This IP address has been reported a total of
193
times from
124 distinct
sources.
121.122.65.147 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
ICS Labs identified 121.122.65.147 as a malicious indicator from threat intelligence.
DDoS Attack
Hacking
Exploited Host
Anonymous
Repeated SSH brute force and user enumeration attempts against a secured web server. Multiple failed ...
show moreRepeated SSH brute force and user enumeration attempts against a secured web server. Multiple failed authentication attempts from this IP across an extended period.
show less
Brute-Force
SSH
Anonymous
Repeated SSH brute force and user enumeration attempts against a secured web server. Multiple failed ...
show moreRepeated SSH brute force and user enumeration attempts against a secured web server. Multiple failed authentication attempts from this IP across an extended period.
show less
{"event":{"DateTime":"2026-04-26T02:00:39Z","RemoteAddr":"121.122.65.147:58134","Protocol":"SSH","Co ...
show more{"event":{"DateTime":"2026-04-26T02:00:39Z","RemoteAddr":"121.122.65.147:58134","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"b41701dc-d16e-41cb-8134-a526b5b42f64","Environ":"","User":"root","Password":"nPSpP4PBW0","Client":"SSH-2.0-libssh_0.12.0","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"121.122.65.147","SourcePort":"58134","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"}
{"event":{"DateTime":"2026-04-26T02:01:40Z","RemoteAddr":"121.122.65.147:28939","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"ae6a9b53-98e9-483f-a434-cafd7da3c2cc","Environ":"","User":"root","Password":"Ks123456@","Client":"SSH-2.0-libssh_0.12.0","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI"
show less
121.122.65.147 (MY/Malaysia/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; ...
show more121.122.65.147 (MY/Malaysia/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 26 23:51:29 15863 sshd[25430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.122.65.147 user=root
Apr 26 23:56:00 15863 sshd[25728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.122.65.147 user=root
Apr 26 23:51:31 15863 sshd[25430]: Failed password for root from 121.122.65.147 port 14133 ssh2
Apr 26 23:47:14 15863 sshd[25140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.167.89.222 user=root
Apr 26 23:47:17 15863 sshd[25140]: Failed password for root from 103.167.89.222 port 43854 ssh2
IP Addresses Blocked:
show less
Brute-Force
SSH
Anonymous
Repeated SSH brute force and user enumeration attempts against a secured web server. Multiple failed ...
show moreRepeated SSH brute force and user enumeration attempts against a secured web server. Multiple failed authentication attempts from this IP across an extended period.
show less
2026-04-27T04:43:06.819547+02:00 gw-de34-01.guestgw.net sshd[703654]: Disconnected from authenticati ...
show more2026-04-27T04:43:06.819547+02:00 gw-de34-01.guestgw.net sshd[703654]: Disconnected from authenticating user root 121.122.65.147 port 4470 [preauth]
2026-04-27T04:44:08.303799+02:00 gw-de34-01.guestgw.net sshd[703944]: Disconnected from authenticating user root 121.122.65.147 port 1787 [preauth]
2026-04-27T04:45:11.057933+02:00 gw-de34-01.guestgw.net sshd[704281]: Disconnected from authenticating user root 121.122.65.147 port 35809 [preauth]
2026-04-27T04:46:10.793017+02:00 gw-de34-01.guestgw.net sshd[704576]: Disconnected from authenticating user root 121.122.65.147 port 56228 [preauth]
2026-04-27T04:47:09.598581+02:00 gw-de34-01.guestgw.net sshd[704859]: Disconnected from authenticating user root 121.122.65.147 port 48305 [preauth]
show less