121.230.252.107

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: ChinaNet Jiangsu Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
121.230.252.218	spamattack	[2020/02/17 00:13:35] [121.230.252.218:2100-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 00:13:35] [121.230.252.218:2098-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 00:13:36] [121.230.252.218:2097-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 00:13:36] [121.230.252.218:2102-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 00:13:37] [121.230.252.218:2100-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 00:13:41] [121.230.252.218:2100-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 00:13:41] [121.230.252.218:2097-0] User leslie@luxnetcorp.com.tw AUTH fails. [2020/02/17 00:13:41] [121.230.252.218:2100-0] User leslie@luxnetcorp.com.tw AUTH fails. [	2020-02-17 09:12:44

Type

Details

Datetime

121.230.252.218

spamattack

[2020/02/17 00:13:35] [121.230.252.218:2100-0] User leslie@luxnetcorp.com.tw AUTH fails.
[2020/02/17 00:13:35] [121.230.252.218:2098-0] User leslie@luxnetcorp.com.tw AUTH fails.
[2020/02/17 00:13:36] [121.230.252.218:2097-0] User leslie@luxnetcorp.com.tw AUTH fails.
[2020/02/17 00:13:36] [121.230.252.218:2102-0] User leslie@luxnetcorp.com.tw AUTH fails.
[2020/02/17 00:13:37] [121.230.252.218:2100-0] User leslie@luxnetcorp.com.tw AUTH fails.
[2020/02/17 00:13:41] [121.230.252.218:2100-0] User leslie@luxnetcorp.com.tw AUTH fails.
[2020/02/17 00:13:41] [121.230.252.218:2097-0] User leslie@luxnetcorp.com.tw AUTH fails.
[2020/02/17 00:13:41] [121.230.252.218:2100-0] User leslie@luxnetcorp.com.tw AUTH fails.
[

2020-02-17 09:12:44

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.230.252.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8787
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;121.230.252.107.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071700 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 17 22:50:06 CST 2019
;; MSG SIZE  rcvd: 119

Host info

Host 107.252.230.121.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 107.252.230.121.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
167.99.74.164	attack	24.07.2019 06:01:54 SSH access blocked by firewall	2019-07-24 14:16:18
77.60.16.15	attackspam	Unauthorized connection attempt from IP address 77.60.16.15 on Port 445(SMB)	2019-07-24 14:25:40
217.138.50.154	attackspambots	Jul 24 07:25:54 SilenceServices sshd[30930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.138.50.154 Jul 24 07:25:56 SilenceServices sshd[30930]: Failed password for invalid user software from 217.138.50.154 port 42526 ssh2 Jul 24 07:30:27 SilenceServices sshd[1613]: Failed password for root from 217.138.50.154 port 39694 ssh2	2019-07-24 13:48:47
142.147.97.180	attackspam	Jul 24 07:30:27 MailServer postfix/smtpd[2881]: NOQUEUE: reject: RCPT from unknown[142.147.97.180]: 454 4.7.1 : Relay access denied; from= to= proto=ESMTP helo= Jul 24 07:30:28 MailServer postfix/smtpd[2881]: NOQUEUE: reject: RCPT from unknown[142.147.97.180]: 454 4.7.1 : Relay access denied; from= to= proto=ESMTP helo= Jul 24 07:30:29 MailServer postfix/smtpd[2881]: NOQUEUE: reject: RCPT from unknown[142.147.97.180]: 454 4.7.1 : Relay access denied; from= to= proto=ESMTP helo= ...	2019-07-24 14:33:43
202.104.29.14	attack	Automatic report - Port Scan Attack	2019-07-24 13:49:47
45.35.104.120	attackbots	Jul 24 04:06:53 [snip] sshd[8340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.35.104.120 user=root Jul 24 04:06:55 [snip] sshd[8340]: Failed password for root from 45.35.104.120 port 40634 ssh2 Jul 24 07:32:20 [snip] sshd[24522]: Invalid user office from 45.35.104.120 port 60284 Jul 24 07:32:20 [snip] sshd[24522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.35.104.120[...]	2019-07-24 13:47:17
185.53.88.22	attackbots	\[2019-07-24 02:17:34\] SECURITY\[20812\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-24T02:17:34.480-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441144630211",SessionID="0x7f06f823f758",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.22/52623",ACLName="no_extension_match" \[2019-07-24 02:18:38\] SECURITY\[20812\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-24T02:18:38.820-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011441144630211",SessionID="0x7f06f83e80f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.22/56744",ACLName="no_extension_match" \[2019-07-24 02:19:44\] SECURITY\[20812\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-24T02:19:44.825-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9441144630211",SessionID="0x7f06f823f758",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.22/57097",ACLName="no_exte	2019-07-24 14:27:32
221.148.45.168	attack	Jul 24 01:44:43 debian sshd\[26953\]: Invalid user ishihara from 221.148.45.168 port 54089 Jul 24 01:44:43 debian sshd\[26953\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.148.45.168 Jul 24 01:44:45 debian sshd\[26953\]: Failed password for invalid user ishihara from 221.148.45.168 port 54089 ssh2 ...	2019-07-24 13:53:07
185.175.93.14	attack	Splunk® : port scan detected: Jul 24 01:42:07 testbed kernel: Firewall: TCP_IN Blocked IN=eth0 OUT= MAC=82:c6:52:d1:6e:53:64:c3:d6:0b:ef:f0:08:00 SRC=185.175.93.14 DST=104.248.11.191 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=15279 PROTO=TCP SPT=53383 DPT=3369 WINDOW=1024 RES=0x00 SYN URGP=0	2019-07-24 14:15:51
105.227.237.158	attackspam	Automatic report - Port Scan Attack	2019-07-24 14:05:31
89.97.218.140	attackspam	Many RDP login attempts detected by IDS script	2019-07-24 14:35:16
189.109.247.150	attackspam	Jul 24 08:30:14 srv-4 sshd\[11626\]: Invalid user user from 189.109.247.150 Jul 24 08:30:14 srv-4 sshd\[11626\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.109.247.150 Jul 24 08:30:15 srv-4 sshd\[11626\]: Failed password for invalid user user from 189.109.247.150 port 26089 ssh2 ...	2019-07-24 14:14:42
182.254.154.89	attackbotsspam	Jul 24 07:54:10 localhost sshd\[16895\]: Invalid user Administrator from 182.254.154.89 port 46540 Jul 24 07:54:10 localhost sshd\[16895\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.254.154.89 Jul 24 07:54:13 localhost sshd\[16895\]: Failed password for invalid user Administrator from 182.254.154.89 port 46540 ssh2	2019-07-24 13:55:31
207.154.194.145	attack	2019-07-24T06:35:52.950690abusebot-6.cloudsearch.cf sshd\[6867\]: Invalid user ch from 207.154.194.145 port 49658	2019-07-24 14:36:16
37.59.31.133	attackbots	2019-07-24T07:25:38.160612 sshd[22886]: Invalid user ramesh from 37.59.31.133 port 35636 2019-07-24T07:25:38.174924 sshd[22886]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.31.133 2019-07-24T07:25:38.160612 sshd[22886]: Invalid user ramesh from 37.59.31.133 port 35636 2019-07-24T07:25:40.400140 sshd[22886]: Failed password for invalid user ramesh from 37.59.31.133 port 35636 ssh2 2019-07-24T07:30:06.604736 sshd[22947]: Invalid user helpdesk from 37.59.31.133 port 59035 ...	2019-07-24 14:22:58

Recently Reported IPs

47.92.106.244	216.245.196.206	91.205.66.86	95.168.120.29
77.85.169.149	149.127.189.183	188.105.91.169	114.250.121.215
220.138.173.143	103.96.3.149	24.229.55.121	23.80.157.95
156.164.240.39	61.181.70.210	157.99.225.114	185.175.93.3
209.167.100.208	124.20.78.90	49.131.234.204	113.2.232.4