JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.36.197.52

121.36.197.52 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 0%: ?

ISP	Huawei Public Cloud Service (Huawei Software Technologies Ltd.Co)
Usage Type	Data Center/Web Hosting/Transit
ASN	AS55990
Hostname(s)	ecs-121-36-197-52.compute.hwclouds-dns.com
Domain Name	huawei.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.36.197.52

Whois 121.36.197.52

IP Abuse Reports for 121.36.197.52:

This IP address has been reported a total of 26 times from 23 distinct sources. 121.36.197.52 was first reported on May 13th 2026, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 YF	2026-05-17 20:37:53 (4 months ago)	Pays blacklisté (CN)	Brute-Force Web App Attack
🇫🇮 WebDig	2026-05-15 09:04:27 (4 months ago)	Fail2Ban: sshd ban on 121.36.197.52	Brute-Force SSH
Anonymous	2026-05-15 08:55:07 (4 months ago)	2026-05-15T10:54:49.125267+02:00 HETZNER-FI-1 sshd[3061231]: Invalid user testuser from 121.36.197.5 ... show more 2026-05-15T10:54:49.125267+02:00 HETZNER-FI-1 sshd[3061231]: Invalid user testuser from 121.36.197.52 port 58726 2026-05-15T10:54:51.864367+02:00 HETZNER-FI-1 sshd[3061592]: Invalid user postgres from 121.36.197.52 port 58732 2026-05-15T10:55:06.614200+02:00 HETZNER-FI-1 sshd[3062737]: Invalid user minecraft from 121.36.197.52 port 39704 ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-05-15 04:50:28 (4 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇫🇷 dsl	2026-05-15 03:08:34 (4 months ago)	May 15 03:08:24 dabeau sshd[17770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ... show more May 15 03:08:24 dabeau sshd[17770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.36.197.52 user=root May 15 03:08:26 dabeau sshd[17770]: Failed password for root from 121.36.197.52 port 48570 ssh2 May 15 03:08:34 dabeau sshd[17856]: Invalid user db2inst1 from 121.36.197.52 port 36366 ... show less	Brute-Force SSH
🇨🇦 hpg	2026-05-15 02:44:57 (4 months ago)	27 invalid SSH login attempts from 121.36.197.52 in the last 1.6 hours	Brute-Force SSH
🇭🇰 kipfel★	2026-05-14 21:08:54 (4 months ago)	2026-05-15T05:08:21.166624+08:00 ali-vm-lighthouse-2c2g-hkg sshd-session[1435488]: Invalid user test ... show more 2026-05-15T05:08:21.166624+08:00 ali-vm-lighthouse-2c2g-hkg sshd-session[1435488]: Invalid user test from 121.36.197.52 port 40558 2026-05-15T05:08:40.707169+08:00 ali-vm-lighthouse-2c2g-hkg sshd-session[1435549]: Invalid user test from 121.36.197.52 port 52978 2026-05-15T05:08:47.713874+08:00 ali-vm-lighthouse-2c2g-hkg sshd-session[1435569]: Invalid user cloud from 121.36.197.52 port 53086 2026-05-15T05:08:48.137777+08:00 ali-vm-lighthouse-2c2g-hkg sshd-session[1435571]: Invalid user deploy from 121.36.197.52 port 41582 2026-05-15T05:08:54.025603+08:00 ali-vm-lighthouse-2c2g-hkg sshd-session[1435577]: Invalid user es from 121.36.197.52 port 41742 ... show less	Brute-Force SSH
🇭🇰 edisonjwa	2026-05-14 20:24:21 (4 months ago)	2026-05-14T20:24:00.908341+00:00 Aliyun-HK sshd-session[198098]: Invalid user vps from 121.36.197.52 ... show more 2026-05-14T20:24:00.908341+00:00 Aliyun-HK sshd-session[198098]: Invalid user vps from 121.36.197.52 port 59674 2026-05-14T20:24:18.331717+00:00 Aliyun-HK sshd-session[198100]: Invalid user debian from 121.36.197.52 port 56108 2026-05-14T20:24:19.660739+00:00 Aliyun-HK sshd-session[198103]: Invalid user devops from 121.36.197.52 port 56154 ... show less	Port Scan Brute-Force SSH
🇦🇺 Anytech	2026-05-14 18:36:11 (4 months ago)	Blocked by Conn-Monitor: Brute force activity	Brute-Force SSH
🇺🇸 markawes	2026-05-14 17:40:17 (4 months ago)	[markis] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence ... show more [markis] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence: 2026-05-14T17:40:06.535389+00:00 sshd-session[407370]: Failed password for root from 121.36.197.52 port 48982 ssh2 2026-05-14T17:40:09.603152+00:00 sshd-session[407378]: Invalid user vps from 121.36.197.52 port 53584 2026-05-14T17:40:09.879290+00:00 sshd-session[407378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.36.197.52 2026-05-14T17:40:11.254170+00:00 sshd-session[407378]: Failed password for invalid user vps from 121.36.197.52 port 53584 ssh2 2026-05-14T17:40:15.349206+00:00 sshd-session[407380]: Invalid user web from 121.36.197.52 port 53586 show less	Brute-Force SSH
Anonymous	2026-05-14 17:37:42 (4 months ago)	$f2bV_matches	Brute-Force SSH
🇨🇦 enoki	2026-05-14 17:21:00 (4 months ago)	2026-05-14T17:20:28.255083+00:00 enklol sshd-session[1919074]: Invalid user vps from 121.36.197.52 p ... show more 2026-05-14T17:20:28.255083+00:00 enklol sshd-session[1919074]: Invalid user vps from 121.36.197.52 port 35458 2026-05-14T17:20:35.414016+00:00 enklol sshd-session[1919076]: Invalid user web from 121.36.197.52 port 46658 2026-05-14T17:20:47.483428+00:00 enklol sshd-session[1919082]: Invalid user ubuntu from 121.36.197.52 port 34848 2026-05-14T17:20:51.013066+00:00 enklol sshd-session[1919085]: Invalid user ubuntu from 121.36.197.52 port 38488 2026-05-14T17:20:59.435565+00:00 enklol sshd-session[1919093]: Invalid user cloud from 121.36.197.52 port 38494 ... show less	Brute-Force SSH
🇫🇮 SamJUK	2026-05-14 15:05:42 (4 months ago)	2026-05-14T15:04:18.990754+00:00 hostname sshd[300411]: pam_unix(sshd:auth): authentication failure; ... show more 2026-05-14T15:04:18.990754+00:00 hostname sshd[300411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.36.197.52 user=root 2026-05-14T15:04:21.647252+00:00 hostname sshd[300411]: Failed password for root from 121.36.197.52 port 38112 ssh2 2026-05-14T15:04:27.831786+00:00 hostname sshd[300413]: Invalid user jenkins from 121.36.197.52 port 41742 2026-05-14T15:04:28.609366+00:00 hostname sshd[300413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.36.197.52 2026-05-14T15:04:30.640996+00:00 hostname sshd[300413]: Failed password for invalid user jenkins from 121.36.197.52 port 41742 ssh2 ... show less	Brute-Force SSH
🇩🇪 gnomechompski	2026-05-14 07:32:21 (4 months ago)	2026-05-14T07:32:11.261163+00:00 bsky-pds-2queer sshd-session[1295691]: pam_unix(sshd:auth): authent ... show more 2026-05-14T07:32:11.261163+00:00 bsky-pds-2queer sshd-session[1295691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.36.197.52 2026-05-14T07:32:13.116044+00:00 bsky-pds-2queer sshd-session[1295691]: Failed password for invalid user ec2-user from 121.36.197.52 port 41622 ssh2 2026-05-14T07:32:19.015558+00:00 bsky-pds-2queer sshd-session[1295771]: Invalid user ubuntu from 121.36.197.52 port 41636 2026-05-14T07:32:19.198238+00:00 bsky-pds-2queer sshd-session[1295771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.36.197.52 2026-05-14T07:32:21.053147+00:00 bsky-pds-2queer sshd-session[1295771]: Failed password for invalid user ubuntu from 121.36.197.52 port 41636 ssh2 ... show less	Brute-Force SSH
🇮🇩 securejdprop	2026-05-14 05:53:57 (4 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET SCAN Potential ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET SCAN Potential SSH Scan). Ip 121.36.197.52 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-05-14 05:53:56.403165215 +0000 UTC show less	Hacking Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2001:470:1:fb5:3a41:ef61:4654:c6ea

🇻🇳 171.244.39.95

🇲🇽 148.245.1.106

🇭🇰 85.137.242.4

🇩🇪 69.5.169.184

🇨🇳 47.109.134.2

🇸🇬 47.82.201.223

🇳🇱 45.148.10.157

🇳🇬 41.219.149.74

🇺🇸 2001:470:1:fb5::291

🇧🇷 189.45.26.196

🇧🇷 177.22.173.226

🇨🇮 160.155.16.199

🇨🇳 117.34.85.168

🇺🇸 71.6.239.68

🇸🇬 47.82.201.6

🇳🇱 45.148.10.151

🇺🇸 35.245.62.24

🇮🇩 34.50.66.48

🇺🇸 2001:470:2cc:1::80