AbuseIPDB » 120.192.21.164

120.192.21.164 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 36%: ?

36%

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS24444
Domain Name	chinamobile.com
Country	China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 120.192.21.164

Whois 120.192.21.164

IP Abuse Reports for 120.192.21.164:

This IP address has been reported a total of 14 times from 14 distinct sources. 120.192.21.164 was first reported on March 19th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
ThreatBook.io	2025-03-22 01:47:58 (1 month ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.192.21.164 2025-0 ... show moreThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.192.21.164 2025-03-21 02:02:32 ["uname -s -m"] 2025-03-21 07:19:41 ["uname -s -m"] 2025-03-21 13:27:30 ["uname -s -m"] show less	SSH
SnowBerryZ	2025-03-21 08:57:29 (1 month ago)	Rejected on V-157	Brute-Force SSH
Anonymous	2025-03-20 20:00:02 (1 month ago)	sshd	Brute-Force SSH
XeroX	2025-03-20 19:34:48 (1 month ago)	2025-03-20T20:34:50.093717+01:00 de2 sshd-session[870810]: pam_unix(sshd:auth): authentication failu ... show more2025-03-20T20:34:50.093717+01:00 de2 sshd-session[870810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.192.21.164 user=root 2025-03-20T20:34:52.383416+01:00 de2 sshd-session[870810]: Failed password for invalid user root from 120.192.21.164 port 40182 ssh2 ... show less	Brute-Force SSH
drewf.ink	2025-03-20 18:34:04 (1 month ago)	[18:34] Attempted SSH login on port 2222 with credentials root:---fuck_you----	Brute-Force SSH
MSchienle	2025-03-20 18:16:04 (1 month ago)	2025-03-20 13:13:30.835489-0500 localhost sshd[26698]: Failed password for root from 120.192.21.164 ... show more2025-03-20 13:13:30.835489-0500 localhost sshd[26698]: Failed password for root from 120.192.21.164 port 55226 ssh2 show less	Brute-Force
adnscom.net	2025-03-20 18:13:20 (1 month ago)	IPS trigger: Brute force SSH scanning/attack	Brute-Force SSH
Anonymous	2025-03-20 14:52:15 (1 month ago)	(sshd) Failed SSH login from 120.192.21.164 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directi ... show more(sshd) Failed SSH login from 120.192.21.164 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 20 10:52:05 server2 sshd[27327]: Did not receive identification string from 120.192.21.164 port 51604 Mar 20 10:52:07 server2 sshd[27331]: Failed password for root from 120.192.21.164 port 52042 ssh2 Mar 20 10:52:09 server2 sshd[27340]: Failed password for root from 120.192.21.164 port 53566 ssh2 Mar 20 10:52:11 server2 sshd[27352]: Failed password for root from 120.192.21.164 port 54764 ssh2 Mar 20 10:52:13 server2 sshd[27364]: Failed password for root from 120.192.21.164 port 55878 ssh2 show less	Brute-Force
900cm	2025-03-20 11:36:24 (1 month ago)	Mar 20 12:36:24 raspberrypi sshd[1318]: Failed password for root from 120.192.21.164 port 44660 ssh2 ... show moreMar 20 12:36:24 raspberrypi sshd[1318]: Failed password for root from 120.192.21.164 port 44660 ssh2 ... show less	Port Scan Brute-Force SSH
sireno	2025-03-20 10:30:39 (1 month ago)	Mar 20 10:30:26 localhost sshd[670327]: Failed password for root from 120.192.21.164 port 41086 ssh2 ... show moreMar 20 10:30:26 localhost sshd[670327]: Failed password for root from 120.192.21.164 port 41086 ssh2 Mar 20 10:30:32 localhost sshd[670333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.192.21.164 user=root Mar 20 10:30:34 localhost sshd[670333]: Failed password for root from 120.192.21.164 port 46416 ssh2 Mar 20 10:30:37 localhost sshd[670335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.192.21.164 user=root Mar 20 10:30:39 localhost sshd[670335]: Failed password for root from 120.192.21.164 port 50568 ssh2 ... show less	Brute-Force SSH
Vlad Marchenko	2025-03-20 08:52:30 (1 month ago)	2025-03-20T03:52:19.325341 nas.marchenko.net sshd[770492]: Failed password for root from 120.192.21. ... show more2025-03-20T03:52:19.325341 nas.marchenko.net sshd[770492]: Failed password for root from 120.192.21.164 port 41451 ssh2 2025-03-20T03:52:27.118695 nas.marchenko.net sshd[770604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.192.21.164 user=root 2025-03-20T03:52:29.149651 nas.marchenko.net sshd[770604]: Failed password for root from 120.192.21.164 port 32736 ssh2 ... show less	Brute-Force SSH
LoNET	2025-03-19 19:19:43 (1 month ago)	Report 1644074 with IP 2691627 for SSH brute-force attack by source 2686299 via ssh-honeypot/0.2.0+h ... show moreReport 1644074 with IP 2691627 for SSH brute-force attack by source 2686299 via ssh-honeypot/0.2.0+http show less	Brute-Force SSH
EGP Abuse Dept	2025-03-19 15:55:07 (1 month ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
Anonymous	2025-03-19 10:01:32 (1 month ago)	2025-03-19T11:00:44.436506+01:00 ubuntu sshd[166060]: Failed password for root from 120.192.21.164 p ... show more2025-03-19T11:00:44.436506+01:00 ubuntu sshd[166060]: Failed password for root from 120.192.21.164 port 46498 ssh2 2025-03-19T11:01:25.149325+01:00 ubuntu sshd[166062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.192.21.164 user=root 2025-03-19T11:01:26.707107+01:00 ubuntu sshd[166062]: Failed password for root from 120.192.21.164 port 48382 ssh2 2025-03-19T11:01:29.645204+01:00 ubuntu sshd[166076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.192.21.164 user=root 2025-03-19T11:01:31.750875+01:00 ubuntu sshd[166076]: Failed password for root from 120.192.21.164 port 55820 ssh2 ... show less	Brute-Force

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩