This IP address has been reported a total of
188
times from
117 distinct
sources.
121.141.64.198 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Jan 14 09:53:18 ctl sshd[26826]: Failed password for root from 121.141.64.198 port 49706 ssh2
Jan 14 ...
show moreJan 14 09:53:18 ctl sshd[26826]: Failed password for root from 121.141.64.198 port 49706 ssh2
Jan 14 09:53:18 ctl sshd[26826]: Connection closed by authenticating user root 121.141.64.198 port 49706 [preauth]
Jan 14 09:53:20 ctl sshd[26846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.141.64.198 user=root
Jan 14 09:53:22 ctl sshd[26846]: Failed password for root from 121.141.64.198 port 49718 ssh2
Jan 14 09:53:22 ctl sshd[26846]: Connection closed by authenticating user root 121.141.64.198 port 49718 [preauth]
...
show less
43 attacks on PHP URLs, shell probes:
GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1. ...
show more43 attacks on PHP URLs, shell probes:
GET /index.php?lang=../../../../../../../../tmp/index1 HTTP/1.1
POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1
show less
Malicious Network Traffic. Request: GET /index.php?lang=../../../../../../../../usr/local/lib/php/pe ...
show moreMalicious Network Traffic. Request: GET /index.php?lang=../../../../../../../../usr/local/lib/php/pearcmd&+config-create+/&/<?echo(md5(\x22hi\x22));?>+/tmp/index1.php HTTP/1.1
show less
[rede-44-49] (sshd) Failed SSH login from 121.141.64.198 (KR/South Korea/-): 5 in the last 3600 secs ...
show more[rede-44-49] (sshd) Failed SSH login from 121.141.64.198 (KR/South Korea/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug 4 06:13:49 sshd[2665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.141.64.198 user=[USERNAME]
Aug 4 06:13:51 sshd[2665]: Failed password for [USERNAME] from 121.141.64.198 port 17818 ssh2
Aug 4 06:13:53 sshd[2669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.141.64.198 user=[USERNAME]
Aug 4 06:13:55 sshd[2669]: Failed password for [USERNAME] from 121.141.64.198 port 43930 ssh2
Aug 4 06:13:5
show less
2024-08-04T09:00:56.031699+00:00 taurus sshd[270742]: pam_unix(sshd:auth): authentication failure; l ...
show more2024-08-04T09:00:56.031699+00:00 taurus sshd[270742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.141.64.198 user=root
2024-08-04T09:00:57.872052+00:00 taurus sshd[270742]: Failed password for root from 121.141.64.198 port 62762 ssh2
2024-08-04T09:01:02.637607+00:00 taurus sshd[270746]: Invalid user tscloudred from 121.141.64.198 port 53917
...
show less
2024-08-04 08:38:52 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
Anonymous
Aug 4 08:35:40 sbg1 sshd[1682200]: Invalid user maint from 121.141.64.198 port 7314
Aug 4 08:35:42 ...
show moreAug 4 08:35:40 sbg1 sshd[1682200]: Invalid user maint from 121.141.64.198 port 7314
Aug 4 08:35:42 sbg1 sshd[1682202]: Invalid user asterisk from 121.141.64.198 port 7141
Aug 4 08:35:47 sbg1 sshd[1682206]: Invalid user steamserver from 121.141.64.198 port 33881
...
show less
Aug 4 09:26:52 pinomail sshd[196718]: Invalid user admin from 121.141.64.198 port 24188
Aug 4 09:2 ...
show moreAug 4 09:26:52 pinomail sshd[196718]: Invalid user admin from 121.141.64.198 port 24188
Aug 4 09:26:55 pinomail sshd[196720]: Invalid user support from 121.141.64.198 port 59839
Aug 4 09:27:08 pinomail sshd[199137]: Invalid user bot from 121.141.64.198 port 25805
Aug 4 09:27:30 pinomail sshd[201612]: Invalid user appltest from 121.141.64.198 port 64387
Aug 4 09:27:33 pinomail sshd[201617]: Invalid user ubuntu from 121.141.64.198 port 40242
...
show less
Brute-Force
SSH
Showing 1 to
15
of 188 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩