120.0.21.102 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
120.0.215.246	attackbots	(ftpd) Failed FTP login from 120.0.215.246 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 20 08:27:49 ir1 pure-ftpd: (?@120.0.215.246) [WARNING] Authentication failed for user [anonymous]	2020-04-20 14:00:57

Type

Details

Datetime

120.0.215.246

attackbots

(ftpd) Failed FTP login from 120.0.215.246 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 20 08:27:49 ir1 pure-ftpd: (?@120.0.215.246) [WARNING] Authentication failed for user [anonymous]

2020-04-20 14:00:57

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.0.21.102
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30822
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;120.0.21.102.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012802 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 29 10:04:45 CST 2025
;; MSG SIZE  rcvd: 105

Host info

Host 102.21.0.120.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 102.21.0.120.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
123.243.25.76	attack	Jan 25 22:31:34 hpm sshd\[12819\]: Invalid user mc from 123.243.25.76 Jan 25 22:31:34 hpm sshd\[12819\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123-243-25-76.static.tpgi.com.au Jan 25 22:31:37 hpm sshd\[12819\]: Failed password for invalid user mc from 123.243.25.76 port 48659 ssh2 Jan 25 22:34:57 hpm sshd\[13067\]: Invalid user vonda from 123.243.25.76 Jan 25 22:34:57 hpm sshd\[13067\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123-243-25-76.static.tpgi.com.au	2020-01-26 16:54:35
191.241.239.90	attack	Jan 26 08:31:22 hcbbdb sshd\[20736\]: Invalid user sales from 191.241.239.90 Jan 26 08:31:22 hcbbdb sshd\[20736\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.241.239.90 Jan 26 08:31:24 hcbbdb sshd\[20736\]: Failed password for invalid user sales from 191.241.239.90 port 47910 ssh2 Jan 26 08:32:54 hcbbdb sshd\[20890\]: Invalid user parana from 191.241.239.90 Jan 26 08:32:54 hcbbdb sshd\[20890\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.241.239.90	2020-01-26 16:48:20
148.70.159.5	attack	Jan 26 09:08:52 MainVPS sshd[12425]: Invalid user ftptest from 148.70.159.5 port 57900 Jan 26 09:08:52 MainVPS sshd[12425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.159.5 Jan 26 09:08:52 MainVPS sshd[12425]: Invalid user ftptest from 148.70.159.5 port 57900 Jan 26 09:08:54 MainVPS sshd[12425]: Failed password for invalid user ftptest from 148.70.159.5 port 57900 ssh2 Jan 26 09:12:47 MainVPS sshd[20216]: Invalid user gz from 148.70.159.5 port 59504 ...	2020-01-26 16:25:39
87.81.169.74	attack	5x Failed Password	2020-01-26 16:26:36
42.189.233.42	attack	Jan 26 05:48:06 debian-2gb-nbg1-2 kernel: \[2273359.115648\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=42.189.233.42 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=55649 PROTO=TCP SPT=25983 DPT=37215 WINDOW=18519 RES=0x00 SYN URGP=0	2020-01-26 16:57:15
49.233.185.68	attackbotsspam	Unauthorized connection attempt detected from IP address 49.233.185.68 to port 2220 [J]	2020-01-26 16:34:10
121.66.35.37	attack	Jan 26 09:58:55 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=121.66.35.37, lip=212.111.212.230, session=\ Jan 26 09:59:04 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 7 secs\): user=\, method=PLAIN, rip=121.66.35.37, lip=212.111.212.230, session=\ Jan 26 09:59:18 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 12 secs\): user=\, method=PLAIN, rip=121.66.35.37, lip=212.111.212.230, session=\ Jan 26 10:07:54 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=121.66.35.37, lip=212.111.212.230, session=\ Jan 26 10:08:04 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 8 secs\): user=\, method=PLAIN, rip=121.66.35.37, lip=212.111.212.230, s ...	2020-01-26 16:42:18
93.57.25.54	attackspambots	Unauthorized connection attempt detected from IP address 93.57.25.54 to port 2220 [J]	2020-01-26 16:37:04
82.131.209.179	attackspambots	Unauthorized connection attempt detected from IP address 82.131.209.179 to port 2220 [J]	2020-01-26 16:39:51
49.233.139.79	attackbotsspam	Unauthorized connection attempt detected from IP address 49.233.139.79 to port 2220 [J]	2020-01-26 16:56:56
222.186.42.155	attack	Unauthorized connection attempt detected from IP address 222.186.42.155 to port 22 [T]	2020-01-26 16:14:15
85.48.33.182	attackbots	Unauthorized connection attempt detected from IP address 85.48.33.182 to port 2220 [J]	2020-01-26 16:55:10
87.197.154.139	attack	Jan 26 09:14:33 lnxmail61 sshd[458]: Failed password for root from 87.197.154.139 port 43776 ssh2 Jan 26 09:14:33 lnxmail61 sshd[458]: Failed password for root from 87.197.154.139 port 43776 ssh2	2020-01-26 16:14:59
218.92.0.179	attackbotsspam	Jan 26 09:21:58 * sshd[5673]: Failed password for root from 218.92.0.179 port 14863 ssh2 Jan 26 09:22:12 * sshd[5673]: error: maximum authentication attempts exceeded for root from 218.92.0.179 port 14863 ssh2 [preauth]	2020-01-26 16:29:29
176.31.162.82	attackbotsspam	Unauthorized connection attempt detected from IP address 176.31.162.82 to port 2220 [J]	2020-01-26 16:24:11

Recently Reported IPs

62.200.3.114	228.157.112.198	90.226.76.18	245.113.20.143
134.228.209.220	160.147.212.255	65.75.183.136	42.74.133.40
218.106.107.60	54.95.213.249	53.101.151.201	174.141.119.44
195.195.211.22	243.171.5.90	38.46.168.38	221.107.228.136
56.107.227.249	89.142.33.200	85.234.204.207	47.187.245.32