121.13.107.166

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Guangdong Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	port 23 attempt blocked	2019-09-14 22:56:15

Comments on same subnet:

IP	Type	Details	Datetime
121.13.107.3	attack	Aug 20 16:27:33 mout sshd[21598]: Invalid user nexthink from 121.13.107.3 port 40253 Aug 20 16:27:38 mout sshd[21598]: Failed password for invalid user nexthink from 121.13.107.3 port 40253 ssh2 Aug 20 16:28:08 mout sshd[21678]: Invalid user plexuser from 121.13.107.3 port 48459	2020-08-21 00:25:04
121.13.107.171	attackspambots	Jul 27 23:54:24 www sshd\[13318\]: Invalid user pi from 121.13.107.171 Jul 27 23:55:11 www sshd\[13355\]: Invalid user ubnt from 121.13.107.171 ...	2020-07-28 14:22:53
121.13.107.171	attack	2020-07-27T13:55:28.948458 sshd[3151530]: Invalid user admin from 121.13.107.171 port 50940 2020-07-27T13:55:51.035218 sshd[3151917]: Invalid user admin from 121.13.107.171 port 60679 2020-07-27T13:56:12.084835 sshd[3152266]: Invalid user admin from 121.13.107.171 port 39530	2020-07-27 21:31:27
121.13.107.220	attackspam	May 1 22:14:53 server sshd\[209399\]: Invalid user admin from 121.13.107.220 May 1 22:14:53 server sshd\[209399\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.13.107.220 May 1 22:14:55 server sshd\[209399\]: Failed password for invalid user admin from 121.13.107.220 port 46983 ssh2 ...	2019-07-17 07:18:58

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.13.107.166
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35463
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;121.13.107.166.			IN	A

;; AUTHORITY SECTION:
.			1253	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091400 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Sep 14 22:56:04 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 166.107.13.121.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 166.107.13.121.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
89.73.112.41	attack	89.73.112.41 - - [30/Jun/2020:17:01:34 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 89.73.112.41 - - [30/Jun/2020:17:01:35 +0100] "POST /wp-login.php HTTP/1.1" 200 6214 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 89.73.112.41 - - [30/Jun/2020:17:03:53 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" ...	2020-07-01 02:44:11
200.31.19.206	attack	5x Failed Password	2020-07-01 02:51:15
178.128.242.233	attack	Multiple SSH authentication failures from 178.128.242.233	2020-07-01 02:44:32
189.4.151.102	attackspam	$f2bV_matches	2020-07-01 02:42:36
84.38.180.148	attackspam	21 attempts against mh-ssh on lake	2020-07-01 02:52:23
80.82.77.29	attackbotsspam	Jun 30 15:17:17 debian-2gb-nbg1-2 kernel: \[15781675.555719\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=80.82.77.29 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=22952 PROTO=TCP SPT=54278 DPT=25611 WINDOW=1024 RES=0x00 SYN URGP=0	2020-07-01 02:59:01
60.167.181.63	attackbotsspam	2020-06-30T11:29:35.768383devel sshd[32465]: Failed password for invalid user gmod from 60.167.181.63 port 46692 ssh2 2020-06-30T12:07:37.759128devel sshd[6076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.167.181.63 user=root 2020-06-30T12:07:39.234989devel sshd[6076]: Failed password for root from 60.167.181.63 port 43582 ssh2	2020-07-01 03:00:10
134.122.28.208	attackspam	Banned for a week because repeated abuses, for example SSH, but not only	2020-07-01 02:52:10
121.123.85.245	attackbotsspam	1593519554 - 06/30/2020 14:19:14 Host: 121.123.85.245/121.123.85.245 Port: 445 TCP Blocked	2020-07-01 03:00:59
139.59.18.215	attack	Multiple SSH authentication failures from 139.59.18.215	2020-07-01 02:27:01
119.29.121.229	attackspam	Jun 30 19:14:09 itv-usvr-01 sshd[26339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.121.229 user=root Jun 30 19:14:12 itv-usvr-01 sshd[26339]: Failed password for root from 119.29.121.229 port 36532 ssh2 Jun 30 19:19:42 itv-usvr-01 sshd[26571]: Invalid user alcatel from 119.29.121.229 Jun 30 19:19:42 itv-usvr-01 sshd[26571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.121.229 Jun 30 19:19:42 itv-usvr-01 sshd[26571]: Invalid user alcatel from 119.29.121.229 Jun 30 19:19:44 itv-usvr-01 sshd[26571]: Failed password for invalid user alcatel from 119.29.121.229 port 39804 ssh2	2020-07-01 02:39:03
85.66.196.112	attackbotsspam	Automatic report - Port Scan Attack	2020-07-01 02:36:34
119.123.48.251	attack	Jun 30 14:19:29 icecube postfix/smtpd[7446]: NOQUEUE: reject: RCPT from unknown[119.123.48.251]: 554 5.7.1 Service unavailable; Client host [119.123.48.251] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/119.123.48.251; from= to= proto=ESMTP helo=	2020-07-01 02:50:54
150.136.40.83	attackbots	Invalid user centos from 150.136.40.83 port 56396	2020-07-01 02:48:01
13.72.249.53	attack	2020-06-30T17:37:10.599206ks3355764 sshd[29651]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.72.249.53 user=root 2020-06-30T17:37:12.925442ks3355764 sshd[29651]: Failed password for root from 13.72.249.53 port 23502 ssh2 ...	2020-07-01 02:22:16

Recently Reported IPs

197.164.32.46	53.64.70.117	70.109.162.47	149.155.69.248
182.35.85.131	116.21.127.96	106.75.23.91	198.12.88.145
165.129.67.70	70.194.6.221	130.120.50.80	94.25.250.173
84.56.164.37	185.165.153.12	118.24.251.247	125.224.208.242
115.205.201.232	83.52.138.240	33.115.60.225	202.165.220.116