JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 140.249.211.21

140.249.211.21 was found in our database!

This IP was reported 456 times. Confidence of Abuse is 0%: ?

ISP	CHINANET SHANDONG PROVINCE NETWORK
Usage Type	Commercial
ASN	AS58541
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Qingdao, Shandong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 140.249.211.21

Whois 140.249.211.21

IP Abuse Reports for 140.249.211.21:

This IP address has been reported a total of 456 times from 257 distinct sources. 140.249.211.21 was first reported on June 2nd 2024, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 thetomtaylor.co.uk	2026-04-08 23:08:13 (2 months ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [ice02]	Brute-Force SSH
🇩🇪 Admins@FBN	2025-10-17 12:54:00 (8 months ago)	FW-PortScan: Traffic Blocked srcport=34337 dstport=22	Port Scan Hacking SSH
🇺🇸 xmission.com	2025-10-12 14:03:11 (8 months ago)	Blocked by UFW (TCP on 22) Source port: 43320 TTL: 43 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 22) Source port: 43320 TTL: 43 Packet length: 60 TOS: 0x08 This report (for 140.249.211.21) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Brute-Force SSH
🇳🇿 paradoxnetworks	2025-10-11 12:32:22 (8 months ago)	2025-10-11T12:32:14.136453+00:00 edge-zap-akl01.int.pdx.net.uk sshd[1300033]: Invalid user user from ... show more 2025-10-11T12:32:14.136453+00:00 edge-zap-akl01.int.pdx.net.uk sshd[1300033]: Invalid user user from 140.249.211.21 port 49022 2025-10-11T12:32:15.903517+00:00 edge-zap-akl01.int.pdx.net.uk sshd[1300035]: Invalid user user from 140.249.211.21 port 49029 2025-10-11T12:32:21.437076+00:00 edge-zap-akl01.int.pdx.net.uk sshd[1300063]: Invalid user user from 140.249.211.21 port 49037 ... show less	Brute-Force SSH
🇳🇱 bontekoe.technology	2025-10-04 09:24:24 (8 months ago)	140.249.211.21 banned on rtr - Threshold reached: 5 failures	SSH
🇺🇸 MPL	2025-10-03 21:12:04 (8 months ago)	tcp/22 (8 or more attempts)	Port Scan
🇺🇸 trobotham	2025-10-02 15:01:20 (9 months ago)	(sshd) Failed SSH login from 140.249.211.21 (CN/China/-): 5 in the last 3600 secs; Ports: 22; Direct ... show more (sshd) Failed SSH login from 140.249.211.21 (CN/China/-): 5 in the last 3600 secs; Ports: 22; Direction: in; Trigger: LF_SSHD; Logs: Oct 2 11:01:10 w sshd[916748]: Invalid user user from 140.249.211.21 port 53888 Oct 2 11:01:12 w sshd[916771]: Invalid user user from 140.249.211.21 port 53894 Oct 2 11:01:13 w sshd[916796]: Invalid user user from 140.249.211.21 port 53901 Oct 2 11:01:14 w sshd[916825]: Invalid user user from 140.249.211.21 port 53907 Oct 2 11:01:16 w sshd[916853]: Invalid user user from 140.249.211.21 port 53911 show less	Port Scan
🇹🇷 rtbh.com.tr	2025-09-29 20:09:04 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-28 20:09:03 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 ghostwarriors	2025-09-28 01:50:23 (9 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇫🇮 pr0vieh	2025-09-28 01:49:22 (9 months ago)	2025-09-28T01:49:04.774438+00:00 Linux04 sshd[1512874]: pam_unix(sshd:auth): authentication failure; ... show more 2025-09-28T01:49:04.774438+00:00 Linux04 sshd[1512874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.249.211.21 user=root 2025-09-28T01:49:06.399654+00:00 Linux04 sshd[1512874]: Failed password for root from 140.249.211.21 port 46113 ssh2 2025-09-28T01:49:08.368598+00:00 Linux04 sshd[1513045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.249.211.21 user=root 2025-09-28T01:49:10.209618+00:00 Linux04 sshd[1513045]: Failed password for root from 140.249.211.21 port 46121 ssh2 2025-09-28T01:49:12.038739+00:00 Linux04 sshd[1513177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.249.211.21 user=root 2025-09-28T01:49:13.759659+00:00 Linux04 sshd[1513177]: Failed password for root from 140.249.211.21 port 46131 ssh2 2025-09-28T01:49:15.909572+00:00 Linux04 sshd[1513303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= r ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-09-24 00:32:08 (9 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/140.249.211.21	SSH
Anonymous	2025-09-22 09:32:44 (9 months ago)	2025-09-22T11:32:40.177923 mail2.akcurate.de sshd[638708]: Connection closed by authenticating user ... show more 2025-09-22T11:32:40.177923 mail2.akcurate.de sshd[638708]: Connection closed by authenticating user root 140.249.211.21 port 60394 [preauth] 2025-09-22T11:32:41.873171 mail2.akcurate.de sshd[638710]: Connection closed by authenticating user root 140.249.211.21 port 60396 [preauth] 2025-09-22T11:32:43.585319 mail2.akcurate.de sshd[638712]: Connection closed by authenticating user root 140.249.211.21 port 60399 [preauth] ... show less	Brute-Force SSH
🇦🇹 urnilxfgbez	2025-09-15 22:45:00 (9 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇨🇿 lp	2025-09-15 06:20:32 (9 months ago)	SSH Brute force: 119 attempts were recorded from 140.249.211.21 2025-09-15T07:52:25+02:00 Connection ... show more SSH Brute force: 119 attempts were recorded from 140.249.211.21 2025-09-15T07:52:25+02:00 Connection closed by authenticating user root 140.249.211.21 port 47310 [preauth] 2025-09-15T07:52:31+02:00 Connection closed by authenticating user root 140.249.211.21 port 47318 [preauth] 2025-09-15T07:52:35+02:00 Connection closed by authenticating user root 140.249.211.21 port 47332 [preauth] 2025-09-15T07:52:38+02:00 Connection closed by authenticating user root 140.249.211.21 port 47343 [preauth] 2025-09-15T07:52:44+02:00 Connection closed by authenticating user root 140.249.211.21 port 47353 [preauth] 2025-09-15T07:52:48+02:00 Connection closed by authenticating user root 140.249.211.21 port 47366 [preauth] 2025-09-15T07:52:54+02:00 Connection closed by authenticating user root 140.249.211.21 port 47373 [preauth] 2025-09-15T07:53:00+02:00 Connection closed by authenticating user root 140.249. show less	Brute-Force SSH

Showing 1 to 15 of 456 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 144.91.72.102

🇧🇷 205.210.31.246

🇦🇺 203.194.5.183

🇺🇸 147.185.132.49

🇨🇳 116.179.37.92

🇳🇱 91.92.42.64

🇷🇺 62.183.82.70

🇱🇹 62.60.130.219

🇨🇳 43.226.40.202

🇺🇸 3.14.82.106

🇺🇸 152.32.205.153

🇫🇮 147.185.133.97

🇮🇳 106.219.155.248

🇺🇸 66.132.224.91

🇺🇸 43.153.99.170

🇺🇸 18.226.228.76

🇨🇳 1.28.60.133

🇺🇸 2607:f8b0:4004:100d::127

🇺🇸 172.190.216.105

🇰🇷 125.138.175.113