This IP address has been reported a total of
35
times from
31 distinct
sources.
121.36.198.138 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
2026-06-04T14:42:27.046038+08:00 qq sshd[1413939]: Failed password for invalid user myuser from 121. ...
show more2026-06-04T14:42:27.046038+08:00 qq sshd[1413939]: Failed password for invalid user myuser from 121.36.198.138 port 44310 ssh2
2026-06-04T14:46:03.394421+08:00 qq sshd[1413981]: Invalid user odoo from 121.36.198.138 port 38244
2026-06-04T14:46:03.590229+08:00 qq sshd[1413981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.36.198.138
2026-06-04T14:46:04.976054+08:00 qq sshd[1413981]: Failed password for invalid user odoo from 121.36.198.138 port 38244 ssh2
2026-06-04T14:48:55.711134+08:00 qq sshd[1414019]: Invalid user guest from 121.36.198.138 port 45952
...
show less
2026-06-04T14:36:57.074238+08:00 C20241211186402 sshd[1224563]: Failed password for invalid user myu ...
show more2026-06-04T14:36:57.074238+08:00 C20241211186402 sshd[1224563]: Failed password for invalid user myuser from 121.36.198.138 port 47674 ssh2
2026-06-04T14:43:40.408992+08:00 C20241211186402 sshd[1226285]: Invalid user ftpuser1 from 121.36.198.138 port 44874
2026-06-04T14:43:40.413100+08:00 C20241211186402 sshd[1226285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.36.198.138
2026-06-04T14:43:42.562042+08:00 C20241211186402 sshd[1226285]: Failed password for invalid user ftpuser1 from 121.36.198.138 port 44874 ssh2
2026-06-04T14:44:33.638163+08:00 C20241211186402 sshd[1226536]: Invalid user ftpuser from 121.36.198.138 port 60374
...
show less
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 us ...
show moreAutomated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
show less
2026-06-04T01:20:39.757168+05:30 yaj sshd[1162448]: Invalid user frappeuser from 121.36.198.138 port ...
show more2026-06-04T01:20:39.757168+05:30 yaj sshd[1162448]: Invalid user frappeuser from 121.36.198.138 port 54818
2026-06-04T01:23:04.889230+05:30 yaj sshd[1164126]: Invalid user web from 121.36.198.138 port 44472
2026-06-04T01:23:52.504360+05:30 yaj sshd[1164614]: Invalid user modem from 121.36.198.138 port 38262
...
show less
2026-06-03T17:27:01.241479+00:00 hel.updn.io sshd[3900229]: Failed password for invalid user contact ...
show more2026-06-03T17:27:01.241479+00:00 hel.updn.io sshd[3900229]: Failed password for invalid user contacts from 121.36.198.138 port 39856 ssh2
2026-06-03T17:38:24.386516+00:00 hel.updn.io sshd[3952922]: Invalid user rector from 121.36.198.138 port 45890
2026-06-03T17:38:24.391524+00:00 hel.updn.io sshd[3952922]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.36.198.138
2026-06-03T17:38:26.335008+00:00 hel.updn.io sshd[3952922]: Failed password for invalid user rector from 121.36.198.138 port 45890 ssh2
2026-06-03T17:39:24.988835+00:00 hel.updn.io sshd[3957645]: Invalid user scarab from 121.36.198.138 port 38018
...
show less
Brute-Force
SSH
Anonymous
Fail2ban (sshd jail): 2 failed SSH attempts from 121.36.198.138.
(sshd) Failed SSH login from 121.36.198.138 (CN/China/ecs-121-36-198-138.compute.hwclouds-dns.com): ...
show more(sshd) Failed SSH login from 121.36.198.138 (CN/China/ecs-121-36-198-138.compute.hwclouds-dns.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 3 07:56:00 14240 sshd[19013]: Invalid user cad from 121.36.198.138 port 46156
Jun 3 07:56:02 14240 sshd[19013]: Failed password for invalid user cad from 121.36.198.138 port 46156 ssh2
Jun 3 08:16:26 14240 sshd[29626]: Invalid user hzy from 121.36.198.138 port 58760
Jun 3 08:16:28 14240 sshd[29626]: Failed password for invalid user hzy from 121.36.198.138 port 58760 ssh2
Jun 3 08:33:51 14240 sshd[5900]: Invalid user ftpuser from 121.36.198.138 port 35260
show less
Jun 3 12:55:04 vps-eb8e942e sshd-session[499894]: Disconnected from invalid user cad 121.36.198.138 ...
show moreJun 3 12:55:04 vps-eb8e942e sshd-session[499894]: Disconnected from invalid user cad 121.36.198.138 port 45314 [preauth]
Jun 3 13:12:26 vps-eb8e942e sshd-session[500810]: Connection from 121.36.198.138 port 49940 on 57.128.195.69 port 2222 rdomain ""
Jun 3 13:12:28 vps-eb8e942e sshd-session[500810]: User root from 121.36.198.138 not allowed because not listed in AllowUsers
...
show less
Jun 3 12:54:10 hecnet-us-east-gw sshd[762836]: Invalid user cad from 121.36.198.138 port 34418
Jun ...
show moreJun 3 12:54:10 hecnet-us-east-gw sshd[762836]: Invalid user cad from 121.36.198.138 port 34418
Jun 3 12:54:12 hecnet-us-east-gw sshd[762836]: Failed password for invalid user cad from 121.36.198.138 port 34418 ssh2
Jun 3 12:54:14 hecnet-us-east-gw sshd[762836]: Disconnected from invalid user cad 121.36.198.138 port 34418 [preauth]
...
show less
Brute-Force
Showing 1 to
15
of 35 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩