149.164.121.197

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.164.121.197
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59490
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;149.164.121.197.		IN	A

;; AUTHORITY SECTION:
.			304	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022011001 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 11 03:44:43 CST 2022
;; MSG SIZE  rcvd: 108

Host info

Host 197.121.164.149.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 197.121.164.149.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
82.221.105.7	attack	Date: 11/19 23:37:52 Name: PROTOCOL-SCADA Moxa discovery packet information disclosure attempt Priority: 2 Type: Attempted Information Leak IP info: 82.221.105.7:28855 -> 0.0.0.0/8:4800 References: none found SID: 42016	2019-11-21 03:05:21
118.24.193.176	attackspambots	Nov 20 17:41:54 vps647732 sshd[890]: Failed password for root from 118.24.193.176 port 51542 ssh2 Nov 20 17:47:38 vps647732 sshd[932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.193.176 ...	2019-11-21 02:38:02
159.65.148.115	attackspam	Nov 20 15:36:39 localhost sshd\[12014\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.148.115 user=root Nov 20 15:36:41 localhost sshd\[12014\]: Failed password for root from 159.65.148.115 port 33666 ssh2 Nov 20 15:41:10 localhost sshd\[12457\]: Invalid user host from 159.65.148.115 port 41774 Nov 20 15:41:10 localhost sshd\[12457\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.148.115	2019-11-21 02:52:41
211.57.94.232	attackspambots	Nov 20 16:58:40 MK-Soft-Root1 sshd[3081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.57.94.232 Nov 20 16:58:42 MK-Soft-Root1 sshd[3081]: Failed password for invalid user gituser from 211.57.94.232 port 36362 ssh2 ...	2019-11-21 02:59:27
178.74.109.206	attackbotsspam	Telnetd brute force attack detected by fail2ban	2019-11-21 02:37:47
118.193.31.19	attackbotsspam	Nov 20 15:40:53 vmanager6029 sshd\[30117\]: Invalid user ailar from 118.193.31.19 port 47132 Nov 20 15:40:53 vmanager6029 sshd\[30117\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.193.31.19 Nov 20 15:40:55 vmanager6029 sshd\[30117\]: Failed password for invalid user ailar from 118.193.31.19 port 47132 ssh2	2019-11-21 03:03:35
169.197.108.206	attack	firewall-block, port(s): 8443/tcp	2019-11-21 03:14:50
139.217.223.143	attackbots	$f2bV_matches	2019-11-21 02:57:57
5.23.79.3	attackbotsspam	SSH Brute-Force attacks	2019-11-21 02:37:21
81.171.98.128	attack	\[2019-11-20 13:27:13\] NOTICE\[2754\] chan_sip.c: Registration from '\' failed for '81.171.98.128:62993' - Wrong password \[2019-11-20 13:27:13\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-20T13:27:13.647-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="449",SessionID="0x7f26c485fc08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.98.128/62993",Challenge="1576b14f",ReceivedChallenge="1576b14f",ReceivedHash="27b2e07d63f4874bdfb6a87d9abd9ec3" \[2019-11-20 13:28:03\] NOTICE\[2754\] chan_sip.c: Registration from '\' failed for '81.171.98.128:51253' - Wrong password \[2019-11-20 13:28:03\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-20T13:28:03.713-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="8768",SessionID="0x7f26c485fc08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.98.1	2019-11-21 02:40:06
213.186.150.216	attackbots	php WP PHPmyadamin ABUSE blocked for 12h	2019-11-21 02:56:10
45.148.235.169	attackspambots	9.311.211,50-04/03 [bc18/m78] PostRequest-Spammer scoring: Durban02	2019-11-21 03:13:38
14.6.202.237	attackbotsspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/14.6.202.237/ KR - 1H : (13) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : KR NAME ASN : ASN17858 IP : 14.6.202.237 CIDR : 14.6.0.0/15 PREFIX COUNT : 40 UNIQUE IP COUNT : 9928704 ATTACKS DETECTED ASN17858 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-11-20 15:40:58 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-21 03:00:38
109.15.173.92	attack	109.15.173.92 was recorded 5 times by 1 hosts attempting to connect to the following ports: 23,2323. Incident counter (4h, 24h, all-time): 5, 5, 5	2019-11-21 02:48:09
185.86.83.126	attack	Port Scan: TCP/3388	2019-11-21 03:05:05

Recently Reported IPs

120.189.109.228	47.86.33.231	117.139.168.173	0.150.125.153
138.5.253.38	22.140.191.128	144.228.14.145	25.121.37.32
232.6.57.243	186.93.99.8	233.2.218.54	198.69.34.115
233.94.72.0	223.205.223.227	216.216.67.2	138.187.94.41
8.137.215.229	118.190.153.231	250.58.59.213	16.4.114.151