137.135.124.118

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Microsoft Corporation

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-20 20:14:26
attackbots	Port 5374 scan denied	2020-02-10 15:58:59

Comments on same subnet:

IP	Type	Details	Datetime
137.135.124.92	attack	Exploited Host.	2020-07-26 03:10:57
137.135.124.92	attackbots	sshd jail - ssh hack attempt	2020-04-14 01:09:53
137.135.124.92	attackspam	Apr 11 12:12:56 vlre-nyc-1 sshd\[31720\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.135.124.92 user=root Apr 11 12:12:58 vlre-nyc-1 sshd\[31720\]: Failed password for root from 137.135.124.92 port 59194 ssh2 Apr 11 12:18:42 vlre-nyc-1 sshd\[31885\]: Invalid user toor from 137.135.124.92 Apr 11 12:18:42 vlre-nyc-1 sshd\[31885\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.135.124.92 Apr 11 12:18:44 vlre-nyc-1 sshd\[31885\]: Failed password for invalid user toor from 137.135.124.92 port 43472 ssh2 ...	2020-04-11 22:47:03

Type

Details

Datetime

137.135.124.92

attack

Exploited Host.

2020-07-26 03:10:57

137.135.124.92

attackbots

sshd jail - ssh hack attempt

2020-04-14 01:09:53

137.135.124.92

attackspam

Apr 11 12:12:56 vlre-nyc-1 sshd\[31720\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.135.124.92  user=root
Apr 11 12:12:58 vlre-nyc-1 sshd\[31720\]: Failed password for root from 137.135.124.92 port 59194 ssh2
Apr 11 12:18:42 vlre-nyc-1 sshd\[31885\]: Invalid user toor from 137.135.124.92
Apr 11 12:18:42 vlre-nyc-1 sshd\[31885\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.135.124.92
Apr 11 12:18:44 vlre-nyc-1 sshd\[31885\]: Failed password for invalid user toor from 137.135.124.92 port 43472 ssh2
...

2020-04-11 22:47:03

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 137.135.124.118
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19138
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;137.135.124.118.		IN	A

;; AUTHORITY SECTION:
.			340	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021000 1800 900 604800 86400

;; Query time: 455 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 15:58:54 CST 2020
;; MSG SIZE  rcvd: 119

Host info

118.124.135.137.in-addr.arpa has no PTR record

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 118.124.135.137.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.12.97.132	attackbots	SSH BruteForce Attack	2020-10-05 17:15:36
156.206.170.245	attack	Listed on zen-spamhaus also abuseat.org / proto=6 . srcport=28576 . dstport=23 Telnet . (3518)	2020-10-05 16:58:39
186.215.235.9	attackspam	Oct 5 02:52:32 ns382633 sshd\[10543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.215.235.9 user=root Oct 5 02:52:34 ns382633 sshd\[10543\]: Failed password for root from 186.215.235.9 port 55393 ssh2 Oct 5 03:08:09 ns382633 sshd\[12672\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.215.235.9 user=root Oct 5 03:08:11 ns382633 sshd\[12672\]: Failed password for root from 186.215.235.9 port 7169 ssh2 Oct 5 03:13:30 ns382633 sshd\[13401\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.215.235.9 user=root	2020-10-05 17:31:57
183.154.18.88	attack	Oct 4 23:16:32 srv01 postfix/smtpd\[23936\]: warning: unknown\[183.154.18.88\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 23:16:43 srv01 postfix/smtpd\[23936\]: warning: unknown\[183.154.18.88\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 23:17:00 srv01 postfix/smtpd\[23936\]: warning: unknown\[183.154.18.88\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 23:17:20 srv01 postfix/smtpd\[23936\]: warning: unknown\[183.154.18.88\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 23:17:33 srv01 postfix/smtpd\[23936\]: warning: unknown\[183.154.18.88\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-10-05 17:40:20
112.85.42.110	attackbotsspam	" "	2020-10-05 17:27:02
90.189.117.121	attack	Oct 4 20:31:44 ip-172-31-61-156 sshd[2782]: Failed password for root from 90.189.117.121 port 37750 ssh2 Oct 4 20:31:42 ip-172-31-61-156 sshd[2782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=90.189.117.121 user=root Oct 4 20:31:44 ip-172-31-61-156 sshd[2782]: Failed password for root from 90.189.117.121 port 37750 ssh2 Oct 4 20:36:36 ip-172-31-61-156 sshd[3166]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=90.189.117.121 user=root Oct 4 20:36:37 ip-172-31-61-156 sshd[3166]: Failed password for root from 90.189.117.121 port 41618 ssh2 ...	2020-10-05 17:26:06
36.24.3.33	attackbotsspam	Oct 5 05:05:49 email sshd\[10734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.24.3.33 user=root Oct 5 05:05:52 email sshd\[10734\]: Failed password for root from 36.24.3.33 port 36606 ssh2 Oct 5 05:07:44 email sshd\[11104\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.24.3.33 user=root Oct 5 05:07:47 email sshd\[11104\]: Failed password for root from 36.24.3.33 port 59662 ssh2 Oct 5 05:09:32 email sshd\[11441\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.24.3.33 user=root ...	2020-10-05 16:42:48
180.250.247.45	attack	Bruteforce detected by fail2ban	2020-10-05 16:47:49
86.104.101.42	attack	Listed on zen-spamhaus also barracudaCentral / proto=6 . srcport=9907 . dstport=445 SMB . (3515)	2020-10-05 17:13:20
104.41.56.48	attackspambots	Oct 5 09:24:33 server sshd[12561]: Failed password for root from 104.41.56.48 port 37934 ssh2 Oct 5 09:51:19 server sshd[18413]: Failed password for root from 104.41.56.48 port 35284 ssh2 Oct 5 10:05:20 server sshd[21713]: Failed password for root from 104.41.56.48 port 44432 ssh2	2020-10-05 17:27:55
94.101.95.240	attackspambots	05.10.2020 08:16:44 - Wordpress fail Detected by ELinOX-ALM	2020-10-05 17:20:21
49.234.60.118	attackspambots	Oct 5 11:12:46 server sshd[36634]: Failed password for root from 49.234.60.118 port 55644 ssh2 Oct 5 11:15:35 server sshd[37233]: Failed password for root from 49.234.60.118 port 38552 ssh2 Oct 5 11:18:15 server sshd[37828]: Failed password for root from 49.234.60.118 port 49690 ssh2	2020-10-05 17:28:22
190.39.162.200	attackspambots	Port scan on 1 port(s): 445	2020-10-05 16:52:53
24.200.190.39	attackbots	TCP (SYN) 24.200.190.39:23508 -> port 23, len 44	2020-10-05 17:40:44
195.54.167.152	attackbotsspam	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-10-05T03:43:18Z and 2020-10-05T05:09:47Z	2020-10-05 17:36:11

Recently Reported IPs

59.48.81.34	103.217.217.122	103.137.152.52	58.122.109.184
245.125.124.200	140.82.3.6	69.0.251.167	158.199.241.185
167.172.199.228	211.190.226.162	218.216.192.146	33.10.1.169
115.11.107.38	9.140.248.31	79.118.4.167	106.125.208.208
216.223.177.65	238.77.222.235	188.157.211.240	136.223.24.39