129.150.69.48 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Oracle Corporation

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	scan z	2020-05-10 16:55:11

Comments on same subnet:

IP	Type	Details	Datetime
129.150.69.85	attackspam	Cluster member 67.227.229.95 (US/United States/host.cjthedj97.me) said, DENY 129.150.69.85, Reason:[(mod_security) mod_security (id:210350) triggered by 129.150.69.85 (US/United States/oc-129-150-69-85.compute.oraclecloud.com): 1 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER	2020-08-02 00:38:04
129.150.69.85	attackspam	2020-05-08T14:28:02.877795 sshd[28972]: Invalid user es from 129.150.69.85 port 62216 2020-05-08T14:28:02.894766 sshd[28972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.150.69.85 2020-05-08T14:28:02.877795 sshd[28972]: Invalid user es from 129.150.69.85 port 62216 2020-05-08T14:28:04.932536 sshd[28972]: Failed password for invalid user es from 129.150.69.85 port 62216 ssh2 ...	2020-05-08 22:38:01
129.150.69.130	attackbotsspam	May 6 22:01:33 localhost sshd[61128]: Connection closed by 129.150.69.130 port 17929 [preauth] ...	2020-05-06 21:36:56
129.150.69.85	attackspambots	Invalid user ubuntu from 129.150.69.85 port 13065	2020-04-17 17:15:27

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 129.150.69.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63314
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;129.150.69.48.			IN	A

;; AUTHORITY SECTION:
.			552	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051000 1800 900 604800 86400

;; Query time: 93 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 10 16:55:07 CST 2020
;; MSG SIZE  rcvd: 117

Host info

48.69.150.129.in-addr.arpa domain name pointer oc-129-150-69-48.compute.oraclecloud.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
48.69.150.129.in-addr.arpa	name = oc-129-150-69-48.compute.oraclecloud.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
139.170.150.254	attack	SSH bruteforce	2020-02-18 00:55:25
210.18.155.227	attack	445/tcp [2020-02-17]1pkt	2020-02-18 00:40:31
221.124.88.14	attackbots	5555/tcp [2020-02-17]1pkt	2020-02-18 00:34:38
222.186.173.142	attackbots	Feb 17 11:43:48 NPSTNNYC01T sshd[23586]: Failed password for root from 222.186.173.142 port 31070 ssh2 Feb 17 11:44:03 NPSTNNYC01T sshd[23586]: error: maximum authentication attempts exceeded for root from 222.186.173.142 port 31070 ssh2 [preauth] Feb 17 11:44:09 NPSTNNYC01T sshd[23592]: Failed password for root from 222.186.173.142 port 50296 ssh2 ...	2020-02-18 00:47:29
112.85.42.186	attack	Feb 17 22:00:40 areeb-Workstation sshd[17377]: Failed password for root from 112.85.42.186 port 20314 ssh2 Feb 17 22:00:43 areeb-Workstation sshd[17377]: Failed password for root from 112.85.42.186 port 20314 ssh2 ...	2020-02-18 01:12:17
185.143.223.173	attack	Feb 17 17:17:03 relay postfix/smtpd\[27497\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.173\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[185.143.223.163\]\> Feb 17 17:17:03 relay postfix/smtpd\[27497\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.173\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[185.143.223.163\]\> Feb 17 17:17:03 relay postfix/smtpd\[27497\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.173\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[185.143.223.163\]\> Feb 17 17:17:03 relay postfix/smtpd\[27497\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.173\]: 554 5.7.1 \: Relay access denie ...	2020-02-18 00:44:18
139.59.33.3	attackspambots	Feb 17 11:39:00 firewall sshd[2944]: Invalid user admin from 139.59.33.3 Feb 17 11:39:02 firewall sshd[2944]: Failed password for invalid user admin from 139.59.33.3 port 46344 ssh2 Feb 17 11:42:48 firewall sshd[3106]: Invalid user bases from 139.59.33.3 ...	2020-02-18 01:08:54
222.186.190.92	attackspam	$f2bV_matches	2020-02-18 00:53:11
84.241.27.32	attackbots	23/tcp [2020-02-17]1pkt	2020-02-18 00:31:32
213.5.198.99	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-18 01:12:49
160.153.245.123	attack	Automatic report - XMLRPC Attack	2020-02-18 00:56:37
83.144.110.218	attackbots	Feb 17 16:06:43 server sshd\[2761\]: Invalid user steven from 83.144.110.218 Feb 17 16:06:43 server sshd\[2761\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=83-144-110-218.static.chello.pl Feb 17 16:06:45 server sshd\[2761\]: Failed password for invalid user steven from 83.144.110.218 port 60566 ssh2 Feb 17 16:37:12 server sshd\[7980\]: Invalid user testing from 83.144.110.218 Feb 17 16:37:12 server sshd\[7980\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=83-144-110-218.static.chello.pl ...	2020-02-18 01:02:40
178.33.67.12	attack	Feb 17 16:46:36 h1745522 sshd[28670]: Invalid user it from 178.33.67.12 port 58764 Feb 17 16:46:36 h1745522 sshd[28670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.67.12 Feb 17 16:46:36 h1745522 sshd[28670]: Invalid user it from 178.33.67.12 port 58764 Feb 17 16:46:38 h1745522 sshd[28670]: Failed password for invalid user it from 178.33.67.12 port 58764 ssh2 Feb 17 16:49:36 h1745522 sshd[28731]: Invalid user candy from 178.33.67.12 port 57212 Feb 17 16:49:36 h1745522 sshd[28731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.67.12 Feb 17 16:49:36 h1745522 sshd[28731]: Invalid user candy from 178.33.67.12 port 57212 Feb 17 16:49:38 h1745522 sshd[28731]: Failed password for invalid user candy from 178.33.67.12 port 57212 ssh2 Feb 17 16:52:43 h1745522 sshd[28812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.67.12 user=root Feb 17 16:52:45 ...	2020-02-18 01:05:55
175.18.38.224	attack	Port 23 (Telnet) access denied	2020-02-18 00:53:41
114.69.249.194	attackspam	Feb 17 03:50:18 hpm sshd\[14876\]: Invalid user ircd from 114.69.249.194 Feb 17 03:50:18 hpm sshd\[14876\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.69.249.194 Feb 17 03:50:20 hpm sshd\[14876\]: Failed password for invalid user ircd from 114.69.249.194 port 51098 ssh2 Feb 17 03:54:35 hpm sshd\[15239\]: Invalid user sftp from 114.69.249.194 Feb 17 03:54:35 hpm sshd\[15239\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.69.249.194	2020-02-18 00:41:48

Recently Reported IPs

31.31.126.218	59.41.142.116	2.184.47.147	85.50.0.27
209.78.57.15	153.128.92.72	137.63.71.132	93.186.253.152
111.41.238.244	185.51.201.115	183.103.169.158	134.6.208.182
255.213.228.132	188.165.234.92	124.125.224.106	214.169.79.231
48.67.254.174	179.209.91.153	169.162.147.40	42.183.68.227