121.148.6.31 - IPInfo

Basic Info

City: Gwangju

Region: Gwangju

Country: South Korea

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
121.148.65.131	attack	Sep 8 04:33:36 mail sshd\[47474\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.148.65.131 user=root ...	2020-09-08 23:35:36
121.148.65.131	attackbotsspam	Sep 7 20:08:43 jane sshd[29144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.148.65.131 Sep 7 20:08:45 jane sshd[29144]: Failed password for invalid user admin from 121.148.65.131 port 32874 ssh2 ...	2020-09-08 15:12:08
121.148.65.131	attackspambots	Sep 7 20:08:43 jane sshd[29144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.148.65.131 Sep 7 20:08:45 jane sshd[29144]: Failed password for invalid user admin from 121.148.65.131 port 32874 ssh2 ...	2020-09-08 07:45:02
121.148.66.143	attackspam	Autoban 121.148.66.143 AUTH/CONNECT	2020-01-16 23:24:31

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.148.6.31
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55418
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;121.148.6.31.			IN	A

;; AUTHORITY SECTION:
.			452	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020091701 1800 900 604800 86400

;; Query time: 82 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 18 09:12:02 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 31.6.148.121.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 31.6.148.121.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
170.81.59.37	attackspam	$f2bV_matches	2020-10-06 01:02:39
45.142.120.55	attackspam	2020-10-04T21:36:36.920752beta postfix/smtpd[24570]: warning: unknown[45.142.120.55]: SASL LOGIN authentication failed: authentication failure 2020-10-04T21:36:42.602189beta postfix/smtpd[24572]: warning: unknown[45.142.120.55]: SASL LOGIN authentication failed: authentication failure 2020-10-04T21:36:46.036703beta postfix/smtpd[24576]: warning: unknown[45.142.120.55]: SASL LOGIN authentication failed: authentication failure ...	2020-10-06 01:25:31
125.166.1.55	attackbotsspam	TCP (SYN) 125.166.1.55:6201 -> port 23, len 44	2020-10-06 01:19:35
60.13.230.199	attack	2020-10-05T13:54:58.996476centos sshd[13193]: Failed password for root from 60.13.230.199 port 37644 ssh2 2020-10-05T13:59:05.063210centos sshd[13465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.13.230.199 user=root 2020-10-05T13:59:06.921625centos sshd[13465]: Failed password for root from 60.13.230.199 port 33160 ssh2 ...	2020-10-06 01:24:40
109.63.142.18	attack	1601843802 - 10/04/2020 22:36:42 Host: 109.63.142.18/109.63.142.18 Port: 445 TCP Blocked	2020-10-06 01:29:13
180.250.247.45	attackspambots	Oct 5 17:50:23 nextcloud sshd\[21628\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.247.45 user=root Oct 5 17:50:25 nextcloud sshd\[21628\]: Failed password for root from 180.250.247.45 port 51978 ssh2 Oct 5 17:54:38 nextcloud sshd\[27000\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.247.45 user=root	2020-10-06 00:49:18
78.87.134.175	attackbots	Telnet Server BruteForce Attack	2020-10-06 01:00:23
222.186.42.155	attackbotsspam	Oct 5 16:43:07 email sshd\[8126\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.155 user=root Oct 5 16:43:09 email sshd\[8126\]: Failed password for root from 222.186.42.155 port 32932 ssh2 Oct 5 16:44:02 email sshd\[8299\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.155 user=root Oct 5 16:44:03 email sshd\[8299\]: Failed password for root from 222.186.42.155 port 22534 ssh2 Oct 5 16:44:28 email sshd\[8361\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.155 user=root ...	2020-10-06 00:50:30
167.248.133.23	attackbotsspam	TCP (SYN) 167.248.133.23:10447 -> port 5902, len 44	2020-10-06 00:54:13
139.59.83.179	attackbots	Found on Github Combined on 5 lists / proto=6 . srcport=52204 . dstport=31699 . (1423)	2020-10-06 01:12:36
190.39.162.200	attackbots	Port scan on 1 port(s): 445	2020-10-06 00:55:14
46.249.32.146	attackbots	[2020-10-04 19:46:17] NOTICE[1182][C-000012c9] chan_sip.c: Call from '' (46.249.32.146:61792) to extension '011441904911054' rejected because extension not found in context 'public'. [2020-10-04 19:46:17] SECURITY[1204] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-10-04T19:46:17.310-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441904911054",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.249.32.146/61792",ACLName="no_extension_match" [2020-10-04 19:46:50] NOTICE[1182][C-000012cb] chan_sip.c: Call from '' (46.249.32.146:55337) to extension '9011441904911054' rejected because extension not found in context 'public'. ...	2020-10-06 01:27:24
78.128.113.121	attackspam	2020-10-05 18:24:24 dovecot_login authenticator failed for $ip-113-121.4vendeta.com.$ \[78.128.113.121\]: 535 Incorrect authentication data $set_id=info@yt.gl$ 2020-10-05 18:24:31 dovecot_login authenticator failed for $ip-113-121.4vendeta.com.$ \[78.128.113.121\]: 535 Incorrect authentication data 2020-10-05 18:24:39 dovecot_login authenticator failed for $ip-113-121.4vendeta.com.$ \[78.128.113.121\]: 535 Incorrect authentication data 2020-10-05 18:24:44 dovecot_login authenticator failed for $ip-113-121.4vendeta.com.$ \[78.128.113.121\]: 535 Incorrect authentication data 2020-10-05 18:24:55 dovecot_login authenticator failed for $ip-113-121.4vendeta.com.$ \[78.128.113.121\]: 535 Incorrect authentication data 2020-10-05 18:25:00 dovecot_login authenticator failed for $ip-113-121.4vendeta.com.$ \[78.128.113.121\]: 535 Incorrect authentication data 2020-10-05 18:25:05 dovecot_login authenticator failed for $ip-113-121.4vendeta.com.$ \[78.128.113.121\]: 535 Incorrect auth ...	2020-10-06 01:05:01
34.70.66.188	attackspambots	Oct 5 16:48:59 email sshd\[9188\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.70.66.188 user=root Oct 5 16:49:01 email sshd\[9188\]: Failed password for root from 34.70.66.188 port 40830 ssh2 Oct 5 16:52:38 email sshd\[9819\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.70.66.188 user=root Oct 5 16:52:40 email sshd\[9819\]: Failed password for root from 34.70.66.188 port 48272 ssh2 Oct 5 16:56:10 email sshd\[10454\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.70.66.188 user=root ...	2020-10-06 01:01:21
183.83.47.186	attack	Oct 4 21:37:11 ms-srv sshd[22478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.83.47.186 Oct 4 21:37:14 ms-srv sshd[22478]: Failed password for invalid user system from 183.83.47.186 port 6794 ssh2	2020-10-06 00:53:51

Recently Reported IPs

99.160.65.234	177.204.43.149	219.103.128.231	84.63.176.188
141.52.22.146	171.36.134.69	14.175.55.193	78.15.156.119
125.253.1.171	185.124.185.142	78.102.217.130	168.181.180.49
176.74.86.184	117.153.192.178	12.106.66.124	52.141.30.194
180.241.75.21	61.74.192.172	156.169.198.77	91.222.82.195