Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Korea Republic of

Internet Service Provider: KT Corporation

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attack
Nov 27 18:24:01 nextcloud sshd\[16022\]: Invalid user 123456 from 121.136.119.7
Nov 27 18:24:01 nextcloud sshd\[16022\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7
Nov 27 18:24:02 nextcloud sshd\[16022\]: Failed password for invalid user 123456 from 121.136.119.7 port 57178 ssh2
...
2019-11-28 01:29:54
attackspam
Nov 22 07:19:17 lnxded64 sshd[12584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7
2019-11-22 21:29:22
attackbotsspam
Nov 22 05:57:06 lnxded64 sshd[22945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7
2019-11-22 13:12:26
attackspam
$f2bV_matches
2019-11-18 05:19:35
attack
2019-11-11T08:35:32.890810shield sshd\[12920\]: Invalid user nowak from 121.136.119.7 port 33880
2019-11-11T08:35:32.895229shield sshd\[12920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7
2019-11-11T08:35:34.320599shield sshd\[12920\]: Failed password for invalid user nowak from 121.136.119.7 port 33880 ssh2
2019-11-11T08:40:03.444289shield sshd\[13438\]: Invalid user server from 121.136.119.7 port 42832
2019-11-11T08:40:03.449621shield sshd\[13438\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7
2019-11-11 21:56:11
attack
Nov 10 11:49:41 *** sshd[19901]: Invalid user bego from 121.136.119.7
2019-11-10 21:53:53
attackspambots
Nov  9 13:15:26 [host] sshd[17894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7  user=root
Nov  9 13:15:28 [host] sshd[17894]: Failed password for root from 121.136.119.7 port 34832 ssh2
Nov  9 13:19:51 [host] sshd[18047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7  user=root
2019-11-09 20:34:51
attackbots
Oct 30 02:38:30 auw2 sshd\[14642\]: Invalid user gong from 121.136.119.7
Oct 30 02:38:30 auw2 sshd\[14642\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7
Oct 30 02:38:32 auw2 sshd\[14642\]: Failed password for invalid user gong from 121.136.119.7 port 51686 ssh2
Oct 30 02:43:23 auw2 sshd\[15157\]: Invalid user password from 121.136.119.7
Oct 30 02:43:23 auw2 sshd\[15157\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7
2019-10-31 03:06:31
attackbots
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/121.136.119.7/ 
 
 KR - 1H : (69)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : KR 
 NAME ASN : ASN4766 
 
 IP : 121.136.119.7 
 
 CIDR : 121.136.96.0/19 
 
 PREFIX COUNT : 8136 
 
 UNIQUE IP COUNT : 44725248 
 
 
 ATTACKS DETECTED ASN4766 :  
  1H - 4 
  3H - 6 
  6H - 12 
 12H - 32 
 24H - 60 
 
 DateTime : 2019-10-29 09:50:52 
 
 INFO : Port SSH 22 Scan Detected and Blocked by ADMIN  - data recovery
2019-10-29 16:51:32
attackbotsspam
Oct 19 09:28:20 ns381471 sshd[30496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7
Oct 19 09:28:22 ns381471 sshd[30496]: Failed password for invalid user www from 121.136.119.7 port 58932 ssh2
Oct 19 09:33:23 ns381471 sshd[30638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7
2019-10-19 18:34:19
attackbotsspam
Oct 16 21:24:57 lnxmail61 sshd[27569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7
2019-10-17 06:25:02
attackspambots
Oct 10 03:10:10 ny01 sshd[28152]: Failed password for root from 121.136.119.7 port 39384 ssh2
Oct 10 03:15:08 ny01 sshd[28607]: Failed password for root from 121.136.119.7 port 50954 ssh2
2019-10-10 15:26:16
attackbotsspam
Oct  6 18:09:42 tdfoods sshd\[30430\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7  user=root
Oct  6 18:09:45 tdfoods sshd\[30430\]: Failed password for root from 121.136.119.7 port 57408 ssh2
Oct  6 18:14:30 tdfoods sshd\[30784\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7  user=root
Oct  6 18:14:33 tdfoods sshd\[30784\]: Failed password for root from 121.136.119.7 port 41152 ssh2
Oct  6 18:19:23 tdfoods sshd\[31195\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7  user=root
2019-10-07 12:21:36
attackbotsspam
Oct  5 04:46:55 web8 sshd\[1279\]: Invalid user P@ssw0rd001 from 121.136.119.7
Oct  5 04:46:55 web8 sshd\[1279\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7
Oct  5 04:46:57 web8 sshd\[1279\]: Failed password for invalid user P@ssw0rd001 from 121.136.119.7 port 48918 ssh2
Oct  5 04:51:44 web8 sshd\[3770\]: Invalid user P@ssw0rd001 from 121.136.119.7
Oct  5 04:51:44 web8 sshd\[3770\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7
2019-10-05 14:02:41
attackbotsspam
Sep 15 23:16:57 eddieflores sshd\[27411\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7  user=root
Sep 15 23:17:00 eddieflores sshd\[27411\]: Failed password for root from 121.136.119.7 port 44186 ssh2
Sep 15 23:21:24 eddieflores sshd\[27771\]: Invalid user Admin from 121.136.119.7
Sep 15 23:21:24 eddieflores sshd\[27771\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7
Sep 15 23:21:26 eddieflores sshd\[27771\]: Failed password for invalid user Admin from 121.136.119.7 port 56390 ssh2
2019-09-16 17:25:56
attack
Sep 15 04:49:05 web9 sshd\[4026\]: Invalid user ftp from 121.136.119.7
Sep 15 04:49:05 web9 sshd\[4026\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7
Sep 15 04:49:07 web9 sshd\[4026\]: Failed password for invalid user ftp from 121.136.119.7 port 43264 ssh2
Sep 15 04:53:40 web9 sshd\[4869\]: Invalid user pentaho from 121.136.119.7
Sep 15 04:53:40 web9 sshd\[4869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7
2019-09-16 02:21:24
attack
Invalid user song from 121.136.119.7 port 39138
2019-08-29 16:21:41
attackspam
Aug 23 06:18:15 auw2 sshd\[31848\]: Invalid user mariano from 121.136.119.7
Aug 23 06:18:15 auw2 sshd\[31848\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7
Aug 23 06:18:18 auw2 sshd\[31848\]: Failed password for invalid user mariano from 121.136.119.7 port 57026 ssh2
Aug 23 06:23:21 auw2 sshd\[32310\]: Invalid user sdtdserver from 121.136.119.7
Aug 23 06:23:21 auw2 sshd\[32310\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7
2019-08-24 00:25:29
attack
Lines containing failures of 121.136.119.7 (max 1000)
Aug 21 16:07:56 localhost sshd[15181]: Invalid user dangerous from 121.136.119.7 port 52302
Aug 21 16:07:56 localhost sshd[15181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7 
Aug 21 16:07:58 localhost sshd[15181]: Failed password for invalid user dangerous from 121.136.119.7 port 52302 ssh2
Aug 21 16:07:59 localhost sshd[15181]: Received disconnect from 121.136.119.7 port 52302:11: Bye Bye [preauth]
Aug 21 16:07:59 localhost sshd[15181]: Disconnected from invalid user dangerous 121.136.119.7 port 52302 [preauth]
Aug 21 16:22:00 localhost sshd[17958]: Invalid user rex from 121.136.119.7 port 53760
Aug 21 16:22:00 localhost sshd[17958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.136.119.7 
Aug 21 16:22:03 localhost sshd[17958]: Failed password for invalid user rex from 121.136.119.7 port 53760 ssh2
Aug 21 16:22:03........
------------------------------
2019-08-22 09:43:27
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.136.119.7
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20697
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;121.136.119.7.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082101 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Aug 22 09:43:12 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 7.119.136.121.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 7.119.136.121.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
49.232.154.184 attackbots
Oct 21 17:04:28 dedicated sshd[3599]: Invalid user user2 from 49.232.154.184 port 34260
2019-10-22 03:17:16
36.66.69.33 attack
ssh failed login
2019-10-22 02:54:52
185.156.177.2 attackspam
RDP_Brute_Force
2019-10-22 03:12:55
139.162.116.133 attackspambots
port scan and connect, tcp 443 (https)
2019-10-22 03:23:48
139.59.59.187 attack
Oct 21 21:08:44 nextcloud sshd\[32511\]: Invalid user usuario from 139.59.59.187
Oct 21 21:08:44 nextcloud sshd\[32511\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.59.187
Oct 21 21:08:45 nextcloud sshd\[32511\]: Failed password for invalid user usuario from 139.59.59.187 port 56776 ssh2
...
2019-10-22 03:21:28
222.191.233.238 attackspambots
Automatic report - Banned IP Access
2019-10-22 02:59:36
189.101.129.222 attack
Oct 21 13:36:06 andromeda sshd\[7705\]: Invalid user test from 189.101.129.222 port 44724
Oct 21 13:36:06 andromeda sshd\[7705\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.101.129.222
Oct 21 13:36:07 andromeda sshd\[7705\]: Failed password for invalid user test from 189.101.129.222 port 44724 ssh2
2019-10-22 03:07:53
103.76.252.6 attack
$f2bV_matches
2019-10-22 03:07:03
70.88.253.123 attackspam
Oct 14 21:45:48 mail sshd[4933]: Failed password for root from 70.88.253.123 port 64803 ssh2
Oct 14 21:49:41 mail sshd[6340]: Failed password for root from 70.88.253.123 port 49427 ssh2
2019-10-22 02:48:20
80.123.90.226 attackbots
SSH Scan
2019-10-22 02:48:38
116.5.239.71 attackspam
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/116.5.239.71/ 
 
 CN - 1H : (460)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : CN 
 NAME ASN : ASN4134 
 
 IP : 116.5.239.71 
 
 CIDR : 116.4.0.0/15 
 
 PREFIX COUNT : 5430 
 
 UNIQUE IP COUNT : 106919680 
 
 
 ATTACKS DETECTED ASN4134 :  
  1H - 10 
  3H - 25 
  6H - 49 
 12H - 89 
 24H - 176 
 
 DateTime : 2019-10-21 13:36:53 
 
 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN  - data recovery
2019-10-22 02:49:36
222.186.175.217 attackbotsspam
Oct 21 20:58:06 mail sshd[542]: Failed password for root from 222.186.175.217 port 21082 ssh2
Oct 21 20:58:11 mail sshd[542]: Failed password for root from 222.186.175.217 port 21082 ssh2
Oct 21 20:58:15 mail sshd[542]: Failed password for root from 222.186.175.217 port 21082 ssh2
Oct 21 20:58:19 mail sshd[542]: Failed password for root from 222.186.175.217 port 21082 ssh2
2019-10-22 03:09:56
81.28.100.212 attack
Postfix RBL failed
2019-10-22 03:10:23
63.80.88.196 attack
2019-10-21T13:36:53.891841stark.klein-stark.info postfix/smtpd\[26550\]: NOQUEUE: reject: RCPT from papal.nabhaa.com\[63.80.88.196\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\
...
2019-10-22 02:49:17
27.254.136.29 attackbots
F2B jail: sshd. Time: 2019-10-21 16:11:48, Reported by: VKReport
2019-10-22 03:22:34

Recently Reported IPs

94.61.69.136 46.83.107.209 185.227.109.171 167.71.194.122
177.67.213.233 14.186.240.70 91.147.147.82 217.174.183.70
182.61.189.241 103.162.157.206 216.38.210.214 45.218.22.9
148.194.189.198 177.91.213.120 106.13.145.183 181.174.183.133
186.216.156.14 179.182.136.191 51.83.46.178 137.88.15.198