JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

121.36.192.48

Neutral Activity

Abuse confidence score ?

0% Low Risk

68 reports

43 reporters · latest 5 months ago

ISP	Huawei Public Cloud Service (Huawei Software Technologies Ltd.Co)
Usage Type	Data Center/Web Hosting/Transit
ASN	AS55990
Domain Name	huawei.com
Country	🇨🇳 China
City	Shanghai, Shanghai

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

121.36.192.48 has been reported 68 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 121.36.192.48

Export CSV

This IP address has been reported a total of 68 times from 43 distinct sources. 121.36.192.48 was first reported on March 28th 2026, and the most recent report was 5 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-05-01 06:17:05 (5 months ago)	Confirmed malicious by STILWaters CTI platform (score=91, sources=1)	Hacking Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-04-08 20:12:23 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-04-06 20:12:22 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-04-05 20:12:22 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-04-03 20:12:21 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2026-04-01 20:12:24 (6 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇧🇷 helix	2026-03-31 07:33:59 (6 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇳🇱 SchorelWeb	2026-03-31 06:35:00 (6 months ago)	Cluster member (Omitted) (US/United States/-) said, DENY 121.36.192.48, Reason:[(sshd) Failed SSH lo ... show more Cluster member (Omitted) (US/United States/-) said, DENY 121.36.192.48, Reason:[(sshd) Failed SSH login from 121.36.192.48 (CN/China/-): 3 in the last 3600 secs] show less	Brute-Force SSH
🇩🇪 filip2cz	2026-03-31 05:14:48 (6 months ago)	Mar 31 07:13:42 henshouse sshd[36912]: Failed password for root from 121.36.192.48 port 53912 ssh2 M ... show more Mar 31 07:13:42 henshouse sshd[36912]: Failed password for root from 121.36.192.48 port 53912 ssh2 Mar 31 07:14:45 henshouse sshd[38312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.36.192.48 user=root Mar 31 07:14:48 henshouse sshd[38312]: Failed password for root from 121.36.192.48 port 36776 ssh2 ... show less	Brute-Force SSH
🇿🇦 Adrian Moisey	2026-03-31 01:08:16 (6 months ago)	2026-03-31T03:07:27.091994+02:00 box sshd[1878071]: Failed password for root from 121.36.192.48 port ... show more 2026-03-31T03:07:27.091994+02:00 box sshd[1878071]: Failed password for root from 121.36.192.48 port 57724 ssh2 2026-03-31T03:08:13.582700+02:00 box sshd[1878163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.36.192.48 user=root 2026-03-31T03:08:15.657598+02:00 box sshd[1878163]: Failed password for root from 121.36.192.48 port 38928 ssh2 ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-03-31 00:22:23 (6 months ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/121.36.192.48	SSH
🇺🇸 bigscoots.com	2026-03-30 23:39:11 (6 months ago)	121.36.192.48 (CN/China/ecs-121-36-192-48.compute.hwclouds-dns.com), 5 distributed sshd attacks on a ... show more 121.36.192.48 (CN/China/ecs-121-36-192-48.compute.hwclouds-dns.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 30 18:38:56 15520 sshd[8568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.109.140.250 user=root Mar 30 18:30:15 15520 sshd[7942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.109.140.250 user=root Mar 30 18:30:16 15520 sshd[7942]: Failed password for root from 223.109.140.250 port 47392 ssh2 Mar 30 18:14:39 15520 sshd[6736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.36.192.48 user=root Mar 30 18:14:42 15520 sshd[6736]: Failed password for root from 121.36.192.48 port 60788 ssh2 IP Addresses Blocked: 223.109.140.250 (CN/China/-) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-03-30 22:20:08 (6 months ago)	(sshd) Failed SSH login from 121.36.192.48 (CN/China/ecs-121-36-192-48.compute.hwclouds-dns.com): 5 ... show more (sshd) Failed SSH login from 121.36.192.48 (CN/China/ecs-121-36-192-48.compute.hwclouds-dns.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Mar 30 21:57:29 23887 sshd[1194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.36.192.48 user=root Mar 30 21:57:30 23887 sshd[1194]: Failed password for root from 121.36.192.48 port 52712 ssh2 Mar 30 22:14:51 23887 sshd[2582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.36.192.48 user=root Mar 30 22:14:53 23887 sshd[2582]: Failed password for root from 121.36.192.48 port 47624 ssh2 Mar 30 22:20:03 23887 sshd[3048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.36.192.48 user=root show less	Brute-Force SSH
🇧🇷 ufn.edu.br	2026-03-30 22:07:35 (6 months ago)	Mar 30 18:55:25 ws22vmsma01 sshd[12622]: Failed password for root from 121.36.192.48 port 34944 ssh2 ... show more Mar 30 18:55:25 ws22vmsma01 sshd[12622]: Failed password for root from 121.36.192.48 port 34944 ssh2 ... show less	Brute-Force SSH
🇦🇺 foobax	2026-03-30 20:44:05 (6 months ago)	connected to port 22 from port 54150 for over 2 seconds (> 0 bytes)	SSH Port Scan

Showing 1 to 15 of 68 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 64.23.218.208

🇺🇸 45.131.195.139

🇮🇳 2a03:2880:f354:1a7:face:b00c:0:619b

🇯🇵 172.235.200.10

🇺🇸 165.227.84.14

🇮🇳 159.89.174.87

🇺🇸 147.185.132.177

🇺🇸 147.185.132.106

🇨🇦 134.122.38.112

🇧🇩 103.14.151.89

🇪🇸 82.223.5.23

🇧🇬 79.124.59.78

🇳🇱 45.148.10.240

🇺🇸 45.131.195.136

🇺🇸 45.131.195.135

🇺🇸 45.131.195.134

🇧🇪 34.38.110.244

🇧🇪 34.38.106.91

🇳🇱 34.34.9.237

🇸🇬 8.219.175.248