JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

121.231.56.152

Activity Trending Down

Abuse Confidence Score

39% Elevated

10 reports

8 reporters · latest 1 week ago

ISP: CHINANET jiangsu province network
Usage Type: Fixed Line ISP
ASN: AS140293
Domain Name: chinatelecom.cn
Country: 🇨🇳 China
City: Nanjing, Jiangsu

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

10 from 8 distinct reporters

First reported

October 26th 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇫🇷 France 3 🇺🇸 United States of America 3 🇨🇦 Canada 1

Most common categories Brute-Force 7 SSH 7 Port Scan 2 Hacking 2 DDoS Attack 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-29 14:50:18 UTC · (1 week ago)	2026-10-29T14:50:02.994262+00:00 vps-8967498d-vps-ovh-net sshd[150252]: Failed password for root from 121.231.56.152 port 6518 ssh2 2026-10-29T14:50:07.489198+00:00 vps-8967498d-vps-ovh-net sshd[150278]: pam_unix(sshd:auth): authentication failure; l ... show more 2026-10-29T14:50:02.994262+00:00 vps-8967498d-vps-ovh-net sshd[150252]: Failed password for root from 121.231.56.152 port 6518 ssh2 2026-10-29T14:50:07.489198+00:00 vps-8967498d-vps-ovh-net sshd[150278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.231.56.152 user=root 2026-10-29T14:50:09.472925+00:00 vps-8967498d-vps-ovh-net sshd[150278]: Failed password for root from 121.231.56.152 port 6519 ssh2 2026-10-29T14:50:13.845147+00:00 vps-8967498d-vps-ovh-net sshd[150278]: Failed password for root from 121.231.56.152 port 6519 ssh2 2026-10-29T14:50:17.716904+00:00 vps-8967498d-vps-ovh-net sshd[150278]: Failed password for root from 121.231.56.152 port 6519 ssh2 ... show less	Brute-Force SSH
🇫🇷 Kejult	2026-10-29 14:50:08 UTC · (1 week ago)	Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity observed.	Hacking SSH
🇫🇮 oh.mg	2026-10-29 12:36:14 UTC · (1 week ago)	2026-10-29T13:35:48.481179+01:00 francesco sshd[624740]: Failed password for root from 121.231.56.152 port 6893 ssh2 2026-10-29T13:35:58.449993+01:00 francesco sshd[624740]: Failed password for root from 121.231.56.152 port 6893 ssh2 2026-10-29T13:36 ... show more 2026-10-29T13:35:48.481179+01:00 francesco sshd[624740]: Failed password for root from 121.231.56.152 port 6893 ssh2 2026-10-29T13:35:58.449993+01:00 francesco sshd[624740]: Failed password for root from 121.231.56.152 port 6893 ssh2 2026-10-29T13:36:04.566665+01:00 francesco sshd[624740]: Failed password for root from 121.231.56.152 port 6893 ssh2 2026-10-29T13:36:09.234340+01:00 francesco sshd[624740]: Failed password for root from 121.231.56.152 port 6893 ssh2 2026-10-29T13:36:14.133072+01:00 francesco sshd[624740]: Failed password for root from 121.231.56.152 port 6893 ssh2 ... show less	Brute-Force SSH
🇺🇸 vandomatos	2026-10-28 22:16:28 UTC · (1 week ago)	Oct 28 15:16:16 servidor sshd[3175779]: Failed password for root from 121.231.56.152 port 4545 ssh2 Oct 28 15:16:18 servidor sshd[3175779]: Failed password for root from 121.231.56.152 port 4545 ssh2 Oct 28 15:16:22 servidor sshd[3175779]: Failed pas ... show more Oct 28 15:16:16 servidor sshd[3175779]: Failed password for root from 121.231.56.152 port 4545 ssh2 Oct 28 15:16:18 servidor sshd[3175779]: Failed password for root from 121.231.56.152 port 4545 ssh2 Oct 28 15:16:22 servidor sshd[3175779]: Failed password for root from 121.231.56.152 port 4545 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-10-28 12:03:02 UTC · (1 week ago)	external scanner	Port Scan
🇺🇸 paradoxnetworks	2026-10-28 11:55:06 UTC · (1 week ago)	2026-10-28T11:54:51.560762+00:00 edge-sea-con01.int.pdx.net.uk sshd[3048410]: Failed password for root from 121.231.56.152 port 3914 ssh2 2026-10-28T11:54:54.877229+00:00 edge-sea-con01.int.pdx.net.uk sshd[3048410]: Failed password for root from 121. ... show more 2026-10-28T11:54:51.560762+00:00 edge-sea-con01.int.pdx.net.uk sshd[3048410]: Failed password for root from 121.231.56.152 port 3914 ssh2 2026-10-28T11:54:54.877229+00:00 edge-sea-con01.int.pdx.net.uk sshd[3048410]: Failed password for root from 121.231.56.152 port 3914 ssh2 2026-10-28T11:55:05.280436+00:00 edge-sea-con01.int.pdx.net.uk sshd[3048410]: Failed password for root from 121.231.56.152 port 3914 ssh2 ... show less	Brute-Force SSH
🇨🇳 さいとうあすか	2026-10-27 23:16:42 UTC · (2 weeks ago)	Oct 28 07:16:39 pbs sshd[3354293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.231.56.152 user=root Oct 28 07:16:40 pbs sshd[3354293]: Failed password for root from 121.231.56.152 port 4143 ssh2 ...	Brute-Force SSH
🇫🇷 Kejult	2026-10-27 22:19:18 UTC · (2 weeks ago)	Honeypot Finding: active Redis command abuse captured on TCP/6379; 22 high-risk command event(s). Commands: MODULE LOAD /tmp/exp.so, SLAVEOF NO ONE, config set dbfilename dump.rdb, config set dir ., CONFIG SET dbfilename exp.so, CONFIG SET dir /tmp/.	Hacking
🇨🇦 oh.mg	2026-10-27 15:10:28 UTC · (2 weeks ago)	(sshd) Failed SSH login from 121.231.56.152 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: 2026-10-27T15:10:13.105221+00:00 zhaan sshd-session[418377]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show more (sshd) Failed SSH login from 121.231.56.152 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: 2026-10-27T15:10:13.105221+00:00 zhaan sshd-session[418377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.231.56.152 user=root 2026-10-27T15:10:14.469531+00:00 zhaan sshd-session[418377]: Failed password for root from 121.231.56.152 port 3090 ssh2 2026-10-27T15:10:18.341439+00:00 zhaan sshd-session[418377]: Failed password for root from 121.231.56.152 port 3090 ssh2 2026-10-27T15:10:21.578749+00:00 zhaan sshd-session[418377]: Failed password for root from 121.231.56.152 port 3090 ssh2 2026-10-27T15:10:24.079574+00:00 zhaan sshd-session[418377]: Failed password for root from 121.231.56.152 port 3090 ssh2 show less	Brute-Force SSH
🇯🇵 jsys	2026-10-26 20:08:40 UTC · (2 weeks ago)	Automated report (nfacl NetFlow analysis, 300s window): host sweep (1024 distinct dst hosts); repeated attempts on admin/database ports 6379 (1024 flows to sensitive ports); SYN-flood-like small-packet flows (1024 small-packet flows)	DDoS Attack Port Scan Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇬 194.5.82.10

🇷🇴 92.118.39.77

🇺🇸 9.234.9.151

🇻🇳 113.172.254.160

🇺🇸 108.16.40.155

🇺🇸 75.87.213.46

🇩🇪 51.75.146.229

🇧🇪 34.78.49.147

🇲🇽 177.227.210.11

🇺🇦 93.171.169.154

🇳🇱 91.92.40.12

🇳🇱 195.178.110.232

🇷🇺 91.198.213.175

🇮🇶 65.20.134.110

🇺🇸 40.74.212.23

🇺🇸 34.193.211.86

🇺🇸 24.126.197.213

🇺🇸 3.82.78.65

🇺🇸 2604:a940:301:225:0:44::

🇮🇹 217.73.208.135