1.2.1.105 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
1.2.151.181	attackspambots	Automatic report - Port Scan Attack	2020-10-09 07:14:42
1.2.151.181	attackbotsspam	Automatic report - Port Scan Attack	2020-10-08 23:42:10
1.2.151.181	attackbotsspam	Automatic report - Port Scan Attack	2020-10-08 15:38:33
1.2.170.127	attackbotsspam	[N1.H1.VM1] Port Scanner Detected Blocked by UFW	2020-10-02 01:38:07
1.2.170.127	attackspambots	[N1.H1.VM1] Port Scanner Detected Blocked by UFW	2020-10-01 17:44:43
1.2.157.199	attack	2020-07-05T00:46:50.444354suse-nuc sshd[19629]: Invalid user admin from 1.2.157.199 port 48517 ...	2020-09-27 05:23:48
1.2.165.135	attackspambots	2020-07-01T01:24:55.516782suse-nuc sshd[22101]: Invalid user sniffer from 1.2.165.135 port 59723 ...	2020-09-27 05:21:50
1.2.197.110	attackspam	2020-03-11T01:04:52.000470suse-nuc sshd[16764]: Invalid user avanthi from 1.2.197.110 port 61005 ...	2020-09-27 05:21:37
1.2.157.199	attackbots	2020-07-05T00:46:50.444354suse-nuc sshd[19629]: Invalid user admin from 1.2.157.199 port 48517 ...	2020-09-26 21:38:32
1.2.165.135	attack	2020-07-01T01:24:55.516782suse-nuc sshd[22101]: Invalid user sniffer from 1.2.165.135 port 59723 ...	2020-09-26 21:36:34
1.2.197.110	attackspam	2020-03-11T01:04:52.000470suse-nuc sshd[16764]: Invalid user avanthi from 1.2.197.110 port 61005 ...	2020-09-26 21:36:10
1.2.157.199	attackbotsspam	2020-07-05T00:46:50.444354suse-nuc sshd[19629]: Invalid user admin from 1.2.157.199 port 48517 ...	2020-09-26 13:20:24
1.2.165.135	attackspam	2020-07-01T01:24:55.516782suse-nuc sshd[22101]: Invalid user sniffer from 1.2.165.135 port 59723 ...	2020-09-26 13:18:17
1.2.197.110	attackbotsspam	2020-03-11T01:04:52.000470suse-nuc sshd[16764]: Invalid user avanthi from 1.2.197.110 port 61005 ...	2020-09-26 13:17:52
1.2.147.214	attackspambots	Unauthorized connection attempt from IP address 1.2.147.214 on Port 445(SMB)	2020-09-01 19:36:30

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.2.1.105
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50982
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.2.1.105.			IN	A

;; AUTHORITY SECTION:
.			499	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022092501 1800 900 604800 86400

;; Query time: 22 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 26 03:02:43 CST 2022
;; MSG SIZE  rcvd: 102

Host info

Host 105.1.2.1.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 105.1.2.1.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
213.184.252.110	attack	TCP (SYN) 213.184.252.110:60529 -> port 22, len 44	2020-09-20 13:45:14
36.112.131.191	attackbotsspam	TCP (SYN) 36.112.131.191:49819 -> port 31996, len 44	2020-09-20 13:35:56
177.67.49.122	attackbotsspam	Connection to SSH Honeypot - Detected by HoneypotDB	2020-09-20 13:19:30
49.235.125.17	attack	Sep 20 10:28:00 itv-usvr-01 sshd[29235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.125.17 user=root Sep 20 10:28:02 itv-usvr-01 sshd[29235]: Failed password for root from 49.235.125.17 port 35246 ssh2 Sep 20 10:34:28 itv-usvr-01 sshd[29538]: Invalid user test1 from 49.235.125.17 Sep 20 10:34:28 itv-usvr-01 sshd[29538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.125.17 Sep 20 10:34:28 itv-usvr-01 sshd[29538]: Invalid user test1 from 49.235.125.17 Sep 20 10:34:29 itv-usvr-01 sshd[29538]: Failed password for invalid user test1 from 49.235.125.17 port 48948 ssh2	2020-09-20 13:21:49
106.55.168.232	attackbots	Sep 19 21:23:39 abendstille sshd\[5482\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.168.232 user=root Sep 19 21:23:41 abendstille sshd\[5482\]: Failed password for root from 106.55.168.232 port 32888 ssh2 Sep 19 21:26:15 abendstille sshd\[7999\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.168.232 user=root Sep 19 21:26:17 abendstille sshd\[7999\]: Failed password for root from 106.55.168.232 port 33558 ssh2 Sep 19 21:28:55 abendstille sshd\[10816\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.168.232 user=root ...	2020-09-20 13:47:29
222.186.175.169	attackbotsspam	Sep 20 07:33:34 vps639187 sshd\[13518\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.169 user=root Sep 20 07:33:37 vps639187 sshd\[13518\]: Failed password for root from 222.186.175.169 port 21882 ssh2 Sep 20 07:33:41 vps639187 sshd\[13518\]: Failed password for root from 222.186.175.169 port 21882 ssh2 ...	2020-09-20 13:38:38
206.189.124.26	attack	Invalid user teamspeak3 from 206.189.124.26 port 46908	2020-09-20 13:40:46
45.55.61.114	attackspam	CMS (WordPress or Joomla) login attempt.	2020-09-20 13:51:36
164.132.56.243	attackbots	$f2bV_matches	2020-09-20 13:33:25
142.4.4.229	attack	142.4.4.229 - - [20/Sep/2020:03:30:36 +0100] "POST /wp-login.php HTTP/1.1" 200 2451 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.4.4.229 - - [20/Sep/2020:03:30:44 +0100] "POST /wp-login.php HTTP/1.1" 200 2493 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.4.4.229 - - [20/Sep/2020:03:30:48 +0100] "POST /wp-login.php HTTP/1.1" 200 2506 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-20 13:27:19
212.70.149.36	attackbotsspam	2020-09-20 08:16:02 auth_plain authenticator failed for (User) [212.70.149.36]: 535 Incorrect authentication data (set_id=coyote@lavrinenko.info) 2020-09-20 08:16:19 auth_plain authenticator failed for (User) [212.70.149.36]: 535 Incorrect authentication data (set_id=robo@lavrinenko.info) ...	2020-09-20 13:21:15
222.186.42.57	attackbotsspam	SSH bruteforce	2020-09-20 13:16:10
167.172.238.159	attackbotsspam	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-09-20 13:50:40
186.31.21.129	attackspambots	Listed on abuseat.org plus zen-spamhaus / proto=6 . srcport=20770 . dstport=23 . (2309)	2020-09-20 13:52:03
116.72.194.167	attackspam	23/tcp [2020-09-20]1pkt	2020-09-20 13:48:44

Recently Reported IPs

1.199.40.52	1.2.102.178	1.199.83.185	178.33.137.132
1.199.238.163	1.199.229.234	1.199.213.243	1.199.219.17
193.141.65.231	1.199.195.85	1.199.241.185	1.199.231.42
1.199.233.63	1.199.228.135	1.199.208.83	1.199.224.122
1.199.200.209	1.199.17.233	1.199.15.25	1.199.183.138