This IP address has been reported a total of
120
times from
93 distinct
sources.
121.225.55.165 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 30
reports;
United States of America
with 25
reports;
Brazil
with 10
reports.
The most common categories in these recent reports were:
SSH
106
times;
Brute-Force
102
times;
Port Scan
9
times;
Hacking
5
times;
Web App Attack
2
times;
Other
5
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Oct 6 20:44:41 obsidian sshd[3071038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreOct 6 20:44:41 obsidian sshd[3071038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.225.55.165 user=root
Oct 6 20:44:43 obsidian sshd[3071038]: Failed password for root from 121.225.55.165 port 10065 ssh2
Oct 6 20:46:38 obsidian sshd[3077266]: Invalid user ubuntu from 121.225.55.165 port 10781
...
show less
SSH honeypot (Cowrie) recorded 66 events over 34m. Activity: SSH connection to honeypot; SSH credent ...
show moreSSH honeypot (Cowrie) recorded 66 events over 34m. Activity: SSH connection to honeypot; SSH credential brute-force; SSH key persistence attempt; SSH key written via shell redirect; automated SSH client (scanner banner); crontab persistence installation; post-auth command execution; successful honeypot login. Usernames tried: 345gs5662d34, art, gameserver, jordi, nextcloud, root. Passwords tried: 1234, 123456, 123Qweasdzxc, 3245gs5662d34. Commands: cd ~; chattr -ia .ssh; lockr -ia .ssh | cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1 | cat /proc/cpuinfo | grep name | wc -l Files written/uploaded: /home/art/.ssh/authorized_keys Wazuh rules: 100100,100101,100102,100103,100107,100112,100117,100124.
show less
Port Scan
Hacking
Brute-Force
Exploited Host
SSH
Anonymous
2026-10-06T20:23:45.833301+02:00 mail.chill.at sshd[1661517]: pam_unix(sshd:auth): authentication fa ...
show more2026-10-06T20:23:45.833301+02:00 mail.chill.at sshd[1661517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.225.55.165 user=root
2026-10-06T20:23:47.890599+02:00 mail.chill.at sshd[1661517]: Failed password for root from 121.225.55.165 port 12443 ssh2
2026-10-06T20:31:24.264535+02:00 mail.chill.at sshd[1662202]: Invalid user nextcloud from 121.225.55.165 port 10018
2026-10-06T20:31:24.273167+02:00 mail.chill.at sshd[1662202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.225.55.165
2026-10-06T20:31:25.676846+02:00 mail.chill.at sshd[1662202]: Failed password for invalid user nextcloud from 121.225.55.165 port 10018 ssh2
show less
Brute-Force
SSH
Anonymous
2026-10-06T20:05:37.876351+02:00 mail.chill.at sshd[1659995]: pam_unix(sshd:auth): authentication fa ...
show more2026-10-06T20:05:37.876351+02:00 mail.chill.at sshd[1659995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.225.55.165
2026-10-06T20:05:39.570959+02:00 mail.chill.at sshd[1659995]: Failed password for invalid user nexus from 121.225.55.165 port 11123 ssh2
2026-10-06T20:07:23.528084+02:00 mail.chill.at sshd[1660137]: Invalid user elena from 121.225.55.165 port 10999
2026-10-06T20:07:23.534105+02:00 mail.chill.at sshd[1660137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.225.55.165
2026-10-06T20:07:25.442957+02:00 mail.chill.at sshd[1660137]: Failed password for invalid user elena from 121.225.55.165 port 10999 ssh2
show less
2026-10-06T18:07:04.664896 n1e8d16 sshd-session[1891099]: Invalid user elena from 121.225.55.165 por ...
show more2026-10-06T18:07:04.664896 n1e8d16 sshd-session[1891099]: Invalid user elena from 121.225.55.165 port 13308
...
show less
2026-10-06T19:32:44.699198+02:00 serengeti sshd-session[85889]: Failed password for root from 121.22 ...
show more2026-10-06T19:32:44.699198+02:00 serengeti sshd-session[85889]: Failed password for root from 121.225.55.165 port 10118 ssh2
2026-10-06T19:35:47.366780+02:00 serengeti sshd-session[86418]: Invalid user user from 121.225.55.165 port 11779
2026-10-06T19:35:47.368384+02:00 serengeti sshd-session[86418]: Failed password for invalid user user from 121.225.55.165 port 11779 ssh2
2026-10-06T19:44:56.242147+02:00 serengeti sshd-session[88159]: Invalid user dima from 121.225.55.165 port 12661
2026-10-06T19:44:56.243801+02:00 serengeti sshd-session[88159]: Failed password for invalid user dima from 121.225.55.165 port 12661 ssh2
...
show less
2026-10-06T19:06:34.766446+02:00 serengeti sshd-session[80504]: Invalid user ca from 121.225.55.165 ...
show more2026-10-06T19:06:34.766446+02:00 serengeti sshd-session[80504]: Invalid user ca from 121.225.55.165 port 11907
2026-10-06T19:06:34.767982+02:00 serengeti sshd-session[80504]: Failed password for invalid user ca from 121.225.55.165 port 11907 ssh2
2026-10-06T19:13:18.033021+02:00 serengeti sshd-session[82452]: Invalid user frappe from 121.225.55.165 port 10122
2026-10-06T19:13:18.034648+02:00 serengeti sshd-session[82452]: Failed password for invalid user frappe from 121.225.55.165 port 10122 ssh2
2026-10-06T19:16:32.266813+02:00 serengeti sshd-session[83286]: Failed password for root from 121.225.55.165 port 11841 ssh2
...
show less
2026-10-06T18:45:02.876487+02:00 serengeti sshd-session[76480]: Invalid user szy from 121.225.55.165 ...
show more2026-10-06T18:45:02.876487+02:00 serengeti sshd-session[76480]: Invalid user szy from 121.225.55.165 port 12720
2026-10-06T18:45:02.878082+02:00 serengeti sshd-session[76480]: Failed password for invalid user szy from 121.225.55.165 port 12720 ssh2
2026-10-06T18:50:52.678461+02:00 serengeti sshd-session[77780]: Invalid user natasha from 121.225.55.165 port 9747
2026-10-06T18:50:52.680031+02:00 serengeti sshd-session[77780]: Failed password for invalid user natasha from 121.225.55.165 port 9747 ssh2
2026-10-06T18:54:03.048631+02:00 serengeti sshd-session[78142]: Failed password for root from 121.225.55.165 port 11527 ssh2
...
show less
2026-10-06T16:15:39.266690+00:00 web sshd[2060250]: Invalid user afriasge from 121.225.55.165 port 9 ...
show more2026-10-06T16:15:39.266690+00:00 web sshd[2060250]: Invalid user afriasge from 121.225.55.165 port 9603
2026-10-06T16:25:40.649538+00:00 web sshd[2060490]: Invalid user wafer from 121.225.55.165 port 11542
...
show less
This IP address carried out 7 SSH credential attack (attempts) on 05-10-2026. For more information o ...
show moreThis IP address carried out 7 SSH credential attack (attempts) on 05-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Brute-Force
SSH
Anonymous
2026-10-06T15:40:15.584530+00:00 cheese sshd[2886549]: Invalid user saprouter from 121.225.55.165 po ...
show more2026-10-06T15:40:15.584530+00:00 cheese sshd[2886549]: Invalid user saprouter from 121.225.55.165 port 10152
...
show less
2026-10-06T23:31:28.143705+08:00 VM-8-9-debian sshd[2994446]: Failed password for invalid user mac f ...
show more2026-10-06T23:31:28.143705+08:00 VM-8-9-debian sshd[2994446]: Failed password for invalid user mac from 121.225.55.165 port 12942 ssh2
2026-10-06T23:34:55.995434+08:00 VM-8-9-debian sshd[2994865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.225.55.165 user=root
2026-10-06T23:34:57.711375+08:00 VM-8-9-debian sshd[2994865]: Failed password for root from 121.225.55.165 port 12411 ssh2
...
show less
2026-10-06T14:37:01.822208+00:00 vps-de sshd[1398029]: pam_unix(sshd:auth): authentication failure; ...
show more2026-10-06T14:37:01.822208+00:00 vps-de sshd[1398029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.225.55.165
2026-10-06T14:37:03.618901+00:00 vps-de sshd[1398029]: Failed password for invalid user test from 121.225.55.165 port 13272 ssh2
2026-10-06T14:52:44.742386+00:00 vps-de sshd[1398108]: Invalid user linh from 121.225.55.165 port 9533
2026-10-06T14:52:44.747103+00:00 vps-de sshd[1398108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.225.55.165
2026-10-06T14:52:46.668846+00:00 vps-de sshd[1398108]: Failed password for invalid user linh from 121.225.55.165 port 9533 ssh2
...
show less
Failed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 12/100 (info ...
show moreFailed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 12/100 (info) | Phase: reconnaissance (low-volume probing)
Failed auth: 4 (4 bad password, 0 invalid user) | 0 success | 12 total SSH log events | seen on 1 sensor(s)
Origin: China (CN) | AS4134 Chinanet | 121.225.55.0/24
First seen: 2026-10-06 14:04:46 UTC | Last seen: 2026-10-06 14:32:03 UTC
Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot.
show less
