This IP address has been reported a total of
10
times from
9 distinct
sources.
121.40.74.123 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-14T01:04:10.086497-03:00 nico-MacBookPro sshd[2150940]: Failed password for root from 121.40 ...
show more2026-07-14T01:04:10.086497-03:00 nico-MacBookPro sshd[2150940]: Failed password for root from 121.40.74.123 port 35842 ssh2
2026-07-14T01:04:14.007608-03:00 nico-MacBookPro sshd[2150940]: Failed password for root from 121.40.74.123 port 35842 ssh2
2026-07-14T01:04:17.487551-03:00 nico-MacBookPro sshd[2150940]: Failed password for root from 121.40.74.123 port 35842 ssh2
...
show less
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show moreUFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=121.40.74.123; proto=TCP; source_port=58629; target_port=6379; flags=SYN
show less
(sshd) Failed SSH login from 121.40.74.123 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directio ...
show more(sshd) Failed SSH login from 121.40.74.123 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 12 15:06:54 webhosting2 sshd[21722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.40.74.123 user=root
Jul 12 15:06:56 webhosting2 sshd[21722]: Failed password for root from 121.40.74.123 port 46438 ssh2
Jul 12 15:06:58 webhosting2 sshd[21722]: Failed password for root from 121.40.74.123 port 46438 ssh2
Jul 12 15:07:01 webhosting2 sshd[21722]: Failed password for root from 121.40.74.123 port 46438 ssh2
Jul 12 15:07:03 webhosting2 sshd[21722]: Failed password for root from 121.40.74.123 port 46438 ssh2
show less
2026-07-12T14:23:14.197892+02:00 vmi3394361 sshd[115602]: Failed password for root from 121.40.74.12 ...
show more2026-07-12T14:23:14.197892+02:00 vmi3394361 sshd[115602]: Failed password for root from 121.40.74.123 port 39360 ssh2
2026-07-12T14:23:23.241088+02:00 vmi3394361 sshd[115602]: Disconnecting authenticating user root 121.40.74.123 port 39360: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth]
2026-07-12T14:23:24.436622+02:00 vmi3394361 sshd[115609]: Invalid user test from 121.40.74.123 port 54842
2026-07-12T14:23:24.443550+02:00 vmi3394361 sshd[115609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.40.74.123
2026-07-12T14:23:26.474123+02:00 vmi3394361 sshd[115609]: Failed password for invalid user test from 121.40.74.123 port 54842 ssh2
...
show less
2026-07-12T03:43:20.853053Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 121.40.74.123:3421 ...
show more2026-07-12T03:43:20.853053Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 121.40.74.123:34216 (158.69.22.11:2222) [session: 6af9ebb44736]
2026-07-12T03:43:20.869396Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 121.40.74.123:34200 (158.69.22.11:2222) [session: f6d360e7a4be]
...
show less
2026-07-11T10:31:48.846038 serv sshd[2523590]: Failed password for root from 121.40.74.123 port 3900 ...
show more2026-07-11T10:31:48.846038 serv sshd[2523590]: Failed password for root from 121.40.74.123 port 39000 ssh2
2026-07-11T10:31:51.781582 serv sshd[2523590]: Failed password for root from 121.40.74.123 port 39000 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩