124.239.12.155

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
124.239.128.148	attack	[Fri Feb 21 22:16:31 2020] - Syn Flood From IP: 124.239.128.148 Port: 6000	2020-03-23 22:42:56
124.239.128.147	attackspambots	[Sat Feb 22 21:35:29 2020] - Syn Flood From IP: 124.239.128.147 Port: 6000	2020-03-23 21:57:27
124.239.128.148	attackspambots	Doing Port Scan , please Block or report to IANA , thanks	2020-02-23 15:09:39

Type

Details

Datetime

124.239.128.148

attack

[Fri Feb 21 22:16:31 2020] - Syn Flood From IP: 124.239.128.148 Port: 6000

2020-03-23 22:42:56

124.239.128.147

attackspambots

[Sat Feb 22 21:35:29 2020] - Syn Flood From IP: 124.239.128.147 Port: 6000

2020-03-23 21:57:27

124.239.128.148

attackspambots

Doing Port Scan , please Block or report to IANA , thanks

2020-02-23 15:09:39

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.239.12.155
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34843
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;124.239.12.155.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025040601 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 07 13:09:50 CST 2025
;; MSG SIZE  rcvd: 107

Host info

Host 155.12.239.124.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 155.12.239.124.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
122.180.48.29	attackbots	Jun 12 16:13:49 ip-172-31-62-245 sshd\[3841\]: Invalid user admin from 122.180.48.29\ Jun 12 16:13:51 ip-172-31-62-245 sshd\[3841\]: Failed password for invalid user admin from 122.180.48.29 port 43848 ssh2\ Jun 12 16:15:35 ip-172-31-62-245 sshd\[3876\]: Failed password for root from 122.180.48.29 port 57684 ssh2\ Jun 12 16:17:15 ip-172-31-62-245 sshd\[3890\]: Failed password for root from 122.180.48.29 port 43284 ssh2\ Jun 12 16:18:56 ip-172-31-62-245 sshd\[3914\]: Failed password for root from 122.180.48.29 port 57102 ssh2\	2020-06-13 00:30:24
141.98.81.42	attackspam	Jun 12 16:47:26 *** sshd[30114]: User root from 141.98.81.42 not allowed because not listed in AllowUsers	2020-06-13 00:58:34
45.55.184.78	attackbots	(sshd) Failed SSH login from 45.55.184.78 (US/United States/-): 5 in the last 3600 secs	2020-06-13 00:18:37
121.15.7.26	attack	k+ssh-bruteforce	2020-06-13 00:19:31
180.235.4.131	attackspambots	1591963525 - 06/12/2020 14:05:25 Host: 180.235.4.131/180.235.4.131 Port: 445 TCP Blocked	2020-06-13 00:05:57
185.22.142.197	attackspam	Jun 12 18:46:31 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jun 12 18:46:33 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jun 12 18:46:55 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\<9WFryOWneJy5Fo7F\> Jun 12 18:52:05 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.22.142.197, lip=176.9.177.164, session=\ Jun 12 18:52:07 relay dovecot: imap-login: Disconnected: Inactivity \(auth failed, 1 attempts in 180 ...	2020-06-13 00:57:34
106.12.73.128	attackspambots	Jun 12 17:42:05 ns382633 sshd\[25217\]: Invalid user web from 106.12.73.128 port 34994 Jun 12 17:42:05 ns382633 sshd\[25217\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.73.128 Jun 12 17:42:07 ns382633 sshd\[25217\]: Failed password for invalid user web from 106.12.73.128 port 34994 ssh2 Jun 12 17:54:17 ns382633 sshd\[27103\]: Invalid user alb from 106.12.73.128 port 56894 Jun 12 17:54:17 ns382633 sshd\[27103\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.73.128	2020-06-13 00:28:47
106.13.50.145	attack	2020-06-12 03:51:07 server sshd[57094]: Failed password for invalid user root from 106.13.50.145 port 55958 ssh2	2020-06-13 00:16:25
112.85.42.172	attack	Jun 12 12:52:40 NPSTNNYC01T sshd[23559]: Failed password for root from 112.85.42.172 port 63151 ssh2 Jun 12 12:52:44 NPSTNNYC01T sshd[23559]: Failed password for root from 112.85.42.172 port 63151 ssh2 Jun 12 12:52:55 NPSTNNYC01T sshd[23559]: error: maximum authentication attempts exceeded for root from 112.85.42.172 port 63151 ssh2 [preauth] ...	2020-06-13 00:53:35
104.192.82.99	attack	prod11 ...	2020-06-13 01:00:07
51.178.83.124	attack	DATE:2020-06-12 14:04:51, IP:51.178.83.124, PORT:ssh SSH brute force auth (docker-dc)	2020-06-13 00:37:37
212.68.249.25	attackbots	2020-06-12T17:38:09.851243ollin.zadara.org sshd[2670]: Invalid user pi from 212.68.249.25 port 44774 2020-06-12T17:38:10.061254ollin.zadara.org sshd[2672]: Invalid user pi from 212.68.249.25 port 44775 ...	2020-06-13 00:10:31
13.57.193.24	attackbots	IP 13.57.193.24 attacked honeypot on port: 8080 at 6/12/2020 5:51:46 PM	2020-06-13 01:07:58
35.209.40.201	attack	35.209.40.201 - - [12/Jun/2020:14:05:06 +0200] "POST /wp-login.php HTTP/1.1" 200 6450 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 35.209.40.201 - - [12/Jun/2020:18:17:34 +0200] "GET /wp-login.php HTTP/1.1" 200 6183 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 35.209.40.201 - - [12/Jun/2020:18:17:36 +0200] "POST /wp-login.php HTTP/1.1" 200 6434 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-06-13 00:25:26
111.229.199.67	attackspam	20 attempts against mh-ssh on echoip	2020-06-13 01:07:33

Recently Reported IPs

198.235.24.136	177.172.238.45	205.169.39.73	205.169.39.69
114.106.135.170	36.140.249.173	103.150.215.50	205.169.39.83
196.251.86.56	176.62.247.13	101.33.66.34	181.215.204.102
152.56.9.253	42.236.17.86	133.167.117.194	103.102.246.190
10.83.200.110	112.224.178.255	240e:345:462a:800:dca2:80d5:3d57:956e	2409:893d:d4a:84fe:1913:45fc:4bfb:5f6c