Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Korea (the Republic of)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
121.149.93.150 attack
Sep 26 22:34:38 andromeda sshd\[11039\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.149.93.150  user=root
Sep 26 22:34:40 andromeda sshd\[11039\]: Failed password for root from 121.149.93.150 port 50090 ssh2
Sep 26 22:34:43 andromeda sshd\[11057\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.149.93.150  user=root
2020-09-28 02:40:06
121.149.93.150 attackbots
Sep 26 22:34:38 andromeda sshd\[11039\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.149.93.150  user=root
Sep 26 22:34:40 andromeda sshd\[11039\]: Failed password for root from 121.149.93.150 port 50090 ssh2
Sep 26 22:34:43 andromeda sshd\[11057\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.149.93.150  user=root
2020-09-27 18:46:41
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.149.9.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35815
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;121.149.9.52.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020901 1800 900 604800 86400

;; Query time: 138 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 10 07:55:19 CST 2025
;; MSG SIZE  rcvd: 105
Host info
Host 52.9.149.121.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 52.9.149.121.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
218.1.18.78 attackbotsspam
2020-05-26T05:40:09.648816server.espacesoutien.com sshd[17870]: Invalid user administrator from 218.1.18.78 port 45341
2020-05-26T05:40:09.663023server.espacesoutien.com sshd[17870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.1.18.78
2020-05-26T05:40:09.648816server.espacesoutien.com sshd[17870]: Invalid user administrator from 218.1.18.78 port 45341
2020-05-26T05:40:11.861120server.espacesoutien.com sshd[17870]: Failed password for invalid user administrator from 218.1.18.78 port 45341 ssh2
...
2020-05-26 14:05:22
144.76.253.74 attackbotsspam
MAIL: User Login Brute Force Attempt, PTR: static.74.253.76.144.clients.your-server.de.
2020-05-26 14:12:25
222.128.15.208 attack
Scanned 3 times in the last 24 hours on port 22
2020-05-26 14:06:11
180.76.177.237 attackbotsspam
May 26 08:07:49 piServer sshd[8654]: Failed password for root from 180.76.177.237 port 40036 ssh2
May 26 08:10:27 piServer sshd[9005]: Failed password for root from 180.76.177.237 port 43536 ssh2
...
2020-05-26 14:16:21
185.216.32.254 attackbotsspam
(mod_security) mod_security (id:20000010) triggered by 185.216.32.254 (BG/Bulgaria/-): 5 in the last 300 secs
2020-05-26 14:24:02
178.176.218.131 attackspam
 TCP (SYN) 178.176.218.131:50799 -> port 1080, len 52
2020-05-26 14:40:58
159.89.194.103 attackbotsspam
May 26 03:53:41 sso sshd[30318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.194.103
May 26 03:53:43 sso sshd[30318]: Failed password for invalid user joey from 159.89.194.103 port 45170 ssh2
...
2020-05-26 14:32:04
117.48.212.113 attackbotsspam
May 26 04:35:40 ip-172-31-61-156 sshd[32012]: Invalid user named from 117.48.212.113
May 26 04:35:42 ip-172-31-61-156 sshd[32012]: Failed password for invalid user named from 117.48.212.113 port 58870 ssh2
May 26 04:35:40 ip-172-31-61-156 sshd[32012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.48.212.113
May 26 04:35:40 ip-172-31-61-156 sshd[32012]: Invalid user named from 117.48.212.113
May 26 04:35:42 ip-172-31-61-156 sshd[32012]: Failed password for invalid user named from 117.48.212.113 port 58870 ssh2
...
2020-05-26 14:07:10
77.123.20.173 attackbotsspam
May 26 08:34:14 debian-2gb-nbg1-2 kernel: \[12733654.026749\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=77.123.20.173 DST=195.201.40.59 LEN=40 TOS=0x08 PREC=0x20 TTL=240 ID=650 PROTO=TCP SPT=44208 DPT=3549 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-26 14:38:44
61.177.174.31 attackspam
May 26 07:27:04  sshd\[3383\]: User root from 61.177.174.31 not allowed because not listed in AllowUsersMay 26 07:27:06  sshd\[3383\]: Failed password for invalid user root from 61.177.174.31 port 46365 ssh2
...
2020-05-26 14:07:35
118.218.72.59 attackspam
Automatic report - XMLRPC Attack
2020-05-26 14:00:16
223.240.80.31 attackspambots
May 26 06:30:53 vmd17057 sshd[27334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.240.80.31 
May 26 06:30:55 vmd17057 sshd[27334]: Failed password for invalid user teste from 223.240.80.31 port 36869 ssh2
...
2020-05-26 14:10:48
185.53.155.233 attack
$f2bV_matches
2020-05-26 14:09:24
106.54.253.152 attackbotsspam
Invalid user sql from 106.54.253.152 port 44034
2020-05-26 14:05:05
205.185.114.247 attackspam
2020-05-26T00:20:00.173451server.mjenks.net sshd[1637168]: Failed password for root from 205.185.114.247 port 48618 ssh2
2020-05-26T00:23:01.133247server.mjenks.net sshd[1637549]: Invalid user postgres from 205.185.114.247 port 43824
2020-05-26T00:23:01.140392server.mjenks.net sshd[1637549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=205.185.114.247
2020-05-26T00:23:01.133247server.mjenks.net sshd[1637549]: Invalid user postgres from 205.185.114.247 port 43824
2020-05-26T00:23:02.874990server.mjenks.net sshd[1637549]: Failed password for invalid user postgres from 205.185.114.247 port 43824 ssh2
...
2020-05-26 14:25:03

Recently Reported IPs

118.150.129.39 194.26.25.124 100.237.162.199 23.162.216.7
24.184.224.244 90.195.249.212 24.39.177.57 62.226.87.241
47.43.117.174 24.198.255.141 202.51.8.153 164.125.209.215
174.125.18.22 85.99.77.169 233.236.103.148 168.237.55.251
167.14.194.246 144.61.218.57 214.102.140.46 240.1.119.118