121.157.2.99 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Korea Republic of

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
121.157.223.85	attackspam	Unauthorized connection attempt detected from IP address 121.157.223.85 to port 5555 [J]	2020-03-01 15:07:33
121.157.207.26	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 08:15:46
121.157.207.91	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 08:14:07
121.157.223.85	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 08:11:42
121.157.223.85	attackbots	Unauthorized connection attempt detected from IP address 121.157.223.85 to port 23 [J]	2020-02-23 18:58:08
121.157.229.23	attackbots	Nov 30 18:46:57 dev0-dcde-rnet sshd[25186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.157.229.23 Nov 30 18:46:59 dev0-dcde-rnet sshd[25186]: Failed password for invalid user nmurthy from 121.157.229.23 port 36052 ssh2 Nov 30 18:50:21 dev0-dcde-rnet sshd[25215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.157.229.23	2019-12-01 04:23:01
121.157.229.23	attack	Invalid user admin from 121.157.229.23 port 43418	2019-11-23 16:45:54
121.157.229.23	attack	Nov 22 23:08:08 marvibiene sshd[48607]: Invalid user wwwrun from 121.157.229.23 port 44364 Nov 22 23:08:08 marvibiene sshd[48607]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.157.229.23 Nov 22 23:08:08 marvibiene sshd[48607]: Invalid user wwwrun from 121.157.229.23 port 44364 Nov 22 23:08:10 marvibiene sshd[48607]: Failed password for invalid user wwwrun from 121.157.229.23 port 44364 ssh2 ...	2019-11-23 07:38:19
121.157.204.146	attackspam	Nov 9 13:50:09 woltan sshd[11426]: Failed password for root from 121.157.204.146 port 50291 ssh2	2019-11-10 01:36:33
121.157.204.146	attack	Nov 5 07:52:26 server sshd\[23491\]: Invalid user admin from 121.157.204.146 Nov 5 07:52:26 server sshd\[23491\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.157.204.146 Nov 5 07:52:28 server sshd\[23491\]: Failed password for invalid user admin from 121.157.204.146 port 49950 ssh2 Nov 5 07:52:31 server sshd\[23491\]: Failed password for invalid user admin from 121.157.204.146 port 49950 ssh2 Nov 5 07:52:33 server sshd\[23491\]: Failed password for invalid user admin from 121.157.204.146 port 49950 ssh2 ...	2019-11-05 14:27:02
121.157.229.23	attackspambots	$f2bV_matches	2019-11-05 13:35:35
121.157.204.146	attackbotsspam	Nov 4 20:04:32 areeb-Workstation sshd[26038]: Failed password for root from 121.157.204.146 port 55203 ssh2 Nov 4 20:04:43 areeb-Workstation sshd[26038]: error: maximum authentication attempts exceeded for root from 121.157.204.146 port 55203 ssh2 [preauth] ...	2019-11-05 00:07:57
121.157.207.91	attack	Last failed login: Sat Nov 2 21:24:29 CST 2019 from 198.144.184.34 on ssh:notty	2019-11-02 21:26:31
121.157.204.146	attackspambots	Unauthorized SSH login attempts	2019-10-29 04:26:04
121.157.229.23	attackspambots	2019-10-11T06:41:52.565764abusebot-7.cloudsearch.cf sshd\[3239\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.157.229.23 user=root	2019-10-11 14:52:41

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.157.2.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28728
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;121.157.2.99.			IN	A

;; AUTHORITY SECTION:
.			100	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 08:22:32 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 99.2.157.121.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 99.2.157.121.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
190.47.43.149	attack	743. On May 31 2020 experienced a Brute Force SSH login attempt -> 1 unique times by 190.47.43.149.	2020-06-01 07:42:56
182.23.93.140	attackbotsspam	May 31 21:52:32 localhost sshd\[2947\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.23.93.140 user=root May 31 21:52:34 localhost sshd\[2947\]: Failed password for root from 182.23.93.140 port 48596 ssh2 May 31 22:01:29 localhost sshd\[3090\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.23.93.140 user=root ...	2020-06-01 07:49:37
104.192.82.99	attackbots	Failed password for root from 104.192.82.99 port 36802 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.192.82.99 user=root Failed password for root from 104.192.82.99 port 58640 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.192.82.99 user=root Failed password for root from 104.192.82.99 port 52238 ssh2	2020-06-01 07:41:16
222.186.190.2	attackspambots	2020-06-01T01:36:17.947337ns386461 sshd\[4621\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.2 user=root 2020-06-01T01:36:19.946628ns386461 sshd\[4621\]: Failed password for root from 222.186.190.2 port 14814 ssh2 2020-06-01T01:36:22.710012ns386461 sshd\[4621\]: Failed password for root from 222.186.190.2 port 14814 ssh2 2020-06-01T01:36:26.086600ns386461 sshd\[4621\]: Failed password for root from 222.186.190.2 port 14814 ssh2 2020-06-01T01:36:29.336006ns386461 sshd\[4621\]: Failed password for root from 222.186.190.2 port 14814 ssh2 ...	2020-06-01 07:56:02
109.162.94.25	attackspam	20/5/31@16:22:29: FAIL: Alarm-Network address from=109.162.94.25 20/5/31@16:22:29: FAIL: Alarm-Network address from=109.162.94.25 ...	2020-06-01 08:09:34
208.109.53.185	attackspambots	208.109.53.185 - - [01/Jun/2020:00:32:55 +0200] "GET /wp-login.php HTTP/1.1" 200 6364 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 208.109.53.185 - - [01/Jun/2020:00:32:57 +0200] "POST /wp-login.php HTTP/1.1" 200 6615 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 208.109.53.185 - - [01/Jun/2020:00:32:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-06-01 08:07:48
145.239.69.74	attackspambots	Automatic report - XMLRPC Attack	2020-06-01 07:37:58
120.92.139.2	attack	fail2ban -- 120.92.139.2 ...	2020-06-01 07:45:21
149.56.44.101	attack	409. On May 31 2020 experienced a Brute Force SSH login attempt -> 2 unique times by 149.56.44.101.	2020-06-01 08:12:49
111.67.202.119	attackbots	$f2bV_matches	2020-06-01 08:06:37
183.89.229.140	attackspambots	(imapd) Failed IMAP login from 183.89.229.140 (TH/Thailand/mx-ll-183.89.229-140.dynamic.3bb.in.th): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jun 1 00:52:36 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=183.89.229.140, lip=5.63.12.44, session=	2020-06-01 07:56:28
185.153.196.225	attackbots	Fail2Ban Ban Triggered	2020-06-01 08:16:19
222.186.173.201	attackspambots	Jun 1 02:49:27 ift sshd\[48663\]: Failed password for root from 222.186.173.201 port 24346 ssh2Jun 1 02:49:30 ift sshd\[48663\]: Failed password for root from 222.186.173.201 port 24346 ssh2Jun 1 02:49:33 ift sshd\[48663\]: Failed password for root from 222.186.173.201 port 24346 ssh2Jun 1 02:49:36 ift sshd\[48663\]: Failed password for root from 222.186.173.201 port 24346 ssh2Jun 1 02:49:39 ift sshd\[48663\]: Failed password for root from 222.186.173.201 port 24346 ssh2 ...	2020-06-01 07:52:06
61.91.164.142	attackspambots	(imapd) Failed IMAP login from 61.91.164.142 (TH/Thailand/61-91-164-142.static.asianet.co.th): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jun 1 00:52:53 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 53 secs): user=, method=PLAIN, rip=61.91.164.142, lip=5.63.12.44, session=	2020-06-01 07:52:59
62.173.147.225	attack	[2020-05-31 19:46:53] NOTICE[1157][C-0000ad3b] chan_sip.c: Call from '' (62.173.147.225:51119) to extension '801148748379001' rejected because extension not found in context 'public'. [2020-05-31 19:46:53] SECURITY[1173] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-05-31T19:46:53.102-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="801148748379001",SessionID="0x7f5f1027fe28",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.173.147.225/51119",ACLName="no_extension_match" [2020-05-31 19:46:57] NOTICE[1157][C-0000ad3c] chan_sip.c: Call from '' (62.173.147.225:54867) to extension '01048748379001' rejected because extension not found in context 'public'. [2020-05-31 19:46:57] SECURITY[1173] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-05-31T19:46:57.599-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01048748379001",SessionID="0x7f5f10678288",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-06-01 08:01:04

Recently Reported IPs

54.213.169.12	188.166.227.166	139.195.52.104	191.240.112.162
156.211.152.133	154.12.102.143	168.83.80.80	117.195.87.197
79.152.142.202	134.236.183.171	119.29.197.210	104.252.179.243
188.208.58.171	45.145.129.35	212.164.216.128	64.43.90.22
23.98.144.70	84.187.156.200	201.150.184.132	115.63.47.121