JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

121.235.226.220

Activity Trending Down

Abuse Confidence Score

2% Caution

5 reports

3 reporters · latest 2 weeks ago

ISP: CHINANET jiangsu province network
Usage Type: Fixed Line ISP
ASN: AS4134
Domain Name: chinatelecom.cn
Country: 🇨🇳 China
City: Nanjing, Jiangsu

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

5 from 3 distinct reporters

First reported

January 15th 2025

Most recent report

2 weeks ago

Last 60 days

Top reporter locations 🇫🇮 Finland 1

Most common categories Port Scan 1

Old reports The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 Ticlem	2026-10-26 03:55:52 UTC · (2 weeks ago)	2026-10-26T04:31:26.847094+01:00 clement-turlure kernel: [2496428.307092] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=121.235.226.220 DST=95.216.21.136 LEN=124 TOS=0x00 PREC=0x00 TTL=52 ID=3677 DF PROTO=UDP SPT=200 ... show more 2026-10-26T04:31:26.847094+01:00 clement-turlure kernel: [2496428.307092] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=121.235.226.220 DST=95.216.21.136 LEN=124 TOS=0x00 PREC=0x00 TTL=52 ID=3677 DF PROTO=UDP SPT=20024 DPT=6881 LEN=104 2026-10-26T04:51:31.226290+01:00 clement-turlure kernel: [2497632.653769] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=121.235.226.220 DST=95.216.21.136 LEN=124 TOS=0x00 PREC=0x00 TTL=52 ID=15635 DF PROTO=UDP SPT=20024 DPT=6881 LEN=104 2026-10-26T04:55:51.310295+01:00 clement-turlure kernel: [2497892.730626] [UFW BLOCK] IN=enp0s31f6 OUT= MAC=90:1b:0e:f7:16:fb:d0:07:ca:8d:22:75:08:00 SRC=121.235.226.220 DST=95.216.21.136 LEN=124 TOS=0x00 PREC=0x00 TTL=52 ID=44544 DF PROTO=UDP SPT=20024 DPT=6881 LEN=104 ... show less	Port Scan
🇩🇪 chris_yooo	2025-02-01 15:37:22 UTC · (1 year ago)	Feb 1 16:37:14 plesk dovecot: imap-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=121.235.226.220, lip=144.76.2.152, session=<GsbZbhYtMNN56+Lc> Feb 1 16:37:22 plesk do ... show more Feb 1 16:37:14 plesk dovecot: imap-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=121.235.226.220, lip=144.76.2.152, session=<GsbZbhYtMNN56+Lc> Feb 1 16:37:22 plesk dovecot: imap-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 6 secs): user=<morven>, method=PLAIN, rip=121.235.226.220, lip=144.76.2.152, session=<H4EObxYtfNV56+Lc> ... show less	Spoofing Brute-Force
🇩🇪 chris_yooo	2025-01-27 10:21:44 UTC · (1 year ago)	Jan 27 11:21:36 plesk dovecot: imap-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=121.235.226.220, lip=144.76.2.152, session=<UgzVcK0sYcp56+Lc> Jan 27 11:21:43 plesk do ... show more Jan 27 11:21:36 plesk dovecot: imap-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=121.235.226.220, lip=144.76.2.152, session=<UgzVcK0sYcp56+Lc> Jan 27 11:21:43 plesk dovecot: imap-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 6 secs): user=<morven>, method=PLAIN, rip=121.235.226.220, lip=144.76.2.152, session=<tigEca0sANR56+Lc> ... show less	Spoofing Brute-Force
🇩🇪 chris_yooo	2025-01-15 13:41:13 UTC · (1 year ago)	Jan 15 14:41:05 plesk dovecot: imap-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=121.235.226.220, lip=144.76.2.152, session=<2xkj1L4rHc156+Lc> Jan 15 14:41:12 ple ... show more Jan 15 14:41:05 plesk dovecot: imap-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=121.235.226.220, lip=144.76.2.152, session=<2xkj1L4rHc156+Lc> Jan 15 14:41:12 plesk dovecot: imap-login: Disconnected: Aborted login by logging out (auth failed, 1 attempts in 6 secs): user=<p747488eter>, method=PLAIN, rip=121.235.226.220, lip=144.76.2.152, session=<V/BS1L4rYdB56+Lc> ... show less	Spoofing Brute-Force
Anonymous	2025-01-15 02:59:16 UTC · (1 year ago)	Ports: 143,993; Direction: 0; Trigger: LF_IMAPD	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 108.53.196.209

🇪🇸 87.106.125.215

🇨🇴 190.253.153.251

🇺🇦 178.136.105.49

🇵🇹 176.78.132.208

🇨🇳 116.1.149.196

🇳🇱 94.102.49.193

🇳🇱 93.174.95.106

🇨🇳 49.64.85.138

🇳🇱 213.209.159.242

🇨🇴 200.118.80.90

🇨🇷 190.171.122.118

🇳🇱 86.38.187.65

🇳🇱 80.82.77.139

🇳🇱 80.82.77.33

🇺🇸 68.193.1.27

🇳🇱 64.205.72.18

🇨🇳 49.235.143.157

🇳🇱 45.148.10.157

🇺🇸 34.24.112.227