120.211.142.16

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
120.211.142.41	attackspam	Oct 13 00:40:13 journals sshd\[39951\]: Invalid user klausdieter from 120.211.142.41 Oct 13 00:40:13 journals sshd\[39951\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.211.142.41 Oct 13 00:40:14 journals sshd\[39951\]: Failed password for invalid user klausdieter from 120.211.142.41 port 31845 ssh2 Oct 13 00:44:24 journals sshd\[40402\]: Invalid user jeff from 120.211.142.41 Oct 13 00:44:24 journals sshd\[40402\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.211.142.41 ...	2020-10-13 13:08:02
120.211.142.41	attack	Oct 13 00:40:13 journals sshd\[39951\]: Invalid user klausdieter from 120.211.142.41 Oct 13 00:40:13 journals sshd\[39951\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.211.142.41 Oct 13 00:40:14 journals sshd\[39951\]: Failed password for invalid user klausdieter from 120.211.142.41 port 31845 ssh2 Oct 13 00:44:24 journals sshd\[40402\]: Invalid user jeff from 120.211.142.41 Oct 13 00:44:24 journals sshd\[40402\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.211.142.41 ...	2020-10-13 05:54:11
120.211.142.38	attackbots	Attempted connection to port 1433.	2020-06-15 02:34:37

Type

Details

Datetime

120.211.142.41

attackspam

Oct 13 00:40:13 journals sshd\[39951\]: Invalid user klausdieter from 120.211.142.41
Oct 13 00:40:13 journals sshd\[39951\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.211.142.41
Oct 13 00:40:14 journals sshd\[39951\]: Failed password for invalid user klausdieter from 120.211.142.41 port 31845 ssh2
Oct 13 00:44:24 journals sshd\[40402\]: Invalid user jeff from 120.211.142.41
Oct 13 00:44:24 journals sshd\[40402\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.211.142.41
...

2020-10-13 13:08:02

120.211.142.41

attack

Oct 13 00:40:13 journals sshd\[39951\]: Invalid user klausdieter from 120.211.142.41
Oct 13 00:40:13 journals sshd\[39951\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.211.142.41
Oct 13 00:40:14 journals sshd\[39951\]: Failed password for invalid user klausdieter from 120.211.142.41 port 31845 ssh2
Oct 13 00:44:24 journals sshd\[40402\]: Invalid user jeff from 120.211.142.41
Oct 13 00:44:24 journals sshd\[40402\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.211.142.41
...

2020-10-13 05:54:11

120.211.142.38

attackbots

Attempted connection to port 1433.

2020-06-15 02:34:37

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.211.142.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53682
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;120.211.142.16.			IN	A

;; AUTHORITY SECTION:
.			389	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 18:42:13 CST 2022
;; MSG SIZE  rcvd: 107

Host info

b';; connection timed out; no servers could be reached
'

Nslookup info:

server can't find 120.211.142.16.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.252.125.103	attackspam	Feb 19 22:58:47 grey postfix/smtpd\[15315\]: NOQUEUE: reject: RCPT from unknown\[222.252.125.103\]: 554 5.7.1 Service unavailable\; Client host \[222.252.125.103\] blocked using dul.dnsbl.sorbs.net\; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml\?222.252.125.103\; from=\ to=\ proto=SMTP helo=\ ...	2020-02-20 06:07:18
120.224.212.6	attackbots	Feb 19 22:58:57 plex sshd[27850]: Invalid user msagent from 120.224.212.6 port 33014	2020-02-20 06:01:55
62.234.66.50	attack	Feb 19 11:55:17 php1 sshd\[18290\]: Invalid user ec2-user from 62.234.66.50 Feb 19 11:55:17 php1 sshd\[18290\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.66.50 Feb 19 11:55:20 php1 sshd\[18290\]: Failed password for invalid user ec2-user from 62.234.66.50 port 38727 ssh2 Feb 19 11:58:38 php1 sshd\[18613\]: Invalid user vmail from 62.234.66.50 Feb 19 11:58:38 php1 sshd\[18613\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.66.50	2020-02-20 06:11:49
222.186.175.169	attackbots	" "	2020-02-20 06:08:24
61.177.172.128	attackspam	Feb 19 22:58:47 minden010 sshd[24464]: Failed password for root from 61.177.172.128 port 36755 ssh2 Feb 19 22:58:50 minden010 sshd[24464]: Failed password for root from 61.177.172.128 port 36755 ssh2 Feb 19 22:58:59 minden010 sshd[24464]: Failed password for root from 61.177.172.128 port 36755 ssh2 Feb 19 22:58:59 minden010 sshd[24464]: error: maximum authentication attempts exceeded for root from 61.177.172.128 port 36755 ssh2 [preauth] ...	2020-02-20 06:00:14
106.13.121.175	attack	Automatic report - Banned IP Access	2020-02-20 06:22:10
188.237.135.172	attackspambots	Honeypot attack, port: 445, PTR: host-static-188-237-135-172.moldtelecom.md.	2020-02-20 05:45:03
49.82.119.202	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-20 05:42:44
121.159.62.53	attackbotsspam	Honeypot attack, port: 81, PTR: PTR record not found	2020-02-20 05:48:56
185.74.4.110	attackbotsspam	Automatic report - Banned IP Access	2020-02-20 05:46:22
212.66.48.35	attackbots	Port probing on unauthorized port 445	2020-02-20 05:50:11
183.91.73.114	attackspambots	Unauthorized connection attempt from IP address 183.91.73.114 on Port 445(SMB)	2020-02-20 05:45:22
78.191.203.164	attack	Automatic report - Port Scan Attack	2020-02-20 05:52:03
222.186.175.150	attack	$f2bV_matches \| Triggered by Fail2Ban at Vostok web server	2020-02-20 06:16:11
106.13.112.221	attack	Feb 19 22:56:14 ns3042688 sshd\[22952\]: Invalid user plex from 106.13.112.221 Feb 19 22:56:14 ns3042688 sshd\[22952\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.221 Feb 19 22:56:16 ns3042688 sshd\[22952\]: Failed password for invalid user plex from 106.13.112.221 port 47394 ssh2 Feb 19 22:58:41 ns3042688 sshd\[23134\]: Invalid user tomcat from 106.13.112.221 Feb 19 22:58:41 ns3042688 sshd\[23134\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.221 ...	2020-02-20 06:11:04

Recently Reported IPs

13.80.134.157	60.222.244.89	121.43.128.131	103.161.164.109
142.129.163.253	178.72.68.247	87.250.224.170	104.237.240.174
73.219.128.78	213.14.136.71	110.77.145.159	187.19.127.179
217.116.58.155	178.93.17.185	95.233.85.253	1.36.99.80
113.247.116.66	115.98.235.254	106.115.163.53	156.205.23.31