This IP address has been reported a total of
77
times from
73 distinct
sources.
121.6.96.149 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-16T22:53:13.686876+02:00 hera sshd[502475]: Invalid user user from 121.6.96.149 port 39752
2 ...
show more2026-10-16T22:53:13.686876+02:00 hera sshd[502475]: Invalid user user from 121.6.96.149 port 39752
2026-10-16T22:53:13.694901+02:00 hera sshd[502475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.6.96.149
2026-10-16T22:53:16.054194+02:00 hera sshd[502475]: Failed password for invalid user user from 121.6.96.149 port 39752 ssh2
2026-10-16T22:53:51.876648+02:00 hera sshd[502596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.6.96.149 user=root
2026-10-16T22:53:53.784049+02:00 hera sshd[502596]: Failed password for root from 121.6.96.149 port 53734 ssh2
...
show less
2026-10-16T22:31:44.756010+02:00 gaia sshd[1406811]: Failed password for invalid user admin from 121 ...
show more2026-10-16T22:31:44.756010+02:00 gaia sshd[1406811]: Failed password for invalid user admin from 121.6.96.149 port 44026 ssh2
2026-10-16T22:32:16.946681+02:00 gaia sshd[1407037]: Connection from 121.6.96.149 port 59748 on 148.251.110.65 port 22 rdomain ""
2026-10-16T22:32:22.129009+02:00 gaia sshd[1407037]: Invalid user user from 121.6.96.149 port 59748
...
show less
2026-10-16T19:16:29.237791+00:00 vps-46c954c2 sshd[25099]: Invalid user admin from 121.6.96.149 port ...
show more2026-10-16T19:16:29.237791+00:00 vps-46c954c2 sshd[25099]: Invalid user admin from 121.6.96.149 port 56952
2026-10-16T19:17:06.590741+00:00 vps-46c954c2 sshd[25101]: Invalid user user from 121.6.96.149 port 58044
2026-10-16T19:18:22.792245+00:00 vps-46c954c2 sshd[25111]: Invalid user user from 121.6.96.149 port 48334
...
show less
2026-10-16T20:55:27.557226+03:00 grape sshd-session[572978]: User root from 121.6.96.149 not allowed ...
show more2026-10-16T20:55:27.557226+03:00 grape sshd-session[572978]: User root from 121.6.96.149 not allowed because none of user's groups are listed in AllowGroups
2026-10-16T20:55:58.278148+03:00 grape sshd-session[573884]: Connection from 121.6.96.149 port 57270 on 192.168.0.100 port 22 rdomain ""
2026-10-16T20:56:01.628401+03:00 grape sshd-session[573884]: Invalid user user from 121.6.96.149 port 57270
2026-10-16T20:56:32.669519+03:00 grape sshd-session[574726]: Connection from 121.6.96.149 port 45732 on 192.168.0.100 port 22 rdomain ""
2026-10-16T20:56:36.008991+03:00 grape sshd-session[574726]: User root from 121.6.96.149 not allowed because none of user's groups are listed in AllowGroups
...
show less
Brute-Force
SSH
Anonymous
2026-10-16T17:18:37.124890+00:00 vps-8967498d-vps-ovh-net sshd[440159]: Invalid user user from 121.6 ...
show more2026-10-16T17:18:37.124890+00:00 vps-8967498d-vps-ovh-net sshd[440159]: Invalid user user from 121.6.96.149 port 59004
2026-10-16T17:18:37.127673+00:00 vps-8967498d-vps-ovh-net sshd[440159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.6.96.149
2026-10-16T17:18:39.503897+00:00 vps-8967498d-vps-ovh-net sshd[440159]: Failed password for invalid user user from 121.6.96.149 port 59004 ssh2
2026-10-16T17:19:19.808759+00:00 vps-8967498d-vps-ovh-net sshd[440164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.6.96.149 user=root
2026-10-16T17:19:21.949416+00:00 vps-8967498d-vps-ovh-net sshd[440164]: Failed password for root from 121.6.96.149 port 46616 ssh2
...
show less
[EmExpress] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evide ...
show more[EmExpress] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence:
Oct 16 16:28:31 emexpress sshd[3912524]: Invalid user admin from 121.6.96.149 port 59354
Oct 16 16:28:33 emexpress sshd[3912524]: Failed password for invalid user admin from 121.6.96.149 port 59354 ssh2
Oct 16 16:29:08 emexpress sshd[3912529]: Invalid user user from 121.6.96.149 port 41242
show less
2026-10-16T17:07:52.141067+02:00 server sshd-session[11104]: Invalid user admin from 121.6.96.149 po ...
show more2026-10-16T17:07:52.141067+02:00 server sshd-session[11104]: Invalid user admin from 121.6.96.149 port 34580
...
show less
2026-10-16T15:44:02.277780+01:00 vega-dns sshd[344729]: Invalid user admin from 121.6.96.149 port 58 ...
show more2026-10-16T15:44:02.277780+01:00 vega-dns sshd[344729]: Invalid user admin from 121.6.96.149 port 58756
2026-10-16T15:44:38.556501+01:00 vega-dns sshd[344736]: Invalid user user from 121.6.96.149 port 37836
2026-10-16T15:45:50.367868+01:00 vega-dns sshd[344745]: Invalid user user from 121.6.96.149 port 51236
2026-10-16T15:47:42.181758+01:00 vega-dns sshd[344764]: Invalid user orangepi from 121.6.96.149 port 52514
2026-10-16T15:48:21.820728+01:00 vega-dns sshd[344772]: Invalid user support from 121.6.96.149 port 41782
...
show less
2026-10-16T14:44:00.341748+00:00 hms35143 sshd[1473593]: Invalid user user from 121.6.96.149 port 44 ...
show more2026-10-16T14:44:00.341748+00:00 hms35143 sshd[1473593]: Invalid user user from 121.6.96.149 port 44610
2026-10-16T14:44:00.346554+00:00 hms35143 sshd[1473593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.6.96.149
2026-10-16T14:44:02.483890+00:00 hms35143 sshd[1473593]: Failed password for invalid user user from 121.6.96.149 port 44610 ssh2
2026-10-16T14:44:38.531207+00:00 hms35143 sshd[1473595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.6.96.149 user=root
2026-10-16T14:44:41.219538+00:00 hms35143 sshd[1473595]: Failed password for root from 121.6.96.149 port 37112 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 77 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩