AbuseIPDB » 121.199.48.149
121.199.48.149 was found in our database!
This IP was reported 189 times. Confidence of Abuse is 53%: ?
| ISP | Aliyun Computing Co., LTD |
|---|---|
| Usage Type | Data Center/Web Hosting/Transit |
| ASN | AS37963 |
| Domain Name | alibabacloud.com |
| Country | ๐จ๐ณ China |
| City | Hangzhou, Zhejiang |
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 121.199.48.149:
This IP address has been reported a total of 189 times from 71 distinct sources. 121.199.48.149 was first reported on , and the most recent report was .
Old Reports: The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| ๐ง๐ท ICS Labs |
ICS Labs identified 121.199.48.149 as a malicious indicator from threat intelligence.
|
Hacking | ||
| ๐จ๐ณ ThreatBook.io |
ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/121.199.48.149
|
SSH | ||
| ๐จ๐ญ YF |
Pays blacklistรฉ (CN) โ refresh
|
Brute-Force Web App Attack | ||
| ๐ฉ๐ช london2038.com |
|
Port Scan SSH | ||
| ๐ฉ๐ช Axel |
[2026-04-29 20:51:37 UTC] Honeypot Alt SSH connection attempt | AXFRA HONEYPOT
|
SSH | ||
| ๐ฒ๐ณ Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 2222 [1] TCP
|
Port Scan | ||
| ๐บ๐ธ MPL |
tcp/2222
|
Port Scan | ||
| ๐ซ๐ท starhelix |
SSH login on honeypot.
|
Brute-Force SSH | ||
| ๐บ๐ธ kevinpez |
Honeypot detection - SSH: 1 attempts
|
Port Scan SSH | ||
| ๐บ๐ธ ShadowWhisperer |
SSH fingerprint.
|
Port Scan | ||
| ๐บ๐ธ MPL |
tcp/2222 (2 or more attempts)
|
Port Scan | ||
| ๐จ๐ณ ThreatBook.io |
ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/121.199.48.149
|
SSH | ||
| ๐ซ๐ฎ 6kilowatti |
|
Port Scan | ||
| ๐บ๐ธ Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | ||
| ๐ฉ๐ช femboy.cat |
Port scan to tcp/2222 from 121.199.48.149
|
Brute-Force |
Showing 1 to 15 of 189 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐ฉ