49.149.135.52 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Philippines

Internet Service Provider: DSL

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Lines containing failures of 49.149.135.52 Nov 19 13:47:08 hvs sshd[22969]: Invalid user tech from 49.149.135.52 port 19607 Nov 19 13:47:09 hvs sshd[22969]: Connection closed by invalid user tech 49.149.135.52 port 19607 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=49.149.135.52	2019-11-19 22:45:35

Type

Details

Datetime

attackspambots

Lines containing failures of 49.149.135.52
Nov 19 13:47:08 hvs sshd[22969]: Invalid user tech from 49.149.135.52 port 19607
Nov 19 13:47:09 hvs sshd[22969]: Connection closed by invalid user tech 49.149.135.52 port 19607 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=49.149.135.52

2019-11-19 22:45:35

Comments on same subnet:

IP	Type	Details	Datetime
49.149.135.97	attackbots	Unauthorized connection attempt from IP address 49.149.135.97 on Port 445(SMB)	2020-08-22 00:57:58

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.149.135.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28619
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.149.135.52.			IN	A

;; AUTHORITY SECTION:
.			214	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111900 1800 900 604800 86400

;; Query time: 581 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Nov 19 22:45:32 CST 2019
;; MSG SIZE  rcvd: 117

Host info

52.135.149.49.in-addr.arpa domain name pointer dsl.49.149.135.52.pldt.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
52.135.149.49.in-addr.arpa	name = dsl.49.149.135.52.pldt.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
49.206.12.208	attack	Unauthorized connection attempt from IP address 49.206.12.208 on Port 445(SMB)	2020-05-08 20:39:52
138.99.76.14	attackspambots	Automatic report - Port Scan Attack	2020-05-08 20:55:22
190.151.94.2	attackspam	Unauthorized connection attempt from IP address 190.151.94.2 on Port 445(SMB)	2020-05-08 20:27:15
177.136.39.254	attack	SSH brute force attempt	2020-05-08 20:26:08
27.71.81.174	attackspambots	Unauthorized connection attempt from IP address 27.71.81.174 on Port 445(SMB)	2020-05-08 21:01:37
190.143.202.194	attackspambots	Unauthorized connection attempt from IP address 190.143.202.194 on Port 445(SMB)	2020-05-08 20:35:25
81.4.100.71	attack	May 8 12:20:36 vlre-nyc-1 sshd\[7767\]: Invalid user zc from 81.4.100.71 May 8 12:20:36 vlre-nyc-1 sshd\[7767\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.4.100.71 May 8 12:20:38 vlre-nyc-1 sshd\[7767\]: Failed password for invalid user zc from 81.4.100.71 port 34694 ssh2 May 8 12:24:30 vlre-nyc-1 sshd\[7821\]: Invalid user user from 81.4.100.71 May 8 12:24:30 vlre-nyc-1 sshd\[7821\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.4.100.71 ...	2020-05-08 20:39:20
36.111.182.37	attackbotsspam	May 8 14:10:47 server sshd[15069]: Failed password for root from 36.111.182.37 port 38318 ssh2 May 8 14:12:55 server sshd[17116]: Failed password for invalid user ejabberd from 36.111.182.37 port 33910 ssh2 May 8 14:15:29 server sshd[19827]: Failed password for invalid user hy from 36.111.182.37 port 57738 ssh2	2020-05-08 21:05:59
177.76.195.60	attack	Unauthorized connection attempt from IP address 177.76.195.60 on Port 445(SMB)	2020-05-08 20:27:48
187.205.197.87	attackbotsspam	Unauthorized connection attempt from IP address 187.205.197.87 on Port 445(SMB)	2020-05-08 20:57:39
37.120.217.23	attack	REQUESTED PAGE: /Scripts/sendform.php	2020-05-08 20:23:03
168.196.120.2	attack	May 8 14:15:37 smtp postfix/smtpd[9138]: NOQUEUE: reject: RCPT from unknown[168.196.120.2]: 554 5.7.1 Service unavailable; Client host [168.196.120.2] blocked using cbl.abuseat.org; Blocked - see http://www.abuseat.org/lookup.cgi?ip=168.196.120.2; from= to= proto=ESMTP helo=<[168.196.120.2]> ...	2020-05-08 20:51:00
177.144.130.198	attackspam	Unauthorized connection attempt from IP address 177.144.130.198 on Port 445(SMB)	2020-05-08 20:58:59
220.249.48.242	attack	May 8 14:40:39 OPSO sshd\[7473\]: Invalid user grant from 220.249.48.242 port 2087 May 8 14:40:39 OPSO sshd\[7473\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.249.48.242 May 8 14:40:41 OPSO sshd\[7473\]: Failed password for invalid user grant from 220.249.48.242 port 2087 ssh2 May 8 14:43:14 OPSO sshd\[7725\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.249.48.242 user=root May 8 14:43:15 OPSO sshd\[7725\]: Failed password for root from 220.249.48.242 port 2088 ssh2	2020-05-08 20:51:57
142.93.201.112	attack	" "	2020-05-08 21:02:26

Recently Reported IPs

41.114.91.44	159.89.129.55	186.224.11.24	201.132.83.7
58.71.213.75	5.156.184.242	58.248.191.43	125.231.8.217
46.153.81.72	168.121.97.209	49.169.92.62	170.238.54.15
94.222.223.176	45.249.80.131	156.0.141.218	151.53.216.115
105.158.15.147	195.158.24.52	181.49.132.18	105.226.131.30