Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Korea (Republic of)

Internet Service Provider: KT Corporation

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attack
Sep  5 08:16:55 myvps sshd[31127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.160.139.118 
Sep  5 08:16:56 myvps sshd[31127]: Failed password for invalid user claude from 121.160.139.118 port 44118 ssh2
Sep  5 08:27:45 myvps sshd[5507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.160.139.118 
...
2020-09-05 21:02:40
attackspambots
Invalid user wanglj from 121.160.139.118 port 48152
2020-09-05 05:26:25
attack
Aug 18 05:29:11 IngegnereFirenze sshd[20216]: Failed password for invalid user vacation from 121.160.139.118 port 46606 ssh2
...
2020-08-18 18:01:53
attackbots
frenzy
2020-08-05 21:49:05
attackbots
Unauthorised connection attempt detected at AUO FR1 NODE2. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-07-28 16:42:16
attackspam
Invalid user lzf from 121.160.139.118 port 37478
2020-07-14 21:03:16
attack
Jul 11 20:39:27 zulu412 sshd\[6105\]: Invalid user www from 121.160.139.118 port 47786
Jul 11 20:39:27 zulu412 sshd\[6105\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.160.139.118
Jul 11 20:39:29 zulu412 sshd\[6105\]: Failed password for invalid user www from 121.160.139.118 port 47786 ssh2
...
2020-07-12 03:08:06
attackspambots
Jul 10 08:39:32 hosting sshd[9101]: Invalid user centos from 121.160.139.118 port 36926
...
2020-07-10 15:55:14
attackbots
(sshd) Failed SSH login from 121.160.139.118 (KR/South Korea/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD
2020-07-05 19:24:05
attackspambots
Jul  3 10:40:44 vps46666688 sshd[26486]: Failed password for root from 121.160.139.118 port 38686 ssh2
...
2020-07-03 22:29:35
attackbotsspam
Repeated brute force against a port
2020-06-25 21:10:45
attack
Jun 11 00:52:07 firewall sshd[25300]: Failed password for invalid user bopere from 121.160.139.118 port 51286 ssh2
Jun 11 00:55:36 firewall sshd[25494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.160.139.118  user=root
Jun 11 00:55:38 firewall sshd[25494]: Failed password for root from 121.160.139.118 port 47882 ssh2
...
2020-06-11 14:50:22
attackbotsspam
Jun  7 03:49:12 marvibiene sshd[17499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.160.139.118  user=root
Jun  7 03:49:14 marvibiene sshd[17499]: Failed password for root from 121.160.139.118 port 34530 ssh2
Jun  7 03:59:04 marvibiene sshd[17583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.160.139.118  user=root
Jun  7 03:59:06 marvibiene sshd[17583]: Failed password for root from 121.160.139.118 port 40620 ssh2
...
2020-06-07 12:18:00
attackbots
May 25 14:52:35 Tower sshd[4196]: Connection from 121.160.139.118 port 45776 on 192.168.10.220 port 22 rdomain ""
May 25 14:52:36 Tower sshd[4196]: Failed password for root from 121.160.139.118 port 45776 ssh2
May 25 14:52:37 Tower sshd[4196]: Received disconnect from 121.160.139.118 port 45776:11: Bye Bye [preauth]
May 25 14:52:37 Tower sshd[4196]: Disconnected from authenticating user root 121.160.139.118 port 45776 [preauth]
2020-05-26 04:08:19
attack
detected by Fail2Ban
2020-05-10 19:49:23
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.160.139.118
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32115
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;121.160.139.118.		IN	A

;; AUTHORITY SECTION:
.			573	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051000 1800 900 604800 86400

;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 10 19:49:20 CST 2020
;; MSG SIZE  rcvd: 119
Host info
Host 118.139.160.121.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 118.139.160.121.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
150.95.54.138 attackbotsspam
WordPress login Brute force / Web App Attack on client site.
2019-10-13 23:23:15
178.128.76.6 attack
Oct 13 17:08:43 tux-35-217 sshd\[22154\]: Invalid user 123 from 178.128.76.6 port 47784
Oct 13 17:08:43 tux-35-217 sshd\[22154\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.76.6
Oct 13 17:08:45 tux-35-217 sshd\[22154\]: Failed password for invalid user 123 from 178.128.76.6 port 47784 ssh2
Oct 13 17:13:02 tux-35-217 sshd\[22185\]: Invalid user Q!W@E\#R$T% from 178.128.76.6 port 59186
Oct 13 17:13:02 tux-35-217 sshd\[22185\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.76.6
...
2019-10-13 23:37:05
180.126.59.16 attackbots
(Oct 13)  LEN=44 TOS=0x10 PREC=0x40 TTL=49 ID=37436 TCP DPT=8080 WINDOW=28504 SYN 
 (Oct 13)  LEN=44 TOS=0x10 PREC=0x40 TTL=49 ID=16831 TCP DPT=8080 WINDOW=27337 SYN 
 (Oct 13)  LEN=44 TOS=0x10 PREC=0x40 TTL=49 ID=13958 TCP DPT=8080 WINDOW=28504 SYN 
 (Oct 13)  LEN=44 TOS=0x10 PREC=0x40 TTL=49 ID=29016 TCP DPT=8080 WINDOW=27337 SYN 
 (Oct 12)  LEN=44 TOS=0x10 PREC=0x40 TTL=49 ID=14552 TCP DPT=8080 WINDOW=27337 SYN 
 (Oct 11)  LEN=44 TOS=0x10 PREC=0x40 TTL=49 ID=34225 TCP DPT=8080 WINDOW=2203 SYN 
 (Oct 11)  LEN=44 TOS=0x10 PREC=0x40 TTL=49 ID=9761 TCP DPT=8080 WINDOW=27337 SYN 
 (Oct 10)  LEN=44 TOS=0x10 PREC=0x40 TTL=49 ID=43125 TCP DPT=8080 WINDOW=27337 SYN 
 (Oct 10)  LEN=44 TOS=0x10 PREC=0x40 TTL=49 ID=57131 TCP DPT=8080 WINDOW=2203 SYN 
 (Oct  9)  LEN=44 TOS=0x10 PREC=0x40 TTL=49 ID=821 TCP DPT=8080 WINDOW=28504 SYN 
 (Oct  9)  LEN=44 TOS=0x10 PREC=0x40 TTL=49 ID=41115 TCP DPT=8080 WINDOW=37291 SYN 
 (Oct  8)  LEN=44 TOS=0x10 PREC=0x40 TTL=49 ID=2690 TCP DPT=8080 WINDOW=28504 SYN...
2019-10-13 23:50:05
78.234.142.90 attackbots
Oct 13 13:50:46 xeon sshd[19095]: Failed password for invalid user ubnt from 78.234.142.90 port 37614 ssh2
2019-10-13 23:29:47
79.137.73.253 attackspam
Oct 13 03:12:38 kapalua sshd\[11503\]: Invalid user !@\#qwe from 79.137.73.253
Oct 13 03:12:38 kapalua sshd\[11503\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=253.ip-79-137-73.eu
Oct 13 03:12:41 kapalua sshd\[11503\]: Failed password for invalid user !@\#qwe from 79.137.73.253 port 56842 ssh2
Oct 13 03:16:50 kapalua sshd\[11871\]: Invalid user P@\$\$w0rt-123 from 79.137.73.253
Oct 13 03:16:50 kapalua sshd\[11871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=253.ip-79-137-73.eu
2019-10-13 23:31:58
157.245.97.213 attackbots
Sql/code injection probe
2019-10-14 00:00:26
213.128.67.212 attackspambots
Oct 13 16:57:38 vmanager6029 sshd\[16763\]: Invalid user FAKEPASS from 213.128.67.212 port 44698
Oct 13 16:57:38 vmanager6029 sshd\[16763\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.128.67.212
Oct 13 16:57:40 vmanager6029 sshd\[16763\]: Failed password for invalid user FAKEPASS from 213.128.67.212 port 44698 ssh2
2019-10-13 23:29:17
223.102.24.64 attack
[Sun Oct 13 02:19:32 2019 GMT] "chine machienry igR"  [URIBL_INV,RDNS_NONE], Subject: re: supply plastic machienry from chine
2019-10-13 23:42:26
177.124.89.14 attackspambots
Oct 13 04:07:05 hanapaa sshd\[6533\]: Invalid user Cream@2017 from 177.124.89.14
Oct 13 04:07:05 hanapaa sshd\[6533\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.124.89.14
Oct 13 04:07:07 hanapaa sshd\[6533\]: Failed password for invalid user Cream@2017 from 177.124.89.14 port 40030 ssh2
Oct 13 04:12:06 hanapaa sshd\[7032\]: Invalid user Utilisateur@123 from 177.124.89.14
Oct 13 04:12:06 hanapaa sshd\[7032\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.124.89.14
2019-10-14 00:05:37
176.113.56.5 attackbots
Automatic report - Port Scan Attack
2019-10-13 23:41:43
203.93.209.8 attack
2019-10-13T12:56:13.526866abusebot-7.cloudsearch.cf sshd\[17854\]: Invalid user 123Fastfood from 203.93.209.8 port 53155
2019-10-13 23:46:29
31.179.222.10 attackspam
Oct 13 07:16:36 mail postfix/postscreen[193600]: PREGREET 34 after 0.25 from [31.179.222.10]:57493: EHLO 82-160-112-200.tktelekom.pl

...
2019-10-13 23:44:49
209.99.16.76 attackspambots
Automatic report - XMLRPC Attack
2019-10-13 23:53:43
222.186.42.4 attackspambots
2019-10-13T15:53:36.224282abusebot-8.cloudsearch.cf sshd\[16606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.4  user=root
2019-10-14 00:03:34
89.248.160.193 attackspam
10/13/2019-17:17:22.574324 89.248.160.193 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 99
2019-10-13 23:30:47

Recently Reported IPs

36.70.90.107 197.44.49.170 187.220.127.253 36.81.4.248
203.59.97.181 182.56.68.137 1.199.73.17 220.191.230.83
103.218.242.102 94.230.121.148 46.98.123.50 89.22.148.137
49.232.160.134 137.24.150.110 193.112.100.92 17.166.81.218
242.3.241.18 218.166.98.127 244.217.1.63 37.143.222.59