This IP address has been reported a total of
59
times from
47 distinct
sources.
121.196.239.198 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Finland
with 14
reports;
Germany
with 4
reports;
France
with 1
report.
The most common categories in these recent reports were:
Brute-Force
21
times;
SSH
20
times;
Port Scan
1
time.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
Sustained failed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 20 ...
show moreSustained failed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 20/100 (low) | Phase: active_brute_force (sustained failures, recently active)
Failed auth: 68 (10 bad password, 58 invalid user) | 0 success | 107 total SSH log events | seen on 1 sensor(s)
Origin: China (CN) | AS37963 Hangzhou Alibaba Advertising Co.,Ltd. | 121.196.239.0/24
First seen: 2026-08-31 05:25:03 UTC | Last seen: 2026-08-31 07:38:10 UTC
Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot.
show less
2026-08-31T08:14:03.275995+02:00 alcyone sshd-session[3271104]: Failed password for invalid user ela ...
show more2026-08-31T08:14:03.275995+02:00 alcyone sshd-session[3271104]: Failed password for invalid user elastic from 121.196.239.198 port 58396 ssh2
2026-08-31T08:21:00.746717+02:00 alcyone sshd-session[3272958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.196.239.198 user=root
2026-08-31T08:21:02.974132+02:00 alcyone sshd-session[3272958]: Failed password for root from 121.196.239.198 port 57106 ssh2
...
show less
2026-08-30T10:24:03.406106-05:00 debian-hel1 sshd-session[29682]: Invalid user deploy from 121.196.2 ...
show more2026-08-30T10:24:03.406106-05:00 debian-hel1 sshd-session[29682]: Invalid user deploy from 121.196.239.198 port 57570
2026-08-30T10:24:03.622203-05:00 debian-hel1 sshd-session[29682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.196.239.198
2026-08-30T10:24:05.285271-05:00 debian-hel1 sshd-session[29682]: Failed password for invalid user deploy from 121.196.239.198 port 57570 ssh2
...
show less
Brute-Force
SSH
Anonymous
SSH Brute-Force Attempt at 2026-08-30T15:11:54+00:00
Brute-Force
SSH
Anonymous
SSH Brute-Force Attempt at 2026-08-30T15:11:45+00:00
2026-08-30T15:11:13.016081+00:00 Linux15 sshd-session[2175519]: Invalid user ubuntu from 121.196.239 ...
show more2026-08-30T15:11:13.016081+00:00 Linux15 sshd-session[2175519]: Invalid user ubuntu from 121.196.239.198 port 60778
2026-08-30T15:11:13.266780+00:00 Linux15 sshd-session[2175519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.196.239.198
2026-08-30T15:11:15.173600+00:00 Linux15 sshd-session[2175519]: Failed password for invalid user ubuntu from 121.196.239.198 port 60778 ssh2
2026-08-30T15:11:17.718269+00:00 Linux15 sshd-session[2175703]: Invalid user vagrant from 121.196.239.198 port 60782
2026-08-30T15:11:17.972804+00:00 Linux15 sshd-session[2175703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.196.239.198
2026-08-30T15:11:19.840890+00:00 Linux15 sshd-session[2175703]: Failed password for invalid user vagrant from 121.196.239.198 port 60782 ssh2
2026-08-30T15:11:22.568760+00:00 Linux15 sshd-session[2175963]: Invalid user test from 121.196.239.198 port 56014
2026-08-30T15:11:22.817853+00:00 L
...
show less
2026-08-30T16:52:59.087629+02:00 Linux14 sshd-session[1424622]: Invalid user ubuntu from 121.196.239 ...
show more2026-08-30T16:52:59.087629+02:00 Linux14 sshd-session[1424622]: Invalid user ubuntu from 121.196.239.198 port 49824
2026-08-30T16:53:00.066732+02:00 Linux14 sshd-session[1424622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.196.239.198
2026-08-30T16:53:02.288070+02:00 Linux14 sshd-session[1424622]: Failed password for invalid user ubuntu from 121.196.239.198 port 49824 ssh2
2026-08-30T16:53:06.340387+02:00 Linux14 sshd-session[1425126]: Invalid user vagrant from 121.196.239.198 port 39820
2026-08-30T16:53:06.582010+02:00 Linux14 sshd-session[1425126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.196.239.198
2026-08-30T16:53:08.856702+02:00 Linux14 sshd-session[1425126]: Failed password for invalid user vagrant from 121.196.239.198 port 39820 ssh2
2026-08-30T16:53:11.266171+02:00 Linux14 sshd-session[1425420]: Invalid user test from 121.196.239.198 port 40470
2026-08-30T16:53:11.509170+02:00 L
...
show less
2026-08-30T16:44:53.747434+02:00 irc.chewbakka.ch sshd[3512701]: Invalid user deploy from 121.196.23 ...
show more2026-08-30T16:44:53.747434+02:00 irc.chewbakka.ch sshd[3512701]: Invalid user deploy from 121.196.239.198 port 49720
2026-08-30T16:44:55.099868+02:00 irc.chewbakka.ch sshd[3512703]: Invalid user ubuntu from 121.196.239.198 port 49734
...
show less
2026-08-30T16:37:28.518462+02:00 frenzy sshd-session[12797]: Invalid user deploy from 121.196.239.19 ...
show more2026-08-30T16:37:28.518462+02:00 frenzy sshd-session[12797]: Invalid user deploy from 121.196.239.198 port 39184
2026-08-30T16:37:28.775981+02:00 frenzy sshd-session[12797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.196.239.198
2026-08-30T16:37:30.776156+02:00 frenzy sshd-session[12797]: Failed password for invalid user deploy from 121.196.239.198 port 39184 ssh2
2026-08-30T16:37:33.748988+02:00 frenzy sshd-session[12803]: Invalid user ubuntu from 121.196.239.198 port 44704
...
show less
2026-08-30T16:32:59.916267+02:00 server sshd[3794387]: Invalid user deploy from 121.196.239.198 port ...
show more2026-08-30T16:32:59.916267+02:00 server sshd[3794387]: Invalid user deploy from 121.196.239.198 port 42672
2026-08-30T16:33:00.094475+02:00 server sshd[3794387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.196.239.198
2026-08-30T16:33:02.176751+02:00 server sshd[3794387]: Failed password for invalid user deploy from 121.196.239.198 port 42672 ssh2
show less
2026-08-30T17:33:02.346360+03:00 Debian-1303-trixie-amd64-base sshd-session[3324001]: Invalid user d ...
show more2026-08-30T17:33:02.346360+03:00 Debian-1303-trixie-amd64-base sshd-session[3324001]: Invalid user deploy from 121.196.239.198 port 60762
...
show less
Aug 30 14:27:05 obsidian sshd[3637602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreAug 30 14:27:05 obsidian sshd[3637602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.196.239.198 user=root
Aug 30 14:27:07 obsidian sshd[3637602]: Failed password for root from 121.196.239.198 port 40632 ssh2
Aug 30 14:27:08 obsidian sshd[3637699]: Invalid user deploy from 121.196.239.198 port 41264
...
show less
