149.129.133.48

Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: Alibaba.com Singapore E-Commerce Private Limited

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	port scan and connect, tcp 23 (telnet)	2019-07-22 13:19:20

Comments on same subnet:

IP	Type	Details	Datetime
149.129.133.149	attackspambots	Honeypot attack, port: 23, PTR: PTR record not found	2019-08-12 09:32:03
149.129.133.176	attack	port scan and connect, tcp 23 (telnet)	2019-07-22 19:02:25
149.129.133.149	attackbots	port scan and connect, tcp 23 (telnet)	2019-07-12 04:16:34

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.129.133.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22537
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;149.129.133.48.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072200 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 22 13:19:10 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 48.133.129.149.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 48.133.129.149.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
117.80.186.5	attackspam	21 attempts against mh-ssh on sea	2020-10-12 15:56:25
103.45.179.163	attack	SSH brute force attempt	2020-10-12 15:48:59
193.228.91.105	attack	Oct 12 07:58:42 XXX sshd[47187]: Invalid user oracle from 193.228.91.105 port 35192	2020-10-12 16:12:46
154.221.17.184	attack	Brute%20Force%20SSH	2020-10-12 15:45:59
111.229.129.64	attack	Oct 12 07:52:45 email sshd\[2176\]: Invalid user chiba from 111.229.129.64 Oct 12 07:52:45 email sshd\[2176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.129.64 Oct 12 07:52:47 email sshd\[2176\]: Failed password for invalid user chiba from 111.229.129.64 port 57240 ssh2 Oct 12 07:57:37 email sshd\[3078\]: Invalid user arioka from 111.229.129.64 Oct 12 07:57:37 email sshd\[3078\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.129.64 ...	2020-10-12 16:05:10
222.82.253.106	attackspambots	SSH login attempts.	2020-10-12 16:07:11
118.24.142.170	attack	Invalid user hubert from 118.24.142.170 port 51042	2020-10-12 15:27:53
178.68.174.239	attack	1602449232 - 10/11/2020 22:47:12 Host: 178.68.174.239/178.68.174.239 Port: 445 TCP Blocked	2020-10-12 15:44:25
104.254.90.34	attackspambots	SS5,Magento Bruteforce Login Attack POST /index.php/admin/	2020-10-12 15:25:01
222.186.31.83	attackbots	Unauthorized connection attempt detected from IP address 222.186.31.83 to port 22	2020-10-12 15:41:22
106.12.113.204	attackbotsspam	Oct 12 11:10:59 lunarastro sshd[18972]: Failed password for root from 106.12.113.204 port 45396 ssh2	2020-10-12 15:57:11
45.124.86.155	attackspam	3853/tcp 26422/tcp 18669/tcp... [2020-08-31/10-11]51pkt,17pt.(tcp)	2020-10-12 15:40:32
177.18.22.215	attackspam	2020-10-12T08:00:01.491761shield sshd\[18494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.18.22.215.dynamic.adsl.gvt.net.br user=root 2020-10-12T08:00:03.343910shield sshd\[18494\]: Failed password for root from 177.18.22.215 port 24899 ssh2 2020-10-12T08:05:23.833057shield sshd\[19034\]: Invalid user f4 from 177.18.22.215 port 28015 2020-10-12T08:05:23.846887shield sshd\[19034\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.18.22.215.dynamic.adsl.gvt.net.br 2020-10-12T08:05:26.244904shield sshd\[19034\]: Failed password for invalid user f4 from 177.18.22.215 port 28015 ssh2	2020-10-12 16:09:50
178.128.247.152	attackspam	trying to access non-authorized port	2020-10-12 16:05:43
45.153.203.172	attackspambots	TCP (SYN) 45.153.203.172:43152 -> port 23, len 44	2020-10-12 15:47:20

Recently Reported IPs

118.71.114.140	113.116.179.27	134.73.129.105	82.162.80.74
45.64.164.4	185.88.199.46	114.40.181.242	104.128.48.61
80.15.189.87	78.185.90.73	43.250.187.174	195.55.235.92
203.24.50.229	117.60.162.57	103.125.191.21	125.214.49.21
123.21.229.5	27.15.154.122	168.232.130.71	37.120.150.138