121.101.132.168
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Infrastruktur Terabit Yogyakarta
- Usage Type
- Fixed Line ISP
- ASN
- AS131706
- Domain Name
- terabit.net.id
- Country
- 🇮🇩 Indonesia
- City
- Pekalongan, Central Java
Abuse Reports
Total reports
25 from
22 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
|
Hacking Bad Web Bot | |
| 🇺🇸 鬼影233 |
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
|
Bad Web Bot | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 17969.
|
Port Scan | |
| 🇺🇸 kosada.com |
Web bot: denial-of-service flood
|
DDoS Attack Bad Web Bot | |
| 🇳🇱 Ariazonaa |
|
Brute-Force SSH | |
| 🇺🇸 MPL |
tcp ports: 22,23 (20 or more attempts)
|
Port Scan | |
| 🇩🇪 DerDoktor |
endlessh: 2026-08-12 15:07:33.035745483 2026-08-12T13:07:33.035Z CLOSE host=121.101.132.168 port=52160 fd=4 time=20.012 bytes=24
...
|
Port Scan SSH | |
| 🇩🇪 LRob |
Web application probing | req: &[!^\xD0\x07\x1D\x0F\x9B\xCBK\x91\xFE\xC4\x9D\xBC @q\xF9 | 11 distinct paths | UA: -
|
Port Scan Web App Attack | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇬🇧 tpguy825 |
SSH bruteforce from 121.101.132.168 port 33228, stuck in tarpit for 20.005 secs
|
Hacking Brute-Force SSH | |
| 🇬🇧 wiredalter |
Blocked by fail2ban on gVPS [22/tcp]
Source Port: 59594
TTL: 52
Packet Length: 60
TOS: 0x00
Analyzed by https://ip.wiredalter.com
|
Brute-Force SSH | |
| Anonymous |
PORT & IP Scan.
|
Port Scan Brute-Force | |
| 🇺🇸 RAP |
2026-08-08 16:49:04 UTC Unauthorized activity to TCP port 22. SSH
|
SSH | |
| 🇺🇸 kosada.com |
Web bot: denial-of-service flood
|
DDoS Attack Bad Web Bot | |
| 🇫🇮 inlink.ltd |
Known malicious PHP file or CMS probe
|
Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown