121.148.2.219 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
121.148.254.176	attackspambots	Aug 17 03:00:10 host-itldc-nl sshd[11679]: User root from 121.148.254.176 not allowed because not listed in AllowUsers Aug 17 12:03:10 host-itldc-nl sshd[17820]: User root from 121.148.254.176 not allowed because not listed in AllowUsers Aug 17 14:00:42 host-itldc-nl sshd[67060]: User root from 121.148.254.176 not allowed because not listed in AllowUsers ...	2020-08-18 03:40:23
121.148.208.201	attackbots	Unauthorized connection attempt detected from IP address 121.148.208.201 to port 85	2019-12-29 08:16:15

Type

Details

Datetime

121.148.254.176

attackspambots

Aug 17 03:00:10 host-itldc-nl sshd[11679]: User root from 121.148.254.176 not allowed because not listed in AllowUsers
Aug 17 12:03:10 host-itldc-nl sshd[17820]: User root from 121.148.254.176 not allowed because not listed in AllowUsers
Aug 17 14:00:42 host-itldc-nl sshd[67060]: User root from 121.148.254.176 not allowed because not listed in AllowUsers
...

2020-08-18 03:40:23

121.148.208.201

attackbots

Unauthorized connection attempt detected from IP address 121.148.208.201 to port 85

2019-12-29 08:16:15

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.148.2.219
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48403
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;121.148.2.219.			IN	A

;; AUTHORITY SECTION:
.			367	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022010801 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 09 10:41:16 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 219.2.148.121.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 219.2.148.121.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
223.71.1.209	attack	Sep 30 03:03:40 pornomens sshd\[27412\]: Invalid user design from 223.71.1.209 port 44460 Sep 30 03:03:40 pornomens sshd\[27412\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.71.1.209 Sep 30 03:03:42 pornomens sshd\[27412\]: Failed password for invalid user design from 223.71.1.209 port 44460 ssh2 ...	2020-09-30 09:18:21
36.110.217.140	attackspam	SSH Invalid Login	2020-09-30 09:17:01
4.17.231.208	attackspam	Sep 29 15:04:16 firewall sshd[5574]: Invalid user admin from 4.17.231.208 Sep 29 15:04:17 firewall sshd[5574]: Failed password for invalid user admin from 4.17.231.208 port 38856 ssh2 Sep 29 15:08:39 firewall sshd[5658]: Invalid user leslie from 4.17.231.208 ...	2020-09-30 09:22:12
54.36.190.245	attack	Invalid user ftp from 54.36.190.245 port 43074	2020-09-30 09:15:52
139.59.7.177	attack	$f2bV_matches	2020-09-30 09:11:43
119.45.5.55	attack	Sep 29 23:52:55 pve1 sshd[21883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.5.55 Sep 29 23:52:57 pve1 sshd[21883]: Failed password for invalid user tom from 119.45.5.55 port 53660 ssh2 ...	2020-09-30 08:35:40
149.129.136.90	attackspam	20 attempts against mh-ssh on light	2020-09-30 08:36:29
36.89.213.100	attackspam	Invalid user dave from 36.89.213.100 port 56814	2020-09-30 09:06:50
188.131.191.40	attackbots	Sep 29 21:21:01 OPSO sshd\[21294\]: Invalid user cyrus from 188.131.191.40 port 42916 Sep 29 21:21:01 OPSO sshd\[21294\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.191.40 Sep 29 21:21:03 OPSO sshd\[21294\]: Failed password for invalid user cyrus from 188.131.191.40 port 42916 ssh2 Sep 29 21:22:24 OPSO sshd\[21605\]: Invalid user name from 188.131.191.40 port 58286 Sep 29 21:22:24 OPSO sshd\[21605\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.191.40	2020-09-30 09:12:47
134.122.20.211	attackspam	134.122.20.211 - - [30/Sep/2020:01:44:22 +0100] "POST /wp-login.php HTTP/1.1" 200 2660 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.122.20.211 - - [30/Sep/2020:01:44:28 +0100] "POST /wp-login.php HTTP/1.1" 200 2668 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.122.20.211 - - [30/Sep/2020:01:44:31 +0100] "POST /wp-login.php HTTP/1.1" 200 2626 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-30 08:52:54
119.44.20.30	attackbots	SSH Invalid Login	2020-09-30 09:03:00
96.43.180.119	attackbotsspam	Sep 28 22:34:38 mellenthin postfix/smtpd[8990]: NOQUEUE: reject: RCPT from unknown[96.43.180.119]: 554 5.7.1 Service unavailable; Client host [96.43.180.119] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/96.43.180.119; from= to= proto=ESMTP helo=<[96.43.180.119]>	2020-09-30 08:39:19
91.105.152.193	attackspambots	TCP (SYN) 91.105.152.193:27929 -> port 8080, len 40	2020-09-30 09:12:06
188.40.210.30	attackspam	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-09-29T08:00:18Z	2020-09-30 08:59:21
187.176.191.30	attack	Automatic report - Port Scan Attack	2020-09-30 08:58:22

Recently Reported IPs

195.122.191.249	41.199.13.178	87.132.51.254	235.137.15.65
191.102.83.147	73.230.194.151	67.222.96.146	99.80.163.152
106.69.127.105	48.35.63.251	245.248.110.164	99.185.99.13
48.54.84.174	226.63.251.132	55.45.29.135	23.255.193.52
108.227.100.56	183.95.107.194	200.79.1.212	68.249.211.219