This IP address has been reported a total of
85
times from
62 distinct
sources.
201.130.121.116 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 20
reports;
United States of America
with 16
reports;
Netherlands
with 9
reports.
The most common categories in these recent reports were:
Brute-Force
75
times;
SSH
71
times;
Port Scan
18
times;
Hacking
8
times;
Web App Attack
4
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-16T00:31:19.200426+02:00 AGE-1 sshd[203634]: Failed password for root from 201.130.121.116 p ...
show more2026-10-16T00:31:19.200426+02:00 AGE-1 sshd[203634]: Failed password for root from 201.130.121.116 port 54262 ssh2
2026-10-16T00:31:23.367796+02:00 AGE-1 sshd[203634]: Failed password for root from 201.130.121.116 port 54262 ssh2
2026-10-16T00:31:28.123634+02:00 AGE-1 sshd[203634]: Failed password for root from 201.130.121.116 port 54262 ssh2
2026-10-16T00:31:32.681346+02:00 AGE-1 sshd[203634]: Failed password for root from 201.130.121.116 port 54262 ssh2
2026-10-16T00:31:36.762270+02:00 AGE-1 sshd[203634]: Failed password for root from 201.130.121.116 port 54262 ssh2
...
show less
2026-10-15T22:47:05.471198+02:00 serengeti sshd-session[2095421]: Failed password for root from 201. ...
show more2026-10-15T22:47:05.471198+02:00 serengeti sshd-session[2095421]: Failed password for root from 201.130.121.116 port 49392 ssh2
2026-10-15T22:47:05.651202+02:00 serengeti sshd-session[2095421]: Failed password for root from 201.130.121.116 port 49392 ssh2
2026-10-15T22:47:05.832088+02:00 serengeti sshd-session[2095421]: Failed password for root from 201.130.121.116 port 49392 ssh2
2026-10-15T22:47:06.013007+02:00 serengeti sshd-session[2095421]: Failed password for root from 201.130.121.116 port 49392 ssh2
2026-10-15T22:47:06.193602+02:00 serengeti sshd-session[2095421]: Failed password for root from 201.130.121.116 port 49392 ssh2
...
show less
Oct 15 20:32:40 Debian-1202-bookworm-amd64-base sshd[49700]: pam_unix(sshd:auth): authentication fai ...
show moreOct 15 20:32:40 Debian-1202-bookworm-amd64-base sshd[49700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.130.121.116 user=root
Oct 15 20:32:42 Debian-1202-bookworm-amd64-base sshd[49700]: Failed password for root from 201.130.121.116 port 47566 ssh2
Oct 15 20:32:56 Debian-1202-bookworm-amd64-base sshd[49700]: error: maximum authentication attempts exceeded for root from 201.130.121.116 port 47566 ssh2 [preauth]
Oct 15 20:33:04 Debian-1202-bookworm-amd64-base sshd[63237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.130.121.116 user=root
Oct 15 20:33:06 Debian-1202-bookworm-amd64-base sshd[63237]: Failed password for root from 201.130.121.116 port 48436 ssh2
...
show less
UFW BLOCK Report:
Total attempts: 19
Top ports and details:
- Port 22 (19x): SSH Brute-Force ( ...
show moreUFW BLOCK Report:
Total attempts: 19
Top ports and details:
- Port 22 (19x): SSH Brute-Force (e.g., CVE-2024-6387 regreSSHion, botnets like Mirai, Mozi)
Source IP: 201.130.121.116
| this report is autogenerated by ZIME Cloud
show less
2026-10-15 18:09:13,273 quad proftpd[1235347] 2a03:4000:3e:312:360a:466c:8ea1:45b9 (201.130.121.116. ...
show more2026-10-15 18:09:13,273 quad proftpd[1235347] 2a03:4000:3e:312:360a:466c:8ea1:45b9 (201.130.121.116.dsl.dyn.telnor.net[201.130.121.116]): USER root: no such user found from 201.130.121.116.dsl.dyn.telnor.net [201.130.121.116] to 2.56.97.107:22
show less
2026-10-15T02:27:41.897385-06:00 b146-28 sshd[3775161]: pam_unix(sshd:auth): authentication failure; ...
show more2026-10-15T02:27:41.897385-06:00 b146-28 sshd[3775161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.130.121.116 user=root
2026-10-15T02:27:44.117222-06:00 b146-28 sshd[3775161]: Failed password for invalid user root from 201.130.121.116 port 45878 ssh2
2026-10-15T02:27:47.156333-06:00 b146-28 sshd[3775161]: Failed password for invalid user root from 201.130.121.116 port 45878 ssh2
...
show less
Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity ...
show moreHoneypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity observed.
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
2026-10-15T00:14:48.229836+00:00 edge-con-sin01.int.pdx.net.uk sshd[1798203]: Failed password for ro ...
show more2026-10-15T00:14:48.229836+00:00 edge-con-sin01.int.pdx.net.uk sshd[1798203]: Failed password for root from 201.130.121.116 port 53666 ssh2
2026-10-15T00:14:55.650396+00:00 edge-con-sin01.int.pdx.net.uk sshd[1798203]: Failed password for root from 201.130.121.116 port 53666 ssh2
2026-10-15T00:15:02.625538+00:00 edge-con-sin01.int.pdx.net.uk sshd[1798203]: Failed password for root from 201.130.121.116 port 53666 ssh2
...
show less
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-10-14T22:59:33Z and 2026-10-1 ...
show moreCowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-10-14T22:59:33Z and 2026-10-14T22:59:34Z
show less
