JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.197.151.216

120.197.151.216 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 31%: ?

31%

ISP	China Mobile Communications Corporation
Usage Type	Mobile ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.197.151.216

Whois 120.197.151.216

IP Abuse Reports for 120.197.151.216:

This IP address has been reported a total of 48 times from 38 distinct sources. 120.197.151.216 was first reported on July 1st 2022, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 alph44	2026-08-21 13:02:20 (19 hours ago)	SSH brute force attack detected: 5 failed attempts	Brute-Force
🇩🇪 fynndows.de	2026-08-21 12:46:09 (19 hours ago)	2026-08-21T12:46:05.658561+00:00 fynn-epyc3 sshd-session[962405]: pam_unix(sshd:auth): authenticatio ... show more 2026-08-21T12:46:05.658561+00:00 fynn-epyc3 sshd-session[962405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.197.151.216 user=root 2026-08-21T12:46:08.118111+00:00 fynn-epyc3 sshd-session[962405]: Failed password for root from 120.197.151.216 port 54152 ssh2 ... show less	Brute-Force SSH
🇩🇪 dispaisyenterprises	2026-08-21 06:09:52 (1 day ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 22222 [1] TCP Reported by DisPaisy ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 22222 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇳🇱 Futunk	2026-08-20 22:42:22 (1 day ago)	2026-08-21T00:42:20.527606+02:00 ezri sshd[1248743]: error: kex_exchange_identification: Connection ... show more 2026-08-21T00:42:20.527606+02:00 ezri sshd[1248743]: error: kex_exchange_identification: Connection closed by remote host 2026-08-21T00:42:20.528959+02:00 ezri sshd[1248743]: Connection closed by 120.197.151.216 port 63006 2026-08-21T00:42:21.753378+02:00 ezri sshd[1248744]: User root from 120.197.151.216 not allowed because not listed in AllowUsers 2026-08-21T00:42:21.955604+02:00 ezri sshd[1248744]: Connection closed by invalid user root 120.197.151.216 port 57445 [preauth] ... show less	Brute-Force SSH
🇩🇪 Bernhard Fürst	2022-09-28 21:24:30 (3 years ago)	Cluster member 148.251.162.46 (DE/Germany/rhea.fuerstnet.de) said, DENY 120.197.151.216, Reason:[(ss ... show more Cluster member 148.251.162.46 (DE/Germany/rhea.fuerstnet.de) said, DENY 120.197.151.216, Reason:[(sshd) Failed SSH login from 120.197.151.216 (CN/China/-): 5 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs: show less	Port Scan
🇩🇪 Wuck	2022-09-28 21:22:24 (3 years ago)	Sep 29 03:20:56 Ubuntu-1404-trusty-64-minimal sshd\[28862\]: pam_unix\(sshd:auth\): authentication f ... show more Sep 29 03:20:56 Ubuntu-1404-trusty-64-minimal sshd\[28862\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.197.151.216 user=root Sep 29 03:20:59 Ubuntu-1404-trusty-64-minimal sshd\[28862\]: Failed password for root from 120.197.151.216 port 53896 ssh2 Sep 29 03:21:26 Ubuntu-1404-trusty-64-minimal sshd\[28866\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.197.151.216 user=root Sep 29 03:21:28 Ubuntu-1404-trusty-64-minimal sshd\[28866\]: Failed password for root from 120.197.151.216 port 53074 ssh2 Sep 29 03:22:22 Ubuntu-1404-trusty-64-minimal sshd\[28870\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.197.151.216 user=root show less	Brute-Force SSH
🇪🇸 Teapot	2022-09-27 11:27:00 (3 years ago)	2022-09-27T13:27:00.325846correo.[domain] sshd[46442]: Failed password for root from 120.197.151.216 ... show more 2022-09-27T13:27:00.325846correo.[domain] sshd[46442]: Failed password for root from 120.197.151.216 port 56062 ssh2 2022-09-27T13:26:59.246365correo.[domain] sshd[46446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.197.151.216 user=root 2022-09-27T13:27:00.737216correo.[domain] sshd[46446]: Failed password for root from 120.197.151.216 port 56082 ssh2 ... show less	Brute-Force SSH
🇪🇸 scotynau	2022-09-26 01:04:24 (3 years ago)	2022-09-26T07:04:20.966454Alesmola sshd[270228]: pam_unix(sshd:auth): authentication failure; lognam ... show more 2022-09-26T07:04:20.966454Alesmola sshd[270228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.197.151.216 user=root 2022-09-26T07:04:23.035776Alesmola sshd[270228]: Failed password for root from 120.197.151.216 port 44594 ssh2 ... show less	Brute-Force SSH
🇩🇪 Xorog	2022-09-25 17:22:08 (3 years ago)	[So 25. Sep 21:22:07 UTC 2022] [Automated Fail2Ban Report] Unauthorized attempt to connect via SSH	Port Scan Hacking Brute-Force SSH
🇺🇸 dj-packet	2022-09-25 16:50:21 (3 years ago)	Sep 25 13:58:47 web2 sshd\[14394\]: Failed password for root from 120.197.151.216 port 39302 ssh2Sep ... show more Sep 25 13:58:47 web2 sshd\[14394\]: Failed password for root from 120.197.151.216 port 39302 ssh2Sep 25 13:59:03 web2 sshd\[14398\]: Failed password for root from 120.197.151.216 port 36956 ssh2Sep 25 13:59:14 web2 sshd\[14402\]: Failed password for root from 120.197.151.216 port 37190 ssh2Sep 25 13:59:27 web2 sshd\[14406\]: Failed password for root from 120.197.151.216 port 32966 ssh2Sep 25 13:59:36 web2 sshd\[14408\]: Failed password for root from 120.197.151.216 port 33602 ssh2Sep 25 13:59:45 web2 sshd\[14410\]: Failed password for root from 120.197.151.216 port 50130 ssh2 ... show less	Brute-Force SSH
🇩🇪 Thomas Barth	2022-09-25 08:20:57 (3 years ago)	2022-09-25T14:20:55.208735+02:00server sshd[20462]: pam_unix(sshd:auth): authentication failure; log ... show more 2022-09-25T14:20:55.208735+02:00server sshd[20462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.197.151.216 user=root 2022-09-25T14:20:56.850513+02:00server sshd[20462]: Failed password for root from 120.197.151.216 port 47486 ssh2 ... show less	Brute-Force SSH
🇩🇪 realtoxmedia.de	2022-09-21 11:08:42 (3 years ago)	Sep 21 17:08:10 pve5 sshd[440375]: Failed password for root from 120.197.151.216 port 54976 ssh2 Sep ... show more Sep 21 17:08:10 pve5 sshd[440375]: Failed password for root from 120.197.151.216 port 54976 ssh2 Sep 21 17:08:24 pve5 sshd[441274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.197.151.216 user=root Sep 21 17:08:27 pve5 sshd[441274]: Failed password for root from 120.197.151.216 port 43944 ssh2 Sep 21 17:08:40 pve5 sshd[441995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.197.151.216 user=root Sep 21 17:08:42 pve5 sshd[441995]: Failed password for root from 120.197.151.216 port 47350 ssh2 ... show less	Brute-Force SSH
🇩🇪 herz-der-gamer.de	2022-09-19 09:15:31 (3 years ago)	Sep 19 15:15:11 marvibiene sshd[18821]: Failed password for root from 120.197.151.216 port 34902 ssh ... show more Sep 19 15:15:11 marvibiene sshd[18821]: Failed password for root from 120.197.151.216 port 34902 ssh2 Sep 19 15:15:23 marvibiene sshd[18842]: Failed password for root from 120.197.151.216 port 35130 ssh2 show less	Brute-Force SSH
🇫🇷 QUADEMU Abuse Dpt	2022-09-18 03:57:15 (3 years ago)	Noxious/Nuisible/вредоносный Host.	Port Scan Brute-Force
🇺🇸 m2jest1c	2022-09-16 23:25:22 (3 years ago)	Sep 17 03:25:22 instance1 sshd[2417249]: Disconnected from authenticating user root 120.197.151.216 ... show more Sep 17 03:25:22 instance1 sshd[2417249]: Disconnected from authenticating user root 120.197.151.216 port 39334 [preauth] ... show less	Brute-Force SSH

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.228.203.3

🇺🇸 104.248.67.151

🇺🇸 94.72.125.104

🇬🇧 45.133.173.22

🇺🇸 20.169.16.7

🇳🇱 5.61.209.44

🇺🇦 176.98.71.159

🇦🇷 170.233.71.239

🇩🇪 167.94.146.42

🇮🇳 139.59.6.237

🇨🇳 101.37.146.234

🇳🇱 85.11.167.7

🇨🇳 36.137.169.74

🇫🇷 2400:cb00:534:1000:6812:a43b:9de8:c9b5

🇰🇷 211.223.107.86

🇳🇱 195.178.110.218

🇵🇰 153.117.34.155

🇲🇰 77.28.252.86

🇱🇹 62.60.130.201

🇺🇸 47.49.2.18