JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.202.189.155

120.202.189.155 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 79%: ?

79%

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.202.189.155

Whois 120.202.189.155

IP Abuse Reports for 120.202.189.155:

This IP address has been reported a total of 26 times from 24 distinct sources. 120.202.189.155 was first reported on June 5th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-16 00:29:26 (1 week ago)	Cowrie SSH honeypot: cowrie.session.connect	Brute-Force SSH
Anonymous	2026-06-15 00:29:21 (2 weeks ago)	Cowrie SSH honeypot: cowrie.session.connect	Brute-Force SSH
🇩🇪 banankicks	2026-06-13 06:27:38 (2 weeks ago)	Unauthorized connection attempt detected from IP address 120.202.189.155 to port 22 (banankicks-serv ... show more Unauthorized connection attempt detected from IP address 120.202.189.155 to port 22 (banankicks-server) [k] show less	Brute-Force Exploited Host
🇬🇧 andypiper	2026-06-13 01:02:56 (2 weeks ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 ShadowWhisperer	2026-06-13 00:10:49 (2 weeks ago)	SSH credential attempt. (credential denied)	Brute-Force SSH
🇨🇭 flaus	2026-06-12 16:56:45 (2 weeks ago)	$f2bV_matches	Brute-Force SSH
🇨🇦 oh.mg	2026-06-12 16:54:24 (2 weeks ago)	Jun 12 12:53:58 frank sshd[715820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ... show more Jun 12 12:53:58 frank sshd[715820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.202.189.155 user=root Jun 12 12:54:04 frank sshd[716815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.202.189.155 user=root Jun 12 12:54:09 frank sshd[717367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.202.189.155 user=root Jun 12 12:54:15 frank sshd[717644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.202.189.155 user=root Jun 12 12:54:23 frank sshd[718233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.202.189.155 user=root ... show less	Brute-Force Port Scan
🇷🇴 Auster	2026-06-11 12:25:57 (2 weeks ago)	Fail2Ban (sshd): multiple failed SSH login attempts.	Brute-Force SSH
🇩🇪 dispaisyenterprises	2026-06-11 09:45:50 (2 weeks ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 2222 [1] TCP Reported by DisPaisy ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 2222 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 jennij	2026-06-11 06:19:56 (2 weeks ago)	Fail2Ban sshd ban on debian ...	Brute-Force SSH
🇧🇬 MazenHost	2026-06-11 04:26:41 (2 weeks ago)	2026-06-11T07:26:38.835541+03:00 betelgeuse.mazen.host sshd[1297014]: pam_unix(sshd:auth): authentic ... show more 2026-06-11T07:26:38.835541+03:00 betelgeuse.mazen.host sshd[1297014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.202.189.155 user=root 2026-06-11T07:26:40.755410+03:00 betelgeuse.mazen.host sshd[1297014]: Failed password for root from 120.202.189.155 port 56362 ssh2 ... show less	Brute-Force SSH
🇩🇪 Panter	2026-06-10 13:06:36 (2 weeks ago)	Bruteforce detected by fail2ban SSH	Brute-Force SSH
🇩🇪 sh97	2026-06-10 11:58:17 (2 weeks ago)	DE02-HBRR-STOR: SSH Brute Force from 120.202.189.155 at 2026-06-10 17:26:05 IST	Brute-Force SSH
🇯🇵 mkaraki	2026-06-09 17:27:12 (2 weeks ago)	1781026031 # Service_probe # SIGNATURE_SEND # source_ip:120.202.189.155 # dst_port:22222 ...	Port Scan
🇩🇪 Justin F. \| AS204464	2026-06-09 09:40:36 (2 weeks ago)	Honeypot [nx-infrastructure]: Empty payload (likely service probe); 2222 [1] TCP Reported by: Justin ... show more Honeypot [nx-infrastructure]: Empty payload (likely service probe); 2222 [1] TCP Reported by: Justin F. show less	Port Scan

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.58.241.90

🇮🇳 106.201.232.211

🇮🇹 91.80.178.166

🇵🇹 85.240.193.104

🇳🇱 45.148.10.151

🇧🇫 41.138.97.104

🇧🇪 35.195.57.110

🇺🇸 2607:f8b0:4004:1002::129

🇦🇷 190.183.193.52

🇸🇬 166.108.227.39

🇹🇼 111.70.29.132

🇰🇷 110.14.190.221

🇳🇱 91.92.42.61

🇭🇷 83.131.12.83

🇩🇪 77.7.95.28

🇫🇷 51.159.149.103

🇨🇳 49.235.130.250

🇩🇪 46.249.99.46

🇺🇬 41.220.3.101

🇿🇦 41.181.156.205