120.138.12.228

Basic Info

City: Chennai

Region: Tamil Nadu

Country: India

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
120.138.126.189	attackspambots	Brute forcing RDP port 3389	2020-06-30 20:46:40
120.138.125.2	attackbots	Unauthorized connection attempt from IP address 120.138.125.2 on Port 445(SMB)	2020-02-20 05:58:22
120.138.126.33	attackspam	Lines containing failures of 120.138.126.33 Feb 18 13:21:50 keyhelp sshd[22113]: Invalid user o0 from 120.138.126.33 port 54102 Feb 18 13:21:50 keyhelp sshd[22113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.138.126.33 Feb 18 13:21:51 keyhelp sshd[22113]: Failed password for invalid user o0 from 120.138.126.33 port 54102 ssh2 Feb 18 13:21:51 keyhelp sshd[22113]: Received disconnect from 120.138.126.33 port 54102:11: Bye Bye [preauth] Feb 18 13:21:51 keyhelp sshd[22113]: Disconnected from invalid user o0 120.138.126.33 port 54102 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=120.138.126.33	2020-02-18 22:38:12
120.138.126.33	attackspam	SSH/22 MH Probe, BF, Hack -	2020-02-12 21:58:38
120.138.125.2	attackspambots	Honeypot attack, port: 445, PTR: 2-125-138-120.mysipl.com.	2020-02-06 19:37:31
120.138.125.106	attack	Honeypot attack, port: 23, PTR: 106-125-138-120.mysipl.com.	2019-12-28 20:52:42
120.138.125.106	attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-12-16 22:02:41
120.138.125.106	attackbots	Dec 12 09:27:17 debian-2gb-vpn-nbg1-1 kernel: [510418.461045] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=120.138.125.106 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=3520 PROTO=TCP SPT=3203 DPT=23 WINDOW=29114 RES=0x00 SYN URGP=0	2019-12-12 17:44:23
120.138.124.122	attack	SpamReport	2019-11-30 15:08:29
120.138.125.222	attackbots	23/tcp [2019-11-15]1pkt	2019-11-15 21:08:03
120.138.125.2	attackbots	Unauthorized connection attempt from IP address 120.138.125.2 on Port 445(SMB)	2019-08-21 11:22:19
120.138.125.188	attackspambots	Aug 19 01:32:48 kapalua sshd\[25982\]: Invalid user support from 120.138.125.188 Aug 19 01:32:48 kapalua sshd\[25982\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.138.125.188 Aug 19 01:32:50 kapalua sshd\[25982\]: Failed password for invalid user support from 120.138.125.188 port 57444 ssh2 Aug 19 01:37:24 kapalua sshd\[26453\]: Invalid user emp from 120.138.125.188 Aug 19 01:37:24 kapalua sshd\[26453\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.138.125.188	2019-08-19 19:39:24

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.138.12.228
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29700
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;120.138.12.228.			IN	A

;; AUTHORITY SECTION:
.			452	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022120600 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 06 20:52:21 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 228.12.138.120.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 228.12.138.120.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
150.109.170.254	attackspambots	Unauthorized connection attempt detected from IP address 150.109.170.254 to port 3389 [J]	2020-02-06 00:38:33
220.246.59.12	attack	RDP Bruteforce	2020-02-06 00:59:01
79.137.72.98	attackbots	detected by Fail2Ban	2020-02-06 01:10:46
190.85.145.162	attackspam	Unauthorized connection attempt detected from IP address 190.85.145.162 to port 2220 [J]	2020-02-06 01:08:22
185.143.223.97	attackspambots	Feb 5 16:31:02 nopemail postfix/smtpd[13467]: NOQUEUE: reject: RCPT from unknown[185.143.223.97]: 450 4.1.8 <2vg2iz5dzcs2p74s@corax-consult.ru>: Sender address rejected: Domain not found; from=<2vg2iz5dzcs2p74s@corax-consult.ru> to= proto=ESMTP helo=<[185.143.223.97]> ...	2020-02-06 00:55:41
45.220.84.135	spam	As usual with SPAMMERS and ROBERS from Amazon, used for SPAM, PHISHING and SCAM !	2020-02-06 00:39:52
149.200.144.173	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-06 01:08:09
45.136.108.42	attack	basic auth dictionary attack	2020-02-06 00:28:30
212.47.244.235	attackspambots	Feb 5 17:47:37 vpn01 sshd[5307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.47.244.235 Feb 5 17:47:39 vpn01 sshd[5307]: Failed password for invalid user informix from 212.47.244.235 port 46302 ssh2 ...	2020-02-06 01:08:52
93.174.95.41	attack	Feb 5 17:09:03 debian-2gb-nbg1-2 kernel: \[3178189.856330\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=93.174.95.41 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=61506 PROTO=TCP SPT=57107 DPT=26869 WINDOW=1024 RES=0x00 SYN URGP=0	2020-02-06 00:46:06
172.81.237.219	attackspambots	Unauthorized connection attempt detected from IP address 172.81.237.219 to port 2220 [J]	2020-02-06 00:21:14
116.196.123.45	attackbots	Feb 5 06:54:10 web1 sshd[6875]: Invalid user servers from 116.196.123.45 Feb 5 06:54:10 web1 sshd[6875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.123.45 Feb 5 06:54:12 web1 sshd[6875]: Failed password for invalid user servers from 116.196.123.45 port 44501 ssh2 Feb 5 06:54:12 web1 sshd[6875]: Received disconnect from 116.196.123.45: 11: Bye Bye [preauth] Feb 5 07:21:05 web1 sshd[9206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.123.45 user=r.r Feb 5 07:21:08 web1 sshd[9206]: Failed password for r.r from 116.196.123.45 port 50864 ssh2 Feb 5 07:21:08 web1 sshd[9206]: Received disconnect from 116.196.123.45: 11: Bye Bye [preauth] Feb 5 07:26:08 web1 sshd[9571]: Invalid user com from 116.196.123.45 Feb 5 07:26:08 web1 sshd[9571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.123.45 Feb 5 07:26:10 web1 sshd........ -------------------------------	2020-02-06 01:06:13
103.66.73.10	attackbotsspam	Unauthorized connection attempt from IP address 103.66.73.10 on Port 445(SMB)	2020-02-06 00:47:31
139.59.43.175	attackspam	Feb 5 16:07:19 cp sshd[10323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.43.175	2020-02-06 01:05:40
178.128.196.128	attack	TARGET: /.vscode/sftp.json	2020-02-06 00:56:21

Recently Reported IPs

8.218.119.2	8.218.139.168	8.210.222.105	114.80.36.60
220.132.169.174	26.125.86.8	105.251.131.34	122.188.51.189
157.255.174.253	200.49.14.165	116.129.253.198	61.0.38.93
217.51.103.12	165.48.253.204	80.173.73.228	232.197.32.40
25.48.33.164	191.14.129.25	112.166.225.226	243.246.144.173