This IP address has been reported a total of
21
times from
20 distinct
sources.
120.202.189.21 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-30T22:59:39.699056+00:00 ubuntu sshd[623261]: Failed password for root from 120.202.189.21 p ...
show more2026-06-30T22:59:39.699056+00:00 ubuntu sshd[623261]: Failed password for root from 120.202.189.21 port 65162 ssh2
2026-06-30T22:59:44.175059+00:00 ubuntu sshd[626081]: Failed password for root from 120.202.189.21 port 2422 ssh2
2026-06-30T22:59:48.907370+00:00 ubuntu sshd[628968]: Failed password for root from 120.202.189.21 port 3876 ssh2
2026-06-30T22:59:54.319048+00:00 ubuntu sshd[631334]: Failed password for root from 120.202.189.21 port 5716 ssh2
2026-06-30T22:59:59.290471+00:00 ubuntu sshd[634328]: Failed password for root from 120.202.189.21 port 7302 ssh2
...
show less
Jun 30 18:13:54 mail sshd[847574]: Failed password for root from 120.202.189.21 port 3594 ssh2
Jun 3 ...
show moreJun 30 18:13:54 mail sshd[847574]: Failed password for root from 120.202.189.21 port 3594 ssh2
Jun 30 18:14:00 mail sshd[847576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.202.189.21 user=root
Jun 30 18:14:03 mail sshd[847576]: Failed password for root from 120.202.189.21 port 7126 ssh2
...
show less
2026-06-30T15:13:31.631844+00:00 offbeat-record.ptr.network sshd[27362]: Failed password for root fr ...
show more2026-06-30T15:13:31.631844+00:00 offbeat-record.ptr.network sshd[27362]: Failed password for root from 120.202.189.21 port 53382 ssh2
2026-06-30T15:13:34.379435+00:00 offbeat-record.ptr.network sshd[27364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.202.189.21 user=root
2026-06-30T15:13:36.480447+00:00 offbeat-record.ptr.network sshd[27364]: Failed password for root from 120.202.189.21 port 56006 ssh2
...
show less
2026-06-30T08:06:56.120898Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.202.189.21:160 ...
show more2026-06-30T08:06:56.120898Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.202.189.21:16078 (158.69.22.11:2222) [session: d3189cba6572]
2026-06-30T08:06:56.726815Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.202.189.21:16368 (158.69.22.11:2222) [session: af81cf6ef3fb]
...
show less
[mirai-detector honeypot] Inbound attack against our honeypot on tcp/2222 (ssh).
Commands captured:
...
show more[mirai-detector honeypot] Inbound attack against our honeypot on tcp/2222 (ssh).
Commands captured:
$ SSH-2.0-Go
show less
Malicious activity from 120.202.189.21 detected by FDC honeypots. Categories: 14,18,22. 21 events in ...
show moreMalicious activity from 120.202.189.21 detected by FDC honeypots. Categories: 14,18,22. 21 events in last 24h.
show less
2026-06-30T01:37:37.034819+02:00 jantje sshd[22720]: pam_unix(sshd:auth): authentication failure; lo ...
show more2026-06-30T01:37:37.034819+02:00 jantje sshd[22720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.202.189.21 user=root
2026-06-30T01:37:39.095913+02:00 jantje sshd[22720]: Failed password for root from 120.202.189.21 port 57734 ssh2
2026-06-30T01:37:40.719217+02:00 jantje sshd[22720]: Connection closed by authenticating user root 120.202.189.21 port 57734 [preauth]
...
show less