JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

121.229.202.198

Recent Activity

Abuse confidence score ?

100% Critical

25 reports

24 reporters · latest 1 day ago

ISP	CHINANET jiangsu province network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS134756
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Nanjing, Jiangsu

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 121.229.202.198

Export CSV

This IP address has been reported a total of 25 times from 24 distinct sources. 121.229.202.198 was first reported on October 10th 2026, and the most recent report was 1 day ago. In the last 60 days, the top reporter locations were: Germany with 9 reports; Finland with 3 reports; United States of America with 3 reports. The most common categories in these recent reports were: Brute-Force 18 times; SSH 17 times; Port Scan 6 times; Web App Attack 1 time; Exploited Host 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 Phish.gg	2026-10-21 02:38:23 (1 day ago)	Oct 21 02:38:17 obsidian sshd[2054075]: Failed password for root from 121.229.202.198 port 61838 ssh ... show more Oct 21 02:38:17 obsidian sshd[2054075]: Failed password for root from 121.229.202.198 port 61838 ssh2 Oct 21 02:38:19 obsidian sshd[2054075]: Failed password for root from 121.229.202.198 port 61838 ssh2 Oct 21 02:38:22 obsidian sshd[2054075]: Failed password for root from 121.229.202.198 port 61838 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-10-20 16:07:35 (1 day ago)	(sshd) Failed SSH login from 121.229.202.198 (CN/China/-): 5 in the last 300 secs; Ports: ; Directi ... show more (sshd) Failed SSH login from 121.229.202.198 (CN/China/-): 5 in the last 300 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: 2026-10-20T18:07:20.933936+02:00 web28.sier.online sshd[1411213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.202.198 user=root 2026-10-20T18:07:22.675106+02:00 web28.sier.online sshd[1411213]: Failed password for root from 121.229.202.198 port 51621 ssh2 2026-10-20T18:07:25.491662+02:00 web28.sier.online sshd[1411213]: Failed password for root from 121.229.202.198 port 51621 ssh2 2026-10-20T18:07:27.847192+02:00 web28.sier.online sshd[1411213]: Failed password for root from 121.229.202.198 port 51621 ssh2 2026-10-20T18:07:30.675603+02:00 web28.sier.online sshd[1411213]: Failed password for root from 121.229.202.198 port 51621 ssh2 show less	Port Scan
🇫🇮 oh.mg	2026-10-20 13:13:47 (1 day ago)	2026-10-20T15:13:40.678766+02:00 frans sshd[1868138]: Failed password for root from 121.229.202.198 ... show more 2026-10-20T15:13:40.678766+02:00 frans sshd[1868138]: Failed password for root from 121.229.202.198 port 58171 ssh2 2026-10-20T15:13:44.055989+02:00 frans sshd[1868138]: Failed password for root from 121.229.202.198 port 58171 ssh2 2026-10-20T15:13:46.683043+02:00 frans sshd[1868138]: Failed password for root from 121.229.202.198 port 58171 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-10-19 20:41:21 (2 days ago)	2026-10-19T22:41:13.457819+02:00 slimbox sshd[2207928]: Failed password for root from 121.229.202.19 ... show more 2026-10-19T22:41:13.457819+02:00 slimbox sshd[2207928]: Failed password for root from 121.229.202.198 port 63543 ssh2 2026-10-19T22:41:17.243054+02:00 slimbox sshd[2207928]: Failed password for root from 121.229.202.198 port 63543 ssh2 2026-10-19T22:41:21.168958+02:00 slimbox sshd[2207928]: Failed password for root from 121.229.202.198 port 63543 ssh2 ... show less	Brute-Force SSH
🇬🇧 Dario MB	2026-10-19 13:30:45 (2 days ago)	Oct 19 14:30:37 vmi1756752 sshd[8826]: Disconnecting authenticating user root 121.229.202.198 port 6 ... show more Oct 19 14:30:37 vmi1756752 sshd[8826]: Disconnecting authenticating user root 121.229.202.198 port 64262: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth] Oct 19 14:30:39 vmi1756752 sshd[8852]: Invalid user test from 121.229.202.198 port 49284 Oct 19 14:30:39 vmi1756752 sshd[8852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.202.198 Oct 19 14:30:41 vmi1756752 sshd[8852]: Failed password for invalid user test from 121.229.202.198 port 49284 ssh2 Oct 19 14:30:44 vmi1756752 sshd[8852]: Failed password for invalid user test from 121.229.202.198 port 49284 ssh2 ... show less	Brute-Force SSH
🇩🇪 n-n	2026-10-19 07:36:12 (2 days ago)	2026-10-19T07:35:59.891287+00:00 code-collabora sshd[3093748]: Failed password for root from 121.229 ... show more 2026-10-19T07:35:59.891287+00:00 code-collabora sshd[3093748]: Failed password for root from 121.229.202.198 port 64933 ssh2 2026-10-19T07:36:03.889560+00:00 code-collabora sshd[3093748]: Failed password for root from 121.229.202.198 port 64933 ssh2 2026-10-19T07:36:06.924780+00:00 code-collabora sshd[3093748]: Failed password for root from 121.229.202.198 port 64933 ssh2 2026-10-19T07:36:11.598431+00:00 code-collabora sshd[3093748]: Failed password for root from 121.229.202.198 port 64933 ssh2 ... show less	Brute-Force SSH
🇩🇪 mueller-nils.com	2026-10-18 23:47:29 (3 days ago)	Oct 19 01:47:13 : Failed password for root from 121.229.202.198 port 63178 ssh2 Oct 19 01:47:18 : Di ... show more Oct 19 01:47:13 : Failed password for root from 121.229.202.198 port 63178 ssh2 Oct 19 01:47:18 : Disconnecting authenticating user root 121.229.202.198 port 63178: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connect show less	Brute-Force SSH
🇩🇪 LRob	2026-10-18 23:39:29 (3 days ago)	SSH brute force	Brute-Force SSH
🇺🇸 xmission.com	2026-10-18 22:51:24 (3 days ago)	Blocked by UFW (TCP on 2222) Source port: 52386 TTL: 109 Packet length: 52 TOS: 0x0A This report (f ... show more Blocked by UFW (TCP on 2222) Source port: 52386 TTL: 109 Packet length: 52 TOS: 0x0A This report (for 121.229.202.198) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇦 Luk	2026-10-18 16:36:35 (3 days ago)	Oct 18 19:36:32 box sshd-session[79265]: Connection closed by authenticating user root 121.229.202.1 ... show more Oct 18 19:36:32 box sshd-session[79265]: Connection closed by authenticating user root 121.229.202.198 port 54656 [preauth] Oct 18 19:36:33 box sshd-session[79266]: Connection closed by authenticating user root 121.229.202.198 port 54654 [preauth] Oct 18 19:36:33 box sshd-session[79267]: Connection closed by authenticating user root 121.229.202.198 port 54648 [preauth] Oct 18 19:36:34 box sshd-session[79268]: Connection closed by authenticating user root 121.229.202.198 port 54657 [preauth] Oct 18 19:36:34 box sshd-session[79269]: Connection closed by authenticating user root 121.229.202.198 port 54655 [preauth] ... show less	Brute-Force SSH
🇩🇪 HoneyPotFRI	2026-10-18 12:10:40 (3 days ago)	2026-10-18T14:10:36.629786+02:00 debian sshd[1147770]: Failed password for root from 121.229.202.198 ... show more 2026-10-18T14:10:36.629786+02:00 debian sshd[1147770]: Failed password for root from 121.229.202.198 port 56202 ssh2 2026-10-18T14:10:40.472767+02:00 debian sshd[1147770]: Failed password for root fro ... show less	Brute-Force SSH
🇺🇸 avgsmoe	2026-10-17 21:15:28 (4 days ago)	Connection to a honeypot port. Automated report (firemon).	Port Scan
🇩🇪 KPS	2026-10-17 16:45:12 (4 days ago)	PortscanT	Port Scan
Anonymous	2026-10-17 01:57:37 (5 days ago)	[ssd5.kdns.gr] ssh-invalid-user: logs=/var/log/secure; samples=Oct 17 04:54:38 ssd5 sshd[6997]: Fail ... show more [ssd5.kdns.gr] ssh-invalid-user: logs=/var/log/secure; samples=Oct 17 04:54:38 ssd5 sshd[6997]: Failed password for root from 121.229.202.198 port 64562 ssh2 \| Oct 17 04:54:42 ssd5 sshd[7144]: Invalid user test from 121.229.202.198 port 51306 \| Oct 17 04:54:44 ssd5 sshd[7144]: Failed password for invalid user test from 121.229.202.198 port 51306 ssh2 show less	Brute-Force SSH
🇺🇸 xmission.com	2026-10-16 09:58:50 (5 days ago)	Blocked by UFW (TCP on 22) Source port: 63166 TTL: 109 Packet length: 52 TOS: 0x0A This report (for ... show more Blocked by UFW (TCP on 22) Source port: 63166 TTL: 109 Packet length: 52 TOS: 0x0A This report (for 121.229.202.198) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH Brute-Force

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.121.109.142

🇮🇶 185.106.29.184

🇧🇪 35.187.8.59

🇬🇧 193.163.125.226

🇧🇷 186.235.186.234

🇮🇶 185.244.155.195

🇺🇸 162.216.150.51

🇳🇱 160.119.76.168

🇩🇪 139.59.136.184

🇸🇬 85.203.23.18

🇬🇧 35.203.211.237

🇺🇸 20.42.57.189

🇮🇳 223.181.41.83

🇧🇷 186.235.186.227

🇨🇱 179.60.65.92

🇻🇳 171.244.27.197

🇺🇸 162.216.18.113

🇩🇪 151.243.11.132

🇭🇰 118.193.45.134

🇧🇪 104.155.84.46