This IP address has been reported a total of
4,408
times from
368 distinct
sources.
121.202.198.147 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Aug 29 22:36:33 server postfix/smtps/smtpd[374909]: warning: unknown[121.202.198.147]: SASL LOGIN au ...
show moreAug 29 22:36:33 server postfix/smtps/smtpd[374909]: warning: unknown[121.202.198.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 30 04:38:03 server postfix/smtps/smtpd[403341]: warning: unknown[121.202.198.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 30 08:26:12 server postfix/smtps/smtpd[420902]: warning: unknown[121.202.198.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
show less
Aug 29 22:36:33 server postfix/smtps/smtpd[374909]: warning: unknown[121.202.198.147]: SASL LOGIN au ...
show moreAug 29 22:36:33 server postfix/smtps/smtpd[374909]: warning: unknown[121.202.198.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 30 04:38:03 server postfix/smtps/smtpd[403341]: warning: unknown[121.202.198.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 30 08:26:12 server postfix/smtps/smtpd[420902]: warning: unknown[121.202.198.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
show less
Aug 29 22:36:33 server postfix/smtps/smtpd[374909]: warning: unknown[121.202.198.147]: SASL LOGIN au ...
show moreAug 29 22:36:33 server postfix/smtps/smtpd[374909]: warning: unknown[121.202.198.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 30 04:38:03 server postfix/smtps/smtpd[403341]: warning: unknown[121.202.198.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 30 08:26:12 server postfix/smtps/smtpd[420902]: warning: unknown[121.202.198.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
show less
Aug 29 22:36:33 server postfix/smtps/smtpd[374909]: warning: unknown[121.202.198.147]: SASL LOGIN au ...
show moreAug 29 22:36:33 server postfix/smtps/smtpd[374909]: warning: unknown[121.202.198.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 30 04:38:03 server postfix/smtps/smtpd[403341]: warning: unknown[121.202.198.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 30 08:26:12 server postfix/smtps/smtpd[420902]: warning: unknown[121.202.198.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
show less
Aug 29 22:36:33 server postfix/smtps/smtpd[374909]: warning: unknown[121.202.198.147]: SASL LOGIN au ...
show moreAug 29 22:36:33 server postfix/smtps/smtpd[374909]: warning: unknown[121.202.198.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 30 04:38:03 server postfix/smtps/smtpd[403341]: warning: unknown[121.202.198.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 30 08:26:12 server postfix/smtps/smtpd[420902]: warning: unknown[121.202.198.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
show less
Aug 29 22:36:33 server postfix/smtps/smtpd[374909]: warning: unknown[121.202.198.147]: SASL LOGIN au ...
show moreAug 29 22:36:33 server postfix/smtps/smtpd[374909]: warning: unknown[121.202.198.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 30 04:38:03 server postfix/smtps/smtpd[403341]: warning: unknown[121.202.198.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 30 08:26:12 server postfix/smtps/smtpd[420902]: warning: unknown[121.202.198.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
show less
121.202.198.147 is one of many (potentially hijacked) hosts in a botnet. This attack is a large scal ...
show more121.202.198.147 is one of many (potentially hijacked) hosts in a botnet. This attack is a large scale industrial operation attempting unrelenting brute-force login attempts for months on end - between all CIDR ranges in the botnet, our servers receive over 800 authentication attempts per minute on smtp, imap and relative mail ports, as well as ssh, and other protocols.
IP INFO:
- IP 121.202.198.147
- Anycast false
- City Tseung Kwan O
- Region Sai Kung
- Region Code NSK
- Country Hong Kong (HK)
- Continent Asia (AS)
- Range 121.202.198.0/20
- Provider Smartone Mobile communications Limited
- Organisation Smartone Mobile communications Limited
- Proxy no
- Type Wireless
show less
DNS Compromise
DDoS Attack
FTP Brute-Force
Email Spam
Hacking
Spoofing
Brute-Force
Exploited Host
Web App Attack
SSH
Aug 29 22:36:33 server postfix/smtps/smtpd[374909]: warning: unknown[121.202.198.147]: SASL LOGIN au ...
show moreAug 29 22:36:33 server postfix/smtps/smtpd[374909]: warning: unknown[121.202.198.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 30 04:38:03 server postfix/smtps/smtpd[403341]: warning: unknown[121.202.198.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 30 08:26:12 server postfix/smtps/smtpd[420902]: warning: unknown[121.202.198.147]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
show less
Feb 19 10:12:38 mail postfix/smtps/smtpd[21535]: warning: unknown[121.202.198.147]: SASL PLAIN authe ...
show moreFeb 19 10:12:38 mail postfix/smtps/smtpd[21535]: warning: unknown[121.202.198.147]: SASL PLAIN authentication failed: (reason unavailable), [email protected]
Feb 19 10:12:39 mail postfix/smtps/smtpd[21535]: lost connection after AUTH from unknown[121.202.198.147]
show less