223.149.252.242

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
223.149.252.92	attack	Automatic report - Port Scan Attack	2020-06-25 17:42:48
223.149.252.195	attack	Automatic report - Port Scan Attack	2019-12-29 07:01:13

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 223.149.252.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4119
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;223.149.252.242.		IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 44 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 11:21:51 CST 2022
;; MSG SIZE  rcvd: 108

Host info

Host 242.252.149.223.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 242.252.149.223.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
180.167.240.210	attackspambots	Invalid user ftpuser from 180.167.240.210 port 36758	2020-07-20 01:21:06
185.22.142.197	attack	Jul 19 18:58:23 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jul 19 18:58:25 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jul 19 18:58:48 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jul 19 19:03:59 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jul 19 19:04:01 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 ...	2020-07-20 01:22:12
86.207.46.180	attack	TCP (SYN) 86.207.46.180:59345 -> port 23, len 44	2020-07-20 01:16:22
181.236.182.37	attack	2020-07-19T11:08:02.100502morrigan.ad5gb.com sshd[1845610]: Invalid user drx from 181.236.182.37 port 48760 2020-07-19T11:08:04.434248morrigan.ad5gb.com sshd[1845610]: Failed password for invalid user drx from 181.236.182.37 port 48760 ssh2	2020-07-20 01:25:55
218.92.0.248	attackbotsspam	Jul 19 19:22:36 vps sshd[421161]: Failed password for root from 218.92.0.248 port 60522 ssh2 Jul 19 19:22:39 vps sshd[421161]: Failed password for root from 218.92.0.248 port 60522 ssh2 Jul 19 19:22:42 vps sshd[421161]: Failed password for root from 218.92.0.248 port 60522 ssh2 Jul 19 19:22:46 vps sshd[421161]: Failed password for root from 218.92.0.248 port 60522 ssh2 Jul 19 19:22:49 vps sshd[421161]: Failed password for root from 218.92.0.248 port 60522 ssh2 ...	2020-07-20 01:31:49
106.75.141.160	attackspam	Jul 19 18:04:17 myvps sshd[25174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160 Jul 19 18:04:19 myvps sshd[25174]: Failed password for invalid user fcosta from 106.75.141.160 port 36258 ssh2 Jul 19 18:07:43 myvps sshd[27693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.141.160 ...	2020-07-20 01:44:36
92.255.254.115	attackbotsspam	Automatic report - Port Scan Attack	2020-07-20 01:20:10
220.130.108.212	attack	220.130.108.212 - - [19/Jul/2020:18:18:25 +0100] "POST /xmlrpc.php HTTP/1.1" 503 18211 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" 220.130.108.212 - - [19/Jul/2020:18:18:27 +0100] "POST /wp-login.php HTTP/1.1" 503 18036 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" 220.130.108.212 - - [19/Jul/2020:18:32:09 +0100] "POST /xmlrpc.php HTTP/1.1" 503 18270 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" ...	2020-07-20 01:37:10
192.35.169.24	attackbots	Sun Jul 19 18:08:02 2020 192.35.169.24:64359 TLS Error: TLS handshake failed	2020-07-20 01:30:17
139.59.91.254	attackspambots	Jul 19 18:06:47 ajax sshd[11849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.91.254 Jul 19 18:06:49 ajax sshd[11849]: Failed password for invalid user postgres from 139.59.91.254 port 48234 ssh2	2020-07-20 01:26:19
124.156.132.183	attackbotsspam	2020-07-19T18:20:25+0200 Failed SSH Authentication/Brute Force Attack. (Server 4)	2020-07-20 01:24:50
218.2.106.125	attackbots	TCP Port Scanning	2020-07-20 01:38:43
218.92.0.224	attack	Jul 19 19:26:27 server sshd[13034]: Failed none for root from 218.92.0.224 port 44891 ssh2 Jul 19 19:26:29 server sshd[13034]: Failed password for root from 218.92.0.224 port 44891 ssh2 Jul 19 19:26:34 server sshd[13034]: Failed password for root from 218.92.0.224 port 44891 ssh2	2020-07-20 01:34:59
192.96.204.235	attackbots	Jul 19 18:08:05 debian-2gb-nbg1-2 kernel: \[17433429.576557\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=192.96.204.235 DST=195.201.40.59 LEN=444 TOS=0x00 PREC=0x00 TTL=47 ID=37349 DF PROTO=UDP SPT=5069 DPT=5060 LEN=424	2020-07-20 01:25:11
95.85.26.23	attack	Jul 20 00:21:10 webhost01 sshd[20229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.26.23 Jul 20 00:21:12 webhost01 sshd[20229]: Failed password for invalid user grid from 95.85.26.23 port 45230 ssh2 ...	2020-07-20 01:35:33

Recently Reported IPs

123.235.175.173	171.126.107.153	217.219.214.50	175.10.191.109
34.221.240.161	181.113.22.6	177.152.185.106	171.101.228.181
108.41.16.48	201.110.99.86	212.154.23.118	125.72.95.194
185.89.43.131	107.160.96.116	154.127.72.214	192.12.113.252
94.248.11.29	58.19.15.105	171.231.83.214	125.44.22.103