84.54.123.149 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Uzbekistan

Internet Service Provider: Uzbektelekom Joint Stock Company

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Email rejected due to spam filtering	2020-05-30 14:33:40

Comments on same subnet:

IP	Type	Details	Datetime
84.54.123.34	attack	IP: 84.54.123.34 Ports affected Simple Mail Transfer (25) Found in DNSBL('s) ASN Details AS8193 Uzbektelekom Joint Stock Company Uzbekistan (UZ) CIDR 84.54.120.0/22 Log Date: 6/06/2020 12:11:46 PM UTC	2020-06-07 01:04:54
84.54.123.164	attackbotsspam	Email rejected due to spam filtering	2020-05-30 14:18:38
84.54.123.18	attackspam	Mar 11 11:31:22 mxgate1 postfix/postscreen[6311]: CONNECT from [84.54.123.18]:3289 to [176.31.12.44]:25 Mar 11 11:31:22 mxgate1 postfix/dnsblog[6802]: addr 84.54.123.18 listed by domain zen.spamhaus.org as 127.0.0.11 Mar 11 11:31:22 mxgate1 postfix/dnsblog[6802]: addr 84.54.123.18 listed by domain zen.spamhaus.org as 127.0.0.4 Mar 11 11:31:22 mxgate1 postfix/dnsblog[6779]: addr 84.54.123.18 listed by domain cbl.abuseat.org as 127.0.0.2 Mar 11 11:31:22 mxgate1 postfix/dnsblog[6777]: addr 84.54.123.18 listed by domain b.barracudacentral.org as 127.0.0.2 Mar 11 11:31:28 mxgate1 postfix/postscreen[6311]: DNSBL rank 4 for [84.54.123.18]:3289 Mar x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=84.54.123.18	2020-03-12 00:02:37
84.54.123.48	attackspambots	Feb 23 22:48:53 grey postfix/smtpd\[23805\]: NOQUEUE: reject: RCPT from unknown\[84.54.123.48\]: 554 5.7.1 Service unavailable\; Client host \[84.54.123.48\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[84.54.123.48\]\; from=\ to=\ proto=SMTP helo=\ ...	2020-02-24 06:21:16
84.54.123.136	attackbots	Host Scan	2019-12-11 18:45:38

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 84.54.123.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41989
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;84.54.123.149.			IN	A

;; AUTHORITY SECTION:
.			377	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020053000 1800 900 604800 86400

;; Query time: 110 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat May 30 14:33:32 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 149.123.54.84.in-addr.arpa not found: 5(REFUSED)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 149.123.54.84.in-addr.arpa: REFUSED

Related IP info:

Related comments:

IP	Type	Details	Datetime
149.202.164.82	attackbots	(sshd) Failed SSH login from 149.202.164.82 (FR/France/ip-149-202-164.eu): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 5 05:54:39 ubnt-55d23 sshd[11859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.164.82 user=root Jun 5 05:54:41 ubnt-55d23 sshd[11859]: Failed password for root from 149.202.164.82 port 58310 ssh2	2020-06-05 15:31:23
27.255.77.248	attack	(country_code/South/-) SMTP Bruteforcing attempts	2020-06-05 16:04:03
79.124.62.82	attackbotsspam	firewall-block, port(s): 3031/tcp, 5580/tcp, 6020/tcp	2020-06-05 16:01:22
139.59.32.241	attackbots	detected by Fail2Ban	2020-06-05 15:49:18
120.31.143.209	attackspam	Invalid user dnyakundi from 120.31.143.209 port 34130	2020-06-05 15:40:31
216.218.206.67	attackspambots	UDP 216.218.206.67:35340 -> port 137, len 78	2020-06-05 15:36:12
31.170.51.56	attackbotsspam	(IR/Iran/-) SMTP Bruteforcing attempts	2020-06-05 15:56:48
190.119.190.122	attack	Jun 5 08:01:21 legacy sshd[20012]: Failed password for root from 190.119.190.122 port 35610 ssh2 Jun 5 08:05:20 legacy sshd[20126]: Failed password for root from 190.119.190.122 port 40004 ssh2 ...	2020-06-05 15:58:55
192.95.42.46	attackspambots	192.95.42.46 - - [05/Jun/2020:04:53:42 +0300] "GET /status?full=true HTTP/1.1" 404 1391 "-" "Python-urllib/2.7" 192.95.42.46 - - [05/Jun/2020:04:53:43 +0300] "GET /jmx-console HTTP/1.1" 404 1391 "-" "Python-urllib/2.7" 192.95.42.46 - - [05/Jun/2020:04:53:44 +0300] "GET /manager/html HTTP/1.1" 404 1391 "-" "Python-urllib/2.7" ...	2020-06-05 15:47:54
198.108.66.236	attackbotsspam	TCP (SYN) 198.108.66.236:48874 -> port 9277, len 44	2020-06-05 15:59:57
5.135.164.201	attackbotsspam	2020-06-05T05:51:18.968789rocketchat.forhosting.nl sshd[31877]: Failed password for root from 5.135.164.201 port 54788 ssh2 2020-06-05T05:54:45.251079rocketchat.forhosting.nl sshd[31907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.164.201 user=root 2020-06-05T05:54:47.090836rocketchat.forhosting.nl sshd[31907]: Failed password for root from 5.135.164.201 port 58700 ssh2 ...	2020-06-05 15:28:20
31.170.60.72	attackbots	(IR/Iran/-) SMTP Bruteforcing attempts	2020-06-05 15:49:06
31.170.53.175	attackbots	(IR/Iran/-) SMTP Bruteforcing attempts	2020-06-05 15:50:46
31.170.48.132	attackbotsspam	(IR/Iran/-) SMTP Bruteforcing attempts	2020-06-05 15:58:43
36.107.231.56	attackspam	Jun 5 08:35:41 mellenthin sshd[24138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.107.231.56 user=root Jun 5 08:35:42 mellenthin sshd[24138]: Failed password for invalid user root from 36.107.231.56 port 35804 ssh2	2020-06-05 15:39:00

Recently Reported IPs

196.207.175.175	149.54.21.180	31.14.40.111	218.82.165.112
45.134.17.186	172.96.8.178	113.167.172.117	190.53.171.193
62.87.116.90	123.174.188.254	113.178.69.166	87.255.211.194
36.79.255.98	14.237.75.154	76.171.132.45	113.186.55.126
194.135.142.212	2.133.38.150	123.49.3.10	213.230.118.56