121.139.39.185

High 10/15/30d lists

Suspicious SSH authentication attempts against monitored systems.

Request review Check AbuseIPDB JSON

Risk score59/100

Detection volume+20Sensor corroboration+15Signal class+12Recency+12

Address intelligence

cached

CountrySouth KoreaKR

City / regionIncheon, Incheon, South KoreaAsia/Seoul

NetworkKorea Telecomkt.com

ASNAS4766

Reverse DNS—

Detections5total observations

Reporting sensors3distinct collectors

First seen2026-07-07 10:25 GMT+81 month ago

Last seen2026-08-18 14:55 GMT+84 days ago

Blocklist window10/15/30d lists

Reporting sensors

which collectors observed this address

SSH Sensor 041 observation(s) · last 2026-08-18 14:55 GMT+8SSH
SSH Sensor 013 observation(s) · last 2026-07-30 03:29 GMT+8SSH
SSH Sensor 021 observation(s) · last 2026-07-07 10:25 GMT+8SSH

Sensor names are anonymised. Collector hostnames and log contents are never published.

Observation history

1 signal record(s)

Suspicious SSH authentication attemptsHighSSH abuse
5 detection(s) from 3 sensor(s) · first seen 2026-07-07 10:25 GMT+8 · last seen 2026-08-18 14:55 GMT+8 (4 days ago) · active
Suspicious SSH authentication attempts against monitored systems.

Abuse Radar publishes sanitized indicators only. Severity is a triage hint computed from detection volume, sensor corroboration, signal class and recency — it is not an attribution claim. See methodology.