121.230.52.139

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
121.230.52.232	attackbots	Aug 26 04:52:55 shivevps sshd[4054]: Bad protocol version identification '\024' from 121.230.52.232 port 56228 Aug 26 04:53:06 shivevps sshd[4925]: Bad protocol version identification '\024' from 121.230.52.232 port 56402 Aug 26 04:54:52 shivevps sshd[8369]: Bad protocol version identification '\024' from 121.230.52.232 port 42226 ...	2020-08-26 12:07:26

Type

Details

Datetime

121.230.52.232

attackbots

Aug 26 04:52:55 shivevps sshd[4054]: Bad protocol version identification '\024' from 121.230.52.232 port 56228
Aug 26 04:53:06 shivevps sshd[4925]: Bad protocol version identification '\024' from 121.230.52.232 port 56402
Aug 26 04:54:52 shivevps sshd[8369]: Bad protocol version identification '\024' from 121.230.52.232 port 42226
...

2020-08-26 12:07:26

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.230.52.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51663
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;121.230.52.139.			IN	A

;; AUTHORITY SECTION:
.			34	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030900 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 21:46:29 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 139.52.230.121.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.52.230.121.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
89.234.157.254	attackspam	Sep 4 11:28:37 mockhub sshd[11104]: Failed password for root from 89.234.157.254 port 44193 ssh2 Sep 4 11:28:50 mockhub sshd[11104]: error: maximum authentication attempts exceeded for root from 89.234.157.254 port 44193 ssh2 [preauth] ...	2020-09-05 04:59:13
144.217.60.239	attackspam	2020-09-04T18:53:50+0200 Failed SSH Authentication/Brute Force Attack. (Server 9)	2020-09-05 04:48:11
71.6.165.200	attack	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-09-05 04:55:21
203.90.233.7	attackbotsspam	Sep 4 18:41:33 markkoudstaal sshd[28208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.90.233.7 Sep 4 18:41:35 markkoudstaal sshd[28208]: Failed password for invalid user testmail from 203.90.233.7 port 56680 ssh2 Sep 4 18:53:21 markkoudstaal sshd[31525]: Failed password for root from 203.90.233.7 port 58130 ssh2 ...	2020-09-05 05:08:56
218.92.0.145	attackspambots	Sep 4 22:57:06 jane sshd[21702]: Failed password for root from 218.92.0.145 port 58728 ssh2 Sep 4 22:57:11 jane sshd[21702]: Failed password for root from 218.92.0.145 port 58728 ssh2 ...	2020-09-05 05:04:25
39.41.26.111	attack	Sep 4 18:53:05 mellenthin postfix/smtpd[32352]: NOQUEUE: reject: RCPT from unknown[39.41.26.111]: 554 5.7.1 Service unavailable; Client host [39.41.26.111] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/39.41.26.111; from= to= proto=ESMTP helo=<[39.41.26.111]>	2020-09-05 05:23:05
212.70.149.20	attackspam	Rude login attack (2789 tries in 1d)	2020-09-05 05:16:58
162.142.125.19	attackspam	firewall-block, port(s): 22222/tcp	2020-09-05 05:10:23
172.245.104.116	attackspam	ssh brute force	2020-09-05 04:59:29
111.250.84.76	attack	Honeypot attack, port: 445, PTR: 111-250-84-76.dynamic-ip.hinet.net.	2020-09-05 04:57:50
175.197.233.197	attack	Sep 4 20:32:35 vps-51d81928 sshd[215119]: Invalid user shawnding from 175.197.233.197 port 53546 Sep 4 20:32:35 vps-51d81928 sshd[215119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.197.233.197 Sep 4 20:32:35 vps-51d81928 sshd[215119]: Invalid user shawnding from 175.197.233.197 port 53546 Sep 4 20:32:37 vps-51d81928 sshd[215119]: Failed password for invalid user shawnding from 175.197.233.197 port 53546 ssh2 Sep 4 20:34:04 vps-51d81928 sshd[215130]: Invalid user svn from 175.197.233.197 port 46726 ...	2020-09-05 04:46:40
49.232.86.244	attack	Too many connections or unauthorized access detected from Arctic banned ip	2020-09-05 05:22:47
201.150.149.91	attack	Port probing on unauthorized port 23	2020-09-05 05:05:06
82.221.131.5	attackspambots	Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-09-05 04:58:07
212.83.163.170	attackbots	[2020-09-04 17:02:41] NOTICE[1194] chan_sip.c: Registration from '"743"' failed for '212.83.163.170:8742' - Wrong password [2020-09-04 17:02:41] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-04T17:02:41.791-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="743",SessionID="0x7f2ddc1178e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.163.170/8742",Challenge="2211ba07",ReceivedChallenge="2211ba07",ReceivedHash="0108e6e9a1934929da4f42bea84fb4fb" [2020-09-04 17:03:14] NOTICE[1194] chan_sip.c: Registration from '"742"' failed for '212.83.163.170:8709' - Wrong password [2020-09-04 17:03:14] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-04T17:03:14.254-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="742",SessionID="0x7f2ddc04e988",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83. ...	2020-09-05 05:04:47

Recently Reported IPs

121.230.52.127	121.230.52.154	121.230.52.164	121.230.52.179
121.230.52.189	121.230.52.196	121.230.52.213	121.230.52.223
121.230.52.24	129.17.24.248	121.230.52.241	121.230.52.253
121.230.52.254	121.230.52.26	121.230.52.3	121.230.52.32
121.230.52.4	121.230.52.52	121.230.52.6	121.230.52.60