121.204.148.196 has a moderate threat confidence level of 54%, originating from China, on the Fuzhou network (133774). It has been observed across 147 sessions targeting SSH, First observed on January 21, 2026, most recently active February 22, 2026.