149.202.7.129 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: France

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
149.202.79.125	attack	Fail2Ban Ban Triggered	2020-10-06 07:10:57
149.202.79.125	attackbots	Fail2Ban Ban Triggered	2020-10-05 23:25:54
149.202.79.125	attackbotsspam	Hits on port : 15838 20405	2020-10-05 15:24:34
149.202.79.125	attackbots	TCP (SYN) 149.202.79.125:48837 -> port 5941, len 44	2020-10-04 05:44:35
149.202.79.125	attackbotsspam	TCP (SYN) 149.202.79.125:48837 -> port 5941, len 44	2020-10-03 13:27:08
149.202.79.125	attackspambots	TCP port : 16045	2020-09-27 00:43:28
149.202.79.125	attackbots	firewall-block, port(s): 21056/tcp	2020-09-26 16:33:34
149.202.73.39	attack	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-08-31 20:35:11
149.202.79.125	attackbots	Port scan: Attack repeated for 24 hours	2020-08-17 13:49:09
149.202.79.125	attackbots	Port scan: Attack repeated for 24 hours	2020-08-09 12:46:00
149.202.76.77	attackspam	[2020-08-08 14:43:00] NOTICE[1248] chan_sip.c: Registration from '' failed for '149.202.76.77:55525' - Wrong password [2020-08-08 14:43:00] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-08T14:43:00.898-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4391",SessionID="0x7f27203df9b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/149.202.76.77/55525",Challenge="142e00ea",ReceivedChallenge="142e00ea",ReceivedHash="63ece3fb8403f2f93db2530df5dcbdd9" [2020-08-08 14:43:35] NOTICE[1248] chan_sip.c: Registration from '' failed for '149.202.76.77:61248' - Wrong password [2020-08-08 14:43:35] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-08T14:43:35.682-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4392",SessionID="0x7f27203df9b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/149.202.76.77 ...	2020-08-09 03:02:09
149.202.76.77	attackbotsspam	[2020-08-07 06:09:07] NOTICE[1248] chan_sip.c: Registration from '' failed for '149.202.76.77:57345' - Wrong password [2020-08-07 06:09:07] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-07T06:09:07.905-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8999",SessionID="0x7f2720161a78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/149.202.76.77/57345",Challenge="3bead5c0",ReceivedChallenge="3bead5c0",ReceivedHash="a81c0882e8dfeb39329c2165e953e269" [2020-08-07 06:09:38] NOTICE[1248] chan_sip.c: Registration from '' failed for '149.202.76.77:53509' - Wrong password [2020-08-07 06:09:38] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-07T06:09:38.767-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8001",SessionID="0x7f272021cc58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/149.202.76.77 ...	2020-08-07 18:09:56
149.202.79.125	attack	Port Scan ...	2020-07-15 08:05:37
149.202.79.125	attackspambots	Jun 24 05:57:22 debian-2gb-nbg1-2 kernel: \[15229710.146730\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=149.202.79.125 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=4132 PROTO=TCP SPT=46379 DPT=3659 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-24 12:51:48
149.202.79.125	attack	Scanned 284 unique addresses for 2 unique TCP ports in 24 hours (ports 18829,28887)	2020-06-19 02:24:57

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 149.202.7.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16768
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;149.202.7.129.			IN	A

;; AUTHORITY SECTION:
.			398	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 04:33:56 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 129.7.202.149.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 129.7.202.149.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
79.12.66.168	attackspambots	Automatic report - Port Scan Attack	2019-07-22 01:33:56
91.105.176.45	attackbots	Sun, 21 Jul 2019 07:35:18 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 01:23:45
185.166.27.131	attack	Sun, 21 Jul 2019 07:35:05 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 01:55:34
139.167.122.32	attack	Sun, 21 Jul 2019 07:35:03 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 02:04:34
14.162.129.49	attackbots	Sun, 21 Jul 2019 07:35:01 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 02:10:20
193.70.109.193	attackbotsspam	Jul 21 14:05:33 MK-Soft-VM5 sshd\[25358\]: Invalid user alisa from 193.70.109.193 port 34008 Jul 21 14:05:33 MK-Soft-VM5 sshd\[25358\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.70.109.193 Jul 21 14:05:35 MK-Soft-VM5 sshd\[25358\]: Failed password for invalid user alisa from 193.70.109.193 port 34008 ssh2 ...	2019-07-22 01:43:30
105.229.100.143	attackbots	Sun, 21 Jul 2019 07:34:57 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 02:17:46
212.178.31.167	attackbotsspam	Jul 21 17:37:12 vpn01 sshd\[3412\]: Invalid user ubuntu from 212.178.31.167 Jul 21 17:37:12 vpn01 sshd\[3412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.178.31.167 Jul 21 17:37:14 vpn01 sshd\[3412\]: Failed password for invalid user ubuntu from 212.178.31.167 port 59076 ssh2	2019-07-22 02:10:44
49.207.142.133	attack	Sun, 21 Jul 2019 07:35:11 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 01:44:39
113.161.212.165	attack	Sun, 21 Jul 2019 07:35:03 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 02:05:27
159.192.226.202	attackspam	Sun, 21 Jul 2019 07:35:15 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 01:33:09
185.137.111.132	attack	Jul 21 19:31:29 mail postfix/smtpd\[28118\]: warning: unknown\[185.137.111.132\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 21 19:33:16 mail postfix/smtpd\[29866\]: warning: unknown\[185.137.111.132\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 21 19:35:04 mail postfix/smtpd\[28121\]: warning: unknown\[185.137.111.132\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2019-07-22 01:47:19
49.146.30.118	attack	Sun, 21 Jul 2019 07:35:12 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 01:42:46
113.181.66.175	attackbotsspam	Sun, 21 Jul 2019 07:35:01 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 02:06:22
116.105.221.130	attack	Sun, 21 Jul 2019 07:35:08 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 01:49:18

Recently Reported IPs

149.202.68.234	149.202.70.65	149.202.71.63	149.202.74.42
149.202.76.135	149.202.77.131	149.202.78.162	149.202.80.212
149.202.81.184	149.202.81.65	149.202.89.31	149.202.84.132
149.202.91.67	149.210.128.75	149.202.93.112	149.210.130.190
149.210.135.235	65.75.68.119	149.210.154.204	149.210.154.217