl4kxvnciiida06@happygifts.ru\> to=\ proto=ESMTP helo=\<\[185.222.211.2\]\> Jul 16 09:02:55 relay postfix/smtpd\[1266\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.244\]: 554 5.7.1 \: Relay access denied\; from=\<4vl4kxvnciiida06@happygifts.ru\> to=\ proto=ESMTP helo=\<\[185.222.211.2\]\> Jul 16 09:02:55 relay postfix/smtpd\[1266\]: NOQUEUE: reject: RCPT from unknown\[185.222.211.244\]: 554 5.7.1 \	2019-07-16 16:45:43
112.85.42.237	attack	Jul 16 11:43:22 server sshd\[23125\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.237 user=root Jul 16 11:43:25 server sshd\[23125\]: Failed password for invalid user root from 112.85.42.237 port 18481 ssh2 Jul 16 11:43:27 server sshd\[23125\]: Failed password for invalid user root from 112.85.42.237 port 18481 ssh2 Jul 16 11:43:30 server sshd\[23125\]: Failed password for invalid user root from 112.85.42.237 port 18481 ssh2 Jul 16 11:45:16 server sshd\[8664\]: User root from 112.85.42.237 not allowed because listed in DenyUsers	2019-07-16 16:48:22
69.54.36.207	attack	Unauthorized connection attempt from IP address 69.54.36.207 on Port 445(SMB)	2019-07-16 16:31:04
151.56.76.94	attack	MagicSpam Rule: valid_helo_domain; Spammer IP: 151.56.76.94	2019-07-16 16:41:40

Recently Reported IPs

45.229.54.133	82.202.202.2	23.184.48.238	120.79.69.93
151.33.252.15	168.205.124.36	182.57.60.25	47.88.90.145
188.112.64.4	177.131.49.149	171.100.139.62	123.16.23.210
102.140.224.142	5.239.169.105	72.175.82.74	161.132.234.91
167.248.133.166	119.91.83.236	159.203.24.126	68.2.237.100