AbuseIPDB » 149.129.137.131

Check an IP Address, Domain Name, or Subnet

e.g. 3.239.242.55, microsoft.com, or 5.188.10.0/24

149.129.137.131 was found in our database!

This IP was reported 891 times. Confidence of Abuse is 100%: ?

100%

ISP	Alibaba.com Singapore E-Commerce Private Limited
Usage Type	Data Center/Web Hosting/Transit
Domain Name	alibaba-inc.com
Country	India
City	Bengaluru, Karnataka

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 149.129.137.131

Whois 149.129.137.131

IP Abuse Reports for 149.129.137.131:

This IP address has been reported a total of 891 times from 75 distinct sources. 149.129.137.131 was first reported on November 24th 2020, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
ajw.one	12 Jan 2021	Message: IPS Alert 1: Attempted Administrator Privilege Gain. Signature ETEXPLOIT [401TRG] ZeroShell ... show moreMessage: IPS Alert 1: Attempted Administrator Privilege Gain. Signature ETEXPLOIT [401TRG] ZeroShell RCE Inbound (CVE-2019-12725). From:149.129.137.131:58092, to: 10.10.10.10:80, protocol: TCP show less	Brute-Force Web App Attack
ajw.one	12 Jan 2021	Message: IPS Alert 1: Attempted Administrator Privilege Gain. Signature ETWEB_SERVER Suspicious Chmo ... show moreMessage: IPS Alert 1: Attempted Administrator Privilege Gain. Signature ETWEB_SERVER Suspicious Chmod Usage in URI (Inbound). From: 149.129.137.131:58092,to: 10.10.10.10:80, protocol: TCP show less	Brute-Force Web App Attack
ajw.one	12 Jan 2021	Message: IPS Alert 2: Potentially Bad Traffic. Signature ET WEB_SERVER WebShellGeneric - wget http - ... show moreMessage: IPS Alert 2: Potentially Bad Traffic. Signature ET WEB_SERVER WebShellGeneric - wget http - POST. From: 149.129.137.131:40870, to: 10.10.10.10:80,protocol: TCP show less	Brute-Force Web App Attack
ajw.one	12 Jan 2021	Message: IPS Alert 2: Potentially Bad Traffic. Signature ET WEB_SERVER WebShellGeneric - wget http - ... show moreMessage: IPS Alert 2: Potentially Bad Traffic. Signature ET WEB_SERVER WebShellGeneric - wget http - POST. From: 149.129.137.131:56502, to: 10.10.10.10:80,protocol: TCP show less	Brute-Force Web App Attack
ajw.one	12 Jan 2021	Message: IPS Alert 1: Attempted User Privilege Gain. Signature ET EXPLOITPossible ZyXEL P660HN-T v1 ... show moreMessage: IPS Alert 1: Attempted User Privilege Gain. Signature ET EXPLOITPossible ZyXEL P660HN-T v1 RCE. From: 149.129.137.131:56502, to: 10.10.10.10:80,protocol: TCP show less	Brute-Force Web App Attack
ajw.one	12 Jan 2021	Message: IPS Alert 1: Web Application Attack. Signature ET WEB_SERVER 401TRGGeneric Webshell Request ... show moreMessage: IPS Alert 1: Web Application Attack. Signature ET WEB_SERVER 401TRGGeneric Webshell Request - POST with wget in body. From: 149.129.137.131:56502,to: 10.10.10.10:80, protocol: TCP show less	Brute-Force Web App Attack
ajw.one	12 Jan 2021	Message: IPS Alert 1: Web Application Attack. Signature ET WEB_SERVER 401TRGGeneric Webshell Request ... show moreMessage: IPS Alert 1: Web Application Attack. Signature ET WEB_SERVER 401TRGGeneric Webshell Request - POST with wget in body. From: 149.129.137.131:40870,to: 10.10.10.10:80, protocol: TCP show less	Brute-Force Web App Attack
ajw.one	12 Jan 2021	Message: IPS Alert 1: Attempted Administrator Privilege Gain. Signature ETEXPLOIT [401TRG] ZeroShell ... show moreMessage: IPS Alert 1: Attempted Administrator Privilege Gain. Signature ETEXPLOIT [401TRG] ZeroShell RCE Inbound (CVE-2019-12725). From:149.129.137.131:39890, to: 10.10.10.10:80, protocol: TCP show less	Brute-Force Web App Attack
ajw.one	12 Jan 2021	Message: IPS Alert 1: Attempted Administrator Privilege Gain. Signature ETWEB_SERVER Suspicious Chmo ... show moreMessage: IPS Alert 1: Attempted Administrator Privilege Gain. Signature ETWEB_SERVER Suspicious Chmod Usage in URI (Inbound). From: 149.129.137.131:39890,to: 10.10.10.10:80, protocol: TCP show less	Brute-Force Web App Attack
ajw.one	12 Jan 2021	Message: IPS Alert 1: Attempted Administrator Privilege Gain. Signature ETEXPLOIT [401TRG] ZeroShell ... show moreMessage: IPS Alert 1: Attempted Administrator Privilege Gain. Signature ETEXPLOIT [401TRG] ZeroShell RCE Inbound (CVE-2019-12725). From:149.129.137.131:55356, to: 10.10.10.10:80, protocol: TCP show less	Brute-Force Web App Attack
ajw.one	12 Jan 2021	Message: IPS Alert 1: Attempted Administrator Privilege Gain. Signature ETEXPLOIT [401TRG] ZeroShell ... show moreMessage: IPS Alert 1: Attempted Administrator Privilege Gain. Signature ETEXPLOIT [401TRG] ZeroShell RCE Inbound (CVE-2019-12725). From:149.129.137.131:47318, to: 10.10.10.10:80, protocol: TCP show less	Brute-Force Web App Attack
ajw.one	12 Jan 2021	Message: IPS Alert 1: Attempted Administrator Privilege Gain. Signature ETWEB_SERVER Suspicious Chmo ... show moreMessage: IPS Alert 1: Attempted Administrator Privilege Gain. Signature ETWEB_SERVER Suspicious Chmod Usage in URI (Inbound). From: 149.129.137.131:55356,to: 10.10.10.10:80, protocol: TCP show less	Brute-Force Web App Attack
ajw.one	12 Jan 2021	Message: IPS Alert 1: Attempted Administrator Privilege Gain. Signature ETEXPLOIT [401TRG] ZeroShell ... show moreMessage: IPS Alert 1: Attempted Administrator Privilege Gain. Signature ETEXPLOIT [401TRG] ZeroShell RCE Inbound (CVE-2019-12725). From:149.129.137.131:38430, to: 10.10.10.10:80, protocol: TCP show less	Brute-Force Web App Attack
ajw.one	12 Jan 2021	Message: IPS Alert 2: Potentially Bad Traffic. Signature ET WEB_SERVER WebShellGeneric - wget http - ... show moreMessage: IPS Alert 2: Potentially Bad Traffic. Signature ET WEB_SERVER WebShellGeneric - wget http - POST. From: 149.129.137.131:41764, to: 10.10.10.10:80,protocol: TCP show less	Brute-Force Web App Attack
ajw.one	12 Jan 2021	Message: IPS Alert 1: Web Application Attack. Signature ET WEB_SERVER 401TRGGeneric Webshell Request ... show moreMessage: IPS Alert 1: Web Application Attack. Signature ET WEB_SERVER 401TRGGeneric Webshell Request - POST with wget in body. From: 149.129.137.131:41764,to: 10.10.10.10:80, protocol: TCP show less	Brute-Force Web App Attack