124.104.1.21 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Philippines

Internet Service Provider: Philippine Long Distance Telephone Company

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Sat, 20 Jul 2019 21:53:40 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-21 15:36:15

Comments on same subnet:

IP	Type	Details	Datetime
124.104.181.222	attack	124.104.181.222 - - [09/Sep/2020:17:31:29 +0000] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-" 124.104.181.222 - - [09/Sep/2020:17:32:30 +0000] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-" 124.104.181.222 - - [09/Sep/2020:17:33:31 +0000] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-" 124.104.181.222 - - [09/Sep/2020:17:34:34 +0000] "POST /xmlrpc.php HTTP/1.1" 503 19382 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-" 124.104.181.222 - - [09/Sep/2020:17:34:35 +0000] "POST /wp-login.php HTTP/1.1" 503 19240 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-"	2020-09-11 04:21:40
124.104.181.222	attackbots	124.104.181.222 - - [09/Sep/2020:17:31:29 +0000] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-" 124.104.181.222 - - [09/Sep/2020:17:32:30 +0000] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-" 124.104.181.222 - - [09/Sep/2020:17:33:31 +0000] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-" 124.104.181.222 - - [09/Sep/2020:17:34:34 +0000] "POST /xmlrpc.php HTTP/1.1" 503 19382 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-" 124.104.181.222 - - [09/Sep/2020:17:34:35 +0000] "POST /wp-login.php HTTP/1.1" 503 19240 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" "-"	2020-09-10 20:05:31
124.104.146.32	attackspam	Port Scan ...	2020-08-02 21:58:32
124.104.146.34	attack	Unauthorized connection attempt from IP address 124.104.146.34 on Port 445(SMB)	2020-07-27 03:35:07
124.104.18.153	attackbotsspam	20/7/26@08:01:32: FAIL: Alarm-Network address from=124.104.18.153 ...	2020-07-27 03:06:35
124.104.146.115	attackbots	Honeypot attack, port: 445, PTR: 124.104.146.115.pldt.net.	2020-07-22 06:56:46
124.104.13.105	attackbots	Jun 21 23:58:47 debian-2gb-nbg1-2 kernel: \[15035405.137265\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=124.104.13.105 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=47 ID=58420 PROTO=TCP SPT=46658 DPT=23 WINDOW=44378 RES=0x00 SYN URGP=0	2020-06-22 06:30:18
124.104.11.174	attackspam	Automatic report - XMLRPC Attack	2020-06-15 01:54:24
124.104.143.120	attackbots	1586750140 - 04/13/2020 05:55:40 Host: 124.104.143.120/124.104.143.120 Port: 445 TCP Blocked	2020-04-13 15:17:13
124.104.118.5	attackspambots	Brute-force general attack.	2020-03-07 06:02:30
124.104.185.67	attackbots	$f2bV_matches	2020-02-09 04:12:28
124.104.163.215	attackbotsspam	Logged in to my netflix account without me giving a password. Bulacan (PH) - 124.104.163.215 Last Used: 30/12/2019, 11:31:24 AM GMT+8	2020-01-16 17:15:39
124.104.189.8	attack	Wordpress login scanning	2019-12-11 00:34:47
124.104.145.236	attack	Unauthorised access (Nov 29) SRC=124.104.145.236 LEN=52 TOS=0x08 PREC=0x20 TTL=106 ID=28873 DF TCP DPT=1433 WINDOW=8192 SYN	2019-11-29 18:08:09
124.104.145.179	attackspam	Unauthorized connection attempt from IP address 124.104.145.179 on Port 445(SMB)	2019-06-26 01:15:07

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.104.1.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60300
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;124.104.1.21.			IN	A

;; AUTHORITY SECTION:
.			1526	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072100 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jul 21 15:36:03 CST 2019
;; MSG SIZE  rcvd: 116

Host info

21.1.104.124.in-addr.arpa domain name pointer 124.104.1.21.pldt.net.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
21.1.104.124.in-addr.arpa	name = 124.104.1.21.pldt.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
201.243.6.95	attackspam	445/tcp [2020-04-06]1pkt	2020-04-07 00:58:45
128.199.171.81	attackbotsspam	2020-04-06T17:35:28.091479rocketchat.forhosting.nl sshd[32475]: Failed password for root from 128.199.171.81 port 5472 ssh2 2020-04-06T17:36:33.262748rocketchat.forhosting.nl sshd[32508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.171.81 user=root 2020-04-06T17:36:35.219807rocketchat.forhosting.nl sshd[32508]: Failed password for root from 128.199.171.81 port 20690 ssh2 ...	2020-04-07 00:46:00
222.186.15.62	attack	Apr 6 19:13:11 plex sshd[22675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.62 user=root Apr 6 19:13:13 plex sshd[22675]: Failed password for root from 222.186.15.62 port 54688 ssh2	2020-04-07 01:18:51
69.94.158.97	attackbotsspam	Apr 6 18:30:40 web01.agentur-b-2.de postfix/smtpd[237763]: NOQUEUE: reject: RCPT from unknown[69.94.158.97]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Apr 6 18:30:40 web01.agentur-b-2.de postfix/smtpd[243220]: NOQUEUE: reject: RCPT from unknown[69.94.158.97]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Apr 6 18:30:43 web01.agentur-b-2.de postfix/smtpd[237763]: NOQUEUE: reject: RCPT from unknown[69.94.158.97]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Apr 6 18:30:43 web01.agentur-b-2.de postfix/smtpd[243220]: NOQUEUE: reject: RCPT from unknown[69.94.158.97]: 450 4.7.1 : Helo command rejected: Host not	2020-04-07 01:05:05
122.5.58.58	attackbots	$f2bV_matches	2020-04-07 00:59:11
168.197.157.2	attack	Automatic report - Port Scan Attack	2020-04-07 00:43:12
191.31.23.237	attackspam	Apr 6 17:36:08 host sshd[56766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.31.23.237 user=root Apr 6 17:36:09 host sshd[56766]: Failed password for root from 191.31.23.237 port 54058 ssh2 ...	2020-04-07 01:24:52
179.57.156.212	attack	1433/tcp [2020-04-06]1pkt	2020-04-07 01:14:02
167.172.57.75	attackbotsspam	2020-04-06T16:59:15.540207homeassistant sshd[20531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.57.75 user=root 2020-04-06T16:59:18.026206homeassistant sshd[20531]: Failed password for root from 167.172.57.75 port 60030 ssh2 ...	2020-04-07 01:20:30
222.186.175.151	attackspam	Apr 6 19:19:58 plex sshd[22847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.151 user=root Apr 6 19:19:59 plex sshd[22847]: Failed password for root from 222.186.175.151 port 8882 ssh2	2020-04-07 01:24:33
190.217.171.179	attackspam	37215/tcp [2020-04-06]1pkt	2020-04-07 01:10:34
41.208.150.114	attack	Apr 6 18:05:46 [HOSTNAME] sshd[14813]: User removed from 41.208.150.114 not allowed because not listed in AllowUsers Apr 6 18:05:46 [HOSTNAME] sshd[14813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.208.150.114 user=removed Apr 6 18:05:48 [HOSTNAME] sshd[14813]: Failed password for invalid user removed from 41.208.150.114 port 60836 ssh2 ...	2020-04-07 01:11:44
41.233.66.183	attackbotsspam	23/tcp [2020-04-06]1pkt	2020-04-07 00:56:37
185.60.107.18	attackbots	54007/udp [2020-04-06]1pkt	2020-04-07 00:45:45
175.101.78.144	attack	Honeypot attack, port: 81, PTR: PTR record not found	2020-04-07 01:14:27

Recently Reported IPs

98.51.73.164	183.80.21.60	234.183.181.144	29.95.170.140
179.156.114.186	238.8.18.9	155.175.36.212	189.96.247.224
194.167.107.35	178.16.138.56	136.60.93.43	149.184.15.121
94.233.242.250	188.219.94.32	217.113.242.191	178.99.64.194
69.42.69.201	238.103.112.124	132.247.192.249	187.39.119.146