14.135.120.21 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Ningxia Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Jul 23 02:25:07 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:5a:1a:41:08:00 SRC=14.135.120.21 DST=109.74.200.221 LEN=76 TOS=0x00 PREC=0x00 TTL=243 ID=57695 PROTO=UDP SPT=61815 DPT=123 LEN=56 ...	2019-09-11 06:03:39

Type

Details

Datetime

attack

Jul 23 02:25:07 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:5a:1a:41:08:00 SRC=14.135.120.21 DST=109.74.200.221 LEN=76 TOS=0x00 PREC=0x00 TTL=243 ID=57695 PROTO=UDP SPT=61815 DPT=123 LEN=56 
...

2019-09-11 06:03:39

Comments on same subnet:

IP	Type	Details	Datetime
14.135.120.4	attack	Aug 3 14:28:35 debian-2gb-nbg1-2 kernel: \[18716185.879263\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=14.135.120.4 DST=195.201.40.59 LEN=52 TOS=0x00 PREC=0x00 TTL=236 ID=17100 PROTO=TCP SPT=56064 DPT=9595 WINDOW=1024 RES=0x00 SYN URGP=0	2020-08-03 20:37:05
14.135.120.19	attackbots	[Fri Apr 24 23:22:17 2020] - DDoS Attack From IP: 14.135.120.19 Port: 61310	2020-04-25 17:20:13
14.135.120.5	attackspam	Automatic report - Port Scan Attack	2020-04-02 06:43:33
14.135.120.4	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-03 18:20:42
14.135.120.4	attackbots	01/19/2020-08:39:55.107580 14.135.120.4 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-01-20 03:45:26
14.135.120.3	attack	Jan 16 15:03:36 h2177944 kernel: \[2381818.916329\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=14.135.120.3 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=241 ID=15761 PROTO=TCP SPT=52968 DPT=8086 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 16 15:03:36 h2177944 kernel: \[2381818.916346\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=14.135.120.3 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=241 ID=15761 PROTO=TCP SPT=52968 DPT=8086 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 16 15:04:42 h2177944 kernel: \[2381884.952236\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=14.135.120.3 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=241 ID=32679 PROTO=TCP SPT=49266 DPT=8087 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 16 15:04:42 h2177944 kernel: \[2381884.952248\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=14.135.120.3 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=241 ID=32679 PROTO=TCP SPT=49266 DPT=8087 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 16 15:05:34 h2177944 kernel: \[2381936.382048\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=14.135.120.3 DST=85.214.117.9 LEN=	2020-01-16 22:47:42
14.135.120.111	attackbots	Unauthorized connection attempt detected from IP address 14.135.120.111 to port 3389 [T]	2020-01-09 02:50:29
14.135.120.4	attackspam	Oct 27 06:08:37 mc1 kernel: \[3439252.113431\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=14.135.120.4 DST=159.69.205.51 LEN=52 TOS=0x00 PREC=0x00 TTL=236 ID=33938 PROTO=TCP SPT=54052 DPT=9869 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 27 06:09:14 mc1 kernel: \[3439288.199609\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=14.135.120.4 DST=159.69.205.51 LEN=52 TOS=0x00 PREC=0x00 TTL=235 ID=21466 PROTO=TCP SPT=59212 DPT=9943 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 27 06:10:21 mc1 kernel: \[3439356.036983\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=14.135.120.4 DST=159.69.205.51 LEN=52 TOS=0x00 PREC=0x00 TTL=238 ID=61304 PROTO=TCP SPT=60597 DPT=9944 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2019-10-27 13:12:07
14.135.120.12	attackbotsspam	UTC: 2019-10-21 pkts: 3(2, 1) ports(tcp): 102, 502 port (udp): 161	2019-10-22 15:58:42
14.135.120.4	attackspambots	Automatic report - Port Scan	2019-10-17 20:52:47
14.135.120.64	attack	6000/tcp 6000/tcp [2019-08-23]2pkt	2019-08-24 07:47:01
14.135.120.20	attackbotsspam	Unauthorized connection attempt from IP address 14.135.120.20 on Port 3389(RDP)	2019-07-19 12:49:45

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.135.120.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4376
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.135.120.21.			IN	A

;; AUTHORITY SECTION:
.			3534	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091003 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Sep 11 06:03:34 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 21.120.135.14.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 21.120.135.14.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
77.247.109.72	attackbots	\[2019-08-25 04:04:46\] NOTICE\[1829\] chan_sip.c: Registration from '"501" \' failed for '77.247.109.72:5083' - Wrong password \[2019-08-25 04:04:46\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-25T04:04:46.355-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="501",SessionID="0x7f7b30613808",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.72/5083",Challenge="1c4b84c7",ReceivedChallenge="1c4b84c7",ReceivedHash="2245039d49fc3ace6dae4c46939e3d4b" \[2019-08-25 04:04:46\] NOTICE\[1829\] chan_sip.c: Registration from '"501" \' failed for '77.247.109.72:5083' - Wrong password \[2019-08-25 04:04:46\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-25T04:04:46.362-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="501",SessionID="0x7f7b302170b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.2	2019-08-25 16:19:41
103.110.89.148	attackbots	Aug 24 22:00:13 hanapaa sshd\[5442\]: Invalid user yong from 103.110.89.148 Aug 24 22:00:13 hanapaa sshd\[5442\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.110.89.148 Aug 24 22:00:15 hanapaa sshd\[5442\]: Failed password for invalid user yong from 103.110.89.148 port 55204 ssh2 Aug 24 22:05:04 hanapaa sshd\[5926\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.110.89.148 user=root Aug 24 22:05:06 hanapaa sshd\[5926\]: Failed password for root from 103.110.89.148 port 43516 ssh2	2019-08-25 16:06:40
122.116.174.239	attack	$f2bV_matches	2019-08-25 16:28:03
181.52.236.67	attack	SSH/22 MH Probe, BF, Hack -	2019-08-25 15:55:30
143.255.105.109	attackspam	Invalid user troqueles from 143.255.105.109 port 36266	2019-08-25 15:34:14
49.231.68.58	attackspambots	Aug 24 14:29:38 auw2 sshd\[25288\]: Invalid user guest2 from 49.231.68.58 Aug 24 14:29:38 auw2 sshd\[25288\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.231.68.58 Aug 24 14:29:40 auw2 sshd\[25288\]: Failed password for invalid user guest2 from 49.231.68.58 port 55929 ssh2 Aug 24 14:34:35 auw2 sshd\[26037\]: Invalid user goryus from 49.231.68.58 Aug 24 14:34:35 auw2 sshd\[26037\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.231.68.58	2019-08-25 15:41:13
189.124.0.216	attackspambots	$f2bV_matches	2019-08-25 15:55:08
208.103.228.153	attack	Aug 24 22:01:07 kapalua sshd\[22172\]: Invalid user apex from 208.103.228.153 Aug 24 22:01:07 kapalua sshd\[22172\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.103.228.153 Aug 24 22:01:08 kapalua sshd\[22172\]: Failed password for invalid user apex from 208.103.228.153 port 47202 ssh2 Aug 24 22:04:53 kapalua sshd\[22539\]: Invalid user lao from 208.103.228.153 Aug 24 22:04:53 kapalua sshd\[22539\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.103.228.153	2019-08-25 16:16:07
36.7.136.77	attack	Aug 25 11:00:49 server sshd\[21370\]: Invalid user all from 36.7.136.77 port 52394 Aug 25 11:00:49 server sshd\[21370\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.7.136.77 Aug 25 11:00:51 server sshd\[21370\]: Failed password for invalid user all from 36.7.136.77 port 52394 ssh2 Aug 25 11:04:58 server sshd\[1312\]: Invalid user piccatravel from 36.7.136.77 port 27747 Aug 25 11:04:58 server sshd\[1312\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.7.136.77	2019-08-25 16:13:46
115.77.187.18	attack	Aug 25 08:34:46 cvbmail sshd\[26282\]: Invalid user steam from 115.77.187.18 Aug 25 08:34:46 cvbmail sshd\[26282\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.77.187.18 Aug 25 08:34:47 cvbmail sshd\[26282\]: Failed password for invalid user steam from 115.77.187.18 port 55300 ssh2	2019-08-25 16:04:54
208.102.113.11	attackbotsspam	Aug 25 09:20:19 vps691689 sshd[2664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.102.113.11 Aug 25 09:20:21 vps691689 sshd[2664]: Failed password for invalid user sales1 from 208.102.113.11 port 36306 ssh2 ...	2019-08-25 15:50:02
139.162.84.112	attackbotsspam	Portscan or hack attempt detected by psad/fwsnort	2019-08-25 16:08:52
121.122.119.45	attack	Aug 25 10:59:40 server sshd\[10008\]: Invalid user nsapril from 121.122.119.45 port 47905 Aug 25 10:59:40 server sshd\[10008\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.122.119.45 Aug 25 10:59:42 server sshd\[10008\]: Failed password for invalid user nsapril from 121.122.119.45 port 47905 ssh2 Aug 25 11:04:57 server sshd\[1288\]: Invalid user spark from 121.122.119.45 port 43053 Aug 25 11:04:57 server sshd\[1288\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.122.119.45	2019-08-25 16:14:40
188.165.210.176	attackbots	Aug 25 08:12:24 *** sshd[11692]: Invalid user yc from 188.165.210.176	2019-08-25 16:23:33
121.200.55.37	attackbotsspam	Invalid user qomo from 121.200.55.37 port 46170	2019-08-25 15:37:00

Recently Reported IPs

100.248.42.97	95.136.170.48	119.205.112.50	141.108.203.4
14.235.249.174	119.155.146.101	89.236.85.143	165.120.161.135
12.65.54.147	60.178.44.34	5.146.85.56	106.52.68.33
91.185.10.229	118.170.210.198	217.67.88.60	139.68.202.48
68.38.194.104	185.193.22.187	14.187.94.133	182.86.86.254