Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Korea (Republic of)

Internet Service Provider: KT Corporation

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackbots
$f2bV_matches
2020-09-17 18:17:46
attackspam
Sep 16 23:47:07 gospond sshd[32535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.145.78.129  user=root
Sep 16 23:47:08 gospond sshd[32535]: Failed password for root from 121.145.78.129 port 57840 ssh2
...
2020-09-17 09:30:20
attack
2020-09-08T19:55:46.178523ks3355764 sshd[5673]: Invalid user vnc from 121.145.78.129 port 43932
2020-09-08T19:55:47.559113ks3355764 sshd[5673]: Failed password for invalid user vnc from 121.145.78.129 port 43932 ssh2
...
2020-09-09 03:13:08
attack
Time:     Tue Sep  8 11:47:09 2020 +0200
IP:       121.145.78.129 (KR/South Korea/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep  8 11:39:24 mail-03 sshd[23288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.145.78.129  user=root
Sep  8 11:39:26 mail-03 sshd[23288]: Failed password for root from 121.145.78.129 port 38522 ssh2
Sep  8 11:43:37 mail-03 sshd[23348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.145.78.129  user=root
Sep  8 11:43:39 mail-03 sshd[23348]: Failed password for root from 121.145.78.129 port 50396 ssh2
Sep  8 11:47:07 mail-03 sshd[23449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.145.78.129  user=root
2020-09-08 18:47:03
attackbots
Jul 27 22:13:47 vmd26974 sshd[5726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.145.78.129
Jul 27 22:13:49 vmd26974 sshd[5726]: Failed password for invalid user zhanggang from 121.145.78.129 port 40118 ssh2
...
2020-07-28 04:25:15
attackspam
Wordpress malicious attack:[sshd]
2020-07-08 15:35:54
attack
(sshd) Failed SSH login from 121.145.78.129 (KR/South Korea/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 17 23:21:56 amsweb01 sshd[20329]: Invalid user bserver from 121.145.78.129 port 42484
Jun 17 23:21:58 amsweb01 sshd[20329]: Failed password for invalid user bserver from 121.145.78.129 port 42484 ssh2
Jun 17 23:34:53 amsweb01 sshd[22090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.145.78.129  user=root
Jun 17 23:34:54 amsweb01 sshd[22090]: Failed password for root from 121.145.78.129 port 38484 ssh2
Jun 17 23:40:56 amsweb01 sshd[22947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.145.78.129  user=root
2020-06-18 08:27:10
attackbotsspam
SSH Brute-Force reported by Fail2Ban
2020-06-17 05:29:51
attack
May 31 22:50:35 vps687878 sshd\[13750\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.145.78.129  user=root
May 31 22:50:37 vps687878 sshd\[13750\]: Failed password for root from 121.145.78.129 port 56824 ssh2
May 31 22:53:53 vps687878 sshd\[13964\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.145.78.129  user=root
May 31 22:53:55 vps687878 sshd\[13964\]: Failed password for root from 121.145.78.129 port 34066 ssh2
May 31 22:57:07 vps687878 sshd\[14344\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.145.78.129  user=root
...
2020-06-01 06:09:24
attackbots
(sshd) Failed SSH login from 121.145.78.129 (KR/South Korea/-): 5 in the last 3600 secs
2020-05-27 03:21:31
attackspambots
May 20 19:50:36 vpn01 sshd[21843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.145.78.129
May 20 19:50:38 vpn01 sshd[21843]: Failed password for invalid user fmc from 121.145.78.129 port 41586 ssh2
...
2020-05-21 04:03:58
attackbotsspam
Invalid user production from 121.145.78.129 port 48990
2020-05-15 20:24:24
attackspam
Invalid user production from 121.145.78.129 port 48990
2020-05-13 16:29:17
attack
May  1 12:51:39 l02a sshd[5643]: Invalid user gustavo from 121.145.78.129
May  1 12:51:39 l02a sshd[5643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.145.78.129 
May  1 12:51:39 l02a sshd[5643]: Invalid user gustavo from 121.145.78.129
May  1 12:51:42 l02a sshd[5643]: Failed password for invalid user gustavo from 121.145.78.129 port 33118 ssh2
2020-05-01 21:54:51
attackbotsspam
Apr 27 16:03:21 nextcloud sshd\[3372\]: Invalid user steam from 121.145.78.129
Apr 27 16:03:21 nextcloud sshd\[3372\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.145.78.129
Apr 27 16:03:24 nextcloud sshd\[3372\]: Failed password for invalid user steam from 121.145.78.129 port 35218 ssh2
2020-04-27 22:29:04
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.145.78.129
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10427
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;121.145.78.129.			IN	A

;; AUTHORITY SECTION:
.			428	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020042700 1800 900 604800 86400

;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Apr 27 22:28:56 CST 2020
;; MSG SIZE  rcvd: 118
Host info
Host 129.78.145.121.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 129.78.145.121.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
190.142.158.135 attackbots
port scan and connect, tcp 23 (telnet)
2020-01-29 15:14:29
180.76.172.227 attackspambots
Jan 29 07:55:58 lnxded63 sshd[25585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.172.227
2020-01-29 15:09:35
132.145.173.64 attack
Jan 28 21:10:55 eddieflores sshd\[5235\]: Invalid user saras from 132.145.173.64
Jan 28 21:10:55 eddieflores sshd\[5235\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.173.64
Jan 28 21:10:57 eddieflores sshd\[5235\]: Failed password for invalid user saras from 132.145.173.64 port 43170 ssh2
Jan 28 21:14:08 eddieflores sshd\[5654\]: Invalid user shaukat from 132.145.173.64
Jan 28 21:14:08 eddieflores sshd\[5654\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.173.64
2020-01-29 15:14:52
177.125.164.225 attack
Invalid user barindra from 177.125.164.225 port 45752
2020-01-29 14:55:04
188.35.187.50 attackbots
Jan 29 06:36:04 lnxded64 sshd[16113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.35.187.50
2020-01-29 14:47:12
171.98.41.27 attackbots
Jan 29 05:53:57 debian-2gb-nbg1-2 kernel: \[2532902.237251\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=171.98.41.27 DST=195.201.40.59 LEN=52 TOS=0x00 PREC=0x20 TTL=110 ID=28575 DF PROTO=TCP SPT=60215 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0
2020-01-29 14:53:55
113.190.89.26 attackbots
Jan 29 05:53:56  exim[27554]: [1\48] 1iwfMO-0007AQ-7A H=(static.vnpt.vn) [113.190.89.26] F= rejected after DATA: This message scored 13.7 spam points.
2020-01-29 14:48:58
18.189.184.116 attackspambots
Jan 29 07:05:33 meumeu sshd[18798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.189.184.116 
Jan 29 07:05:35 meumeu sshd[18798]: Failed password for invalid user femina from 18.189.184.116 port 53374 ssh2
Jan 29 07:13:29 meumeu sshd[20005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.189.184.116 
...
2020-01-29 14:57:16
82.196.4.66 attackspam
Unauthorized connection attempt detected from IP address 82.196.4.66 to port 2220 [J]
2020-01-29 14:38:13
101.231.201.50 attackspam
Unauthorized connection attempt detected from IP address 101.231.201.50 to port 2220 [J]
2020-01-29 14:57:43
103.90.97.197 attackspambots
20/1/28@23:53:39: FAIL: Alarm-Network address from=103.90.97.197
...
2020-01-29 15:06:52
103.42.57.65 attack
Jan 29 07:25:37 OPSO sshd\[24165\]: Invalid user mayurika from 103.42.57.65 port 41038
Jan 29 07:25:37 OPSO sshd\[24165\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.42.57.65
Jan 29 07:25:39 OPSO sshd\[24165\]: Failed password for invalid user mayurika from 103.42.57.65 port 41038 ssh2
Jan 29 07:28:50 OPSO sshd\[24452\]: Invalid user akara from 103.42.57.65 port 36932
Jan 29 07:28:50 OPSO sshd\[24452\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.42.57.65
2020-01-29 14:40:21
106.13.25.242 attackbotsspam
Jan 29 06:20:07 hcbbdb sshd\[17961\]: Invalid user dadhinadi from 106.13.25.242
Jan 29 06:20:07 hcbbdb sshd\[17961\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.25.242
Jan 29 06:20:09 hcbbdb sshd\[17961\]: Failed password for invalid user dadhinadi from 106.13.25.242 port 51440 ssh2
Jan 29 06:23:18 hcbbdb sshd\[18365\]: Invalid user iwata from 106.13.25.242
Jan 29 06:23:18 hcbbdb sshd\[18365\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.25.242
2020-01-29 14:45:36
58.87.119.176 attack
Jan 29 07:15:20 sd-53420 sshd\[20577\]: Invalid user mudit from 58.87.119.176
Jan 29 07:15:20 sd-53420 sshd\[20577\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.87.119.176
Jan 29 07:15:21 sd-53420 sshd\[20577\]: Failed password for invalid user mudit from 58.87.119.176 port 34288 ssh2
Jan 29 07:19:33 sd-53420 sshd\[20937\]: Invalid user harshika from 58.87.119.176
Jan 29 07:19:33 sd-53420 sshd\[20937\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.87.119.176
...
2020-01-29 14:52:54
183.87.43.172 attackspambots
2020-01-29T05:53:35.0208301240 sshd\[21166\]: Invalid user user from 183.87.43.172 port 54769
2020-01-29T05:53:35.2702721240 sshd\[21166\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.87.43.172
2020-01-29T05:53:37.5064541240 sshd\[21166\]: Failed password for invalid user user from 183.87.43.172 port 54769 ssh2
...
2020-01-29 15:07:35

Recently Reported IPs

150.109.117.118 183.89.238.167 77.42.76.253 66.181.160.49
188.226.197.249 51.106.121.78 10.129.175.0 213.132.219.175
189.208.189.22 80.82.64.242 220.168.22.51 203.205.250.33
187.84.146.190 63.143.99.52 36.90.208.243 132.232.40.131
192.99.247.102 132.145.187.94 92.222.79.157 79.142.76.210