JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.239.49.72

121.239.49.72 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 0%: ?

ISP	CHINANET jiangsu province network
Usage Type	Commercial
ASN	AS140292
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.239.49.72

Whois 121.239.49.72

IP Abuse Reports for 121.239.49.72:

This IP address has been reported a total of 28 times from 25 distinct sources. 121.239.49.72 was first reported on March 2nd 2023, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Click-Networks	2024-06-06 10:06:02 (2 years ago)	Jun 6 11:05:52 wh01 sshd[2410162]: error: maximum authentication attempts exceeded for root from 12 ... show more Jun 6 11:05:52 wh01 sshd[2410162]: error: maximum authentication attempts exceeded for root from 121.239.49.72 port 11690 ssh2 [preauth] Jun 6 11:05:52 wh01 sshd[2410162]: Disconnecting authenticating user root 121.239.49.72 port 11690: Too many authentication failures [preauth] Jun 6 11:05:58 wh01 sshd[2410176]: error: maximum authentication attempts exceeded for root from 121.239.49.72 port 11755 ssh2 [preauth] Jun 6 11:05:58 wh01 sshd[2410176]: Disconnecting authenticating user root 121.239.49.72 port 11755: Too many authentication failures [preauth] Jun 6 11:06:07 wh01 sshd[2410188]: Received disconnect from 121.239.49.72 port 11816:11: disconnected by user [preauth] Jun 6 11:06:07 wh01 sshd[2410188]: Disconnected from authenticating user root 121.239.49.72 port 11816 [preauth] Jun 6 11:06:16 wh01 sshd[2410247]: Invalid user admin from 121.239.49.72 port 11884 Jun 6 11:06:17 wh01 sshd[2410247]: error: maximum authentication attempts exceeded for invalid user admin from 121. show less	Brute-Force Exploited Host SSH
🇫🇷 Fr13nds.Tech	2024-06-06 07:46:44 (2 years ago)	Jun 6 09:46:31 plesk sshd[29905]: Failed password for root from 121.239.49.72 port 10778 ssh2 Jun ... show more Jun 6 09:46:31 plesk sshd[29905]: Failed password for root from 121.239.49.72 port 10778 ssh2 Jun 6 09:46:33 plesk sshd[29905]: Failed password for root from 121.239.49.72 port 10778 ssh2 Jun 6 09:46:35 plesk sshd[29905]: Failed password for root from 121.239.49.72 port 10778 ssh2 Jun 6 09:46:38 plesk sshd[29905]: Failed password for root from 121.239.49.72 port 10778 ssh2 Jun 6 09:46:40 plesk sshd[29905]: Failed password for root from 121.239.49.72 port 10778 ssh2 show less	Brute-Force SSH
Anonymous	2024-06-06 05:31:39 (2 years ago)		Web App Attack
🇺🇸 MPL	2024-06-06 01:55:05 (2 years ago)	tcp/22	Port Scan
🇺🇸 MPL	2024-06-06 01:55:05 (2 years ago)	tcp/22	Port Scan
🇨🇳 ThreatBook.io	2024-06-05 22:50:56 (2 years ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/121.239.49.72 2024-06- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/121.239.49.72 2024-06-05 08:15:39 ["/ip cloud print","ifconfig","uname -a","cat /proc/cpuinfo","ps \| grep '[Mm]iner'","ps -ef \| grep '[Mm]iner'","ls -la /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","echo Hi \| cat -n"] show less	Brute-Force
🇺🇸 RAP	2024-06-05 18:31:03 (2 years ago)	2024-06-05 18:31:03 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇸🇬 rafled	2024-06-05 09:42:56 (2 years ago)	Jun 5 09:42:53 main-v sshd[531111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Jun 5 09:42:53 main-v sshd[531111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.239.49.72 user=root Jun 5 09:42:56 main-v sshd[531111]: Failed password for root from 121.239.49.72 port 6116 ssh2 ... show less	Brute-Force SSH
🇹🇭 OIIOIOIIIOOOIOIO Service	2024-06-04 22:50:03 (2 years ago)	Failed login attempt detected by OIIO in ssh jail	Brute-Force
🇳🇱 EGP Abuse Dept	2024-06-04 10:58:44 (2 years ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇳🇱 EGP Abuse Dept	2024-06-03 06:07:40 (2 years ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇨🇭 paradoxnetworks	2024-06-03 05:26:08 (2 years ago)	2024-06-03T05:25:43.065763+00:00 edge-fog-zrh01.int.pdx.net.uk sshd[1897509]: error: maximum authent ... show more 2024-06-03T05:25:43.065763+00:00 edge-fog-zrh01.int.pdx.net.uk sshd[1897509]: error: maximum authentication attempts exceeded for root from 121.239.49.72 port 3026 ssh2 [preauth] 2024-06-03T05:25:53.212649+00:00 edge-fog-zrh01.int.pdx.net.uk sshd[1897511]: error: maximum authentication attempts exceeded for root from 121.239.49.72 port 3108 ssh2 [preauth] 2024-06-03T05:26:07.827577+00:00 edge-fog-zrh01.int.pdx.net.uk sshd[1897537]: Invalid user admin from 121.239.49.72 port 3272 ... show less	Brute-Force SSH
🇩🇪 ps-center	2024-06-03 00:08:55 (2 years ago)	BCK-W: TCP-Scanner. Port: 22	Port Scan
🇩🇪 ghostwarriors	2024-06-02 21:50:09 (2 years ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
Anonymous	2024-06-02 21:14:44 (2 years ago)	2024-06-02T16:14:29.431709-05:00 server sshd[678355]: Failed password for root from 121.239.49.72 po ... show more 2024-06-02T16:14:29.431709-05:00 server sshd[678355]: Failed password for root from 121.239.49.72 port 6500 ssh2 2024-06-02T16:14:33.375277-05:00 server sshd[678355]: Failed password for root from 121.239.49.72 port 6500 ssh2 2024-06-02T16:14:37.187747-05:00 server sshd[678355]: Failed password for root from 121.239.49.72 port 6500 ssh2 2024-06-02T16:14:40.800077-05:00 server sshd[678355]: Failed password for root from 121.239.49.72 port 6500 ssh2 2024-06-02T16:14:44.081060-05:00 server sshd[678355]: Failed password for root from 121.239.49.72 port 6500 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 192.178.113.21

🇺🇸 191.102.187.90

🇺🇸 191.102.187.75

🇺🇸 191.102.187.53

🇬🇧 185.216.145.164

🇦🇱 185.80.227.16

🇮🇳 113.21.77.100

🇵🇹 82.154.116.98

🇯🇵 23.249.25.62

🇮🇩 210.87.84.10

🇺🇸 191.102.174.55

🇺🇸 191.102.170.206

🇺🇸 191.102.170.201

🇺🇸 191.102.170.71

🇮🇩 163.7.1.156

🇺🇸 147.185.132.91

🇮🇳 117.205.2.250

🇺🇸 64.62.197.179

🇺🇸 191.102.170.185

🇺🇸 191.102.163.84