JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.203.161.200

120.203.161.200 was found in our database!

This IP was reported 100 times. Confidence of Abuse is 100%: ?

100%

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS56045
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.203.161.200

Whois 120.203.161.200

IP Abuse Reports for 120.203.161.200:

This IP address has been reported a total of 100 times from 85 distinct sources. 120.203.161.200 was first reported on August 27th 2026, and the most recent report was 24 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 nohacefaltapapel-et.net	2026-09-01 11:31:29 (24 minutes ago)	2026-09-01T13:31:23.209030ee-nginx-elbernabeu sshd[19207]: Invalid user user from 120.203.161.200 po ... show more 2026-09-01T13:31:23.209030ee-nginx-elbernabeu sshd[19207]: Invalid user user from 120.203.161.200 port 51500 2026-09-01T13:31:25.877718ee-nginx-elbernabeu sshd[19211]: Invalid user user from 120.203.161.200 port 56772 2026-09-01T13:31:28.574707ee-nginx-elbernabeu sshd[19215]: Invalid user user from 120.203.161.200 port 33864 ... show less	Brute-Force SSH
🇧🇬 OHOST.BG	2026-09-01 10:42:48 (1 hour ago)	2026-09-01T13:42:38.189158+03:00 thebulgarroleplay sshd[1391775]: Failed password for root from 120. ... show more 2026-09-01T13:42:38.189158+03:00 thebulgarroleplay sshd[1391775]: Failed password for root from 120.203.161.200 port 54508 ssh2 2026-09-01T13:42:40.222436+03:00 thebulgarroleplay sshd[1391778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.203.161.200 user=root 2026-09-01T13:42:42.490168+03:00 thebulgarroleplay sshd[1391778]: Failed password for root from 120.203.161.200 port 33026 ssh2 2026-09-01T13:42:45.850772+03:00 thebulgarroleplay sshd[1391780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.203.161.200 user=root 2026-09-01T13:42:48.139368+03:00 thebulgarroleplay sshd[1391780]: Failed password for root from 120.203.161.200 port 44428 ssh2 ... show less	Brute-Force SSH
🇺🇸 MPL	2026-09-01 10:25:16 (1 hour ago)	tcp/22 (8 or more attempts)	Port Scan
🇩🇪 AetherFox	2026-09-01 02:40:43 (9 hours ago)	AetherFox VoidGuard detected: Sep 1 04:40:31 n3 sshd[311779]: Failed password for root from 120.203 ... show more AetherFox VoidGuard detected: Sep 1 04:40:31 n3 sshd[311779]: Failed password for root from 120.203.161.200 port 43354 ssh2 Sep 1 04:40:33 n3 sshd[311781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.203.161.200 user=root Sep 1 04:40:43 n3 sshd[311781]: Failed password for root from 120.203.161.200 port 48830 ssh2 Sep 1 04:40:43 n3 sshd[311783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.203.161.200 user=root Sep 1 04:40:43 n3 sshd[311783]: Failed password for root from 120.203.161.200 port 54822 ssh2 ... show less	Brute-Force SSH
🇩🇪 Ilop	2026-09-01 00:07:14 (11 hours ago)	[hp-100] 8 unsolicited packets to honeypot ports 22 (OCI DShield sensor)	Port Scan
🇺🇸 George0phile	2026-09-01 00:00:08 (11 hours ago)	SSH brute force on port 22 -- 2 attempts, 1 successful. Credentials: root:root123456. Active: 2026-0 ... show more SSH brute force on port 22 -- 2 attempts, 1 successful. Credentials: root:root123456. Active: 2026-08-31T19:30 to 2026-08-31T19:30. Post-login: ausearch -i -k command --checkpoint /var/lib/honeypot/audit_; ausearch -i -m USER_LOGIN,USER_START --checkpoint /var/lib/h; /usr/bin/env python3 /usr/local/bin/honeypot_pam.py. Malware: botnet (high); trojan (critical); miner (critical). Data from SSH honeypot — not a production system. show less	Brute-Force SSH IoT Targeted
🇳🇱 vgfdvsdhfds	2026-08-31 22:33:28 (13 hours ago)	Fort Knox Cyber SOC Honeypot: Unauthorized SSH brute-force attack intercepted (11 attempts) and sand ... show more Fort Knox Cyber SOC Honeypot: Unauthorized SSH brute-force attack intercepted (11 attempts) and sandboxed. show less	Brute-Force SSH
🇧🇬 OHOST.BG	2026-08-31 22:03:58 (13 hours ago)	2026-09-01T01:03:48.191679+03:00 irc sshd[152451]: Failed password for root from 120.203.161.200 por ... show more 2026-09-01T01:03:48.191679+03:00 irc sshd[152451]: Failed password for root from 120.203.161.200 port 42138 ssh2 2026-09-01T01:03:52.858475+03:00 irc sshd[152461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.203.161.200 user=root 2026-09-01T01:03:55.258894+03:00 irc sshd[152461]: Failed password for root from 120.203.161.200 port 59302 ssh2 2026-09-01T01:03:55.915690+03:00 irc sshd[152466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.203.161.200 user=root 2026-09-01T01:03:57.728914+03:00 irc sshd[152466]: Failed password for root from 120.203.161.200 port 42054 ssh2 ... show less	Brute-Force SSH
🇮🇩 einskhin	2026-08-31 20:57:53 (14 hours ago)	Sep 1 04:57:46 localhost sshd[1816058]: Failed password for root from 120.203.161.200 port 47650 ss ... show more Sep 1 04:57:46 localhost sshd[1816058]: Failed password for root from 120.203.161.200 port 47650 ssh2 Sep 1 04:57:47 localhost sshd[1816065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.203.161.200 user=root Sep 1 04:57:49 localhost sshd[1816065]: Failed password for root from 120.203.161.200 port 58564 ssh2 Sep 1 04:57:50 localhost sshd[1816080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.203.161.200 user=root Sep 1 04:57:52 localhost sshd[1816080]: Failed password for root from 120.203.161.200 port 38990 ssh2 ... show less	FTP Brute-Force Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH
🇺🇸 yzfdude1	2026-08-31 17:56:25 (17 hours ago)	2026-08-31T11:56:20.627470-06:00 b146-InstructorA sshd[3345592]: pam_unix(sshd:auth): authentication ... show more 2026-08-31T11:56:20.627470-06:00 b146-InstructorA sshd[3345592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.203.161.200 user=root 2026-08-31T11:56:22.441241-06:00 b146-InstructorA sshd[3345592]: Failed password for invalid user root from 120.203.161.200 port 48112 ssh2 2026-08-31T11:56:24.011975-06:00 b146-InstructorA sshd[3345941]: User root from 120.203.161.200 not allowed because none of user's groups are listed in AllowGroups ... show less	Brute-Force SSH
🇩🇪 js-hosting.at	2026-08-31 17:27:10 (18 hours ago)	SSH Brute-Force attacks	Brute-Force SSH
🇩🇪 senkodev	2026-08-31 15:17:25 (20 hours ago)	2026-08-31T17:17:22.637414+02:00 vm1386.de.snk.wtf sshd[49159]: Failed password for root from 120.20 ... show more 2026-08-31T17:17:22.637414+02:00 vm1386.de.snk.wtf sshd[49159]: Failed password for root from 120.203.161.200 port 57338 ssh2 2026-08-31T17:17:24.352286+02:00 vm1386.de.snk.wtf sshd[49159]: Connection closed by authenticating user root 120.203.161.200 port 57338 [preauth] ... show less	Brute-Force SSH
🇩🇪 banankicks	2026-08-31 12:25:57 (23 hours ago)	Unauthorized connection attempt detected from IP address 120.203.161.200 to port 22 (banankicks-serv ... show more Unauthorized connection attempt detected from IP address 120.203.161.200 to port 22 (banankicks-server) [l] show less	Brute-Force Exploited Host
🇨🇭 flaus	2026-08-31 12:21:33 (23 hours ago)	$f2bV_matches	Brute-Force SSH
🇵🇱 Kitki30.com	2026-08-31 11:52:22 (1 day ago)	Entered SSH Tarpit (endlessh, server 1). Log: 2026-08-31T11:52:21.957Z ACCEPT host=::ffff:120.203.16 ... show more Entered SSH Tarpit (endlessh, server 1). Log: 2026-08-31T11:52:21.957Z ACCEPT host=::ffff:120.203.161.200 port=43176 fd=4 n=1/4096 show less	Brute-Force SSH Port Scan

Showing 1 to 15 of 100 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 173.249.4.73

🇺🇸 146.88.241.162

🇨🇳 115.190.117.228

🇭🇺 91.146.167.76

🇺🇸 65.111.8.68

🇨🇦 209.50.176.50

🇦🇺 203.214.80.149

🇪🇸 188.26.193.232

🇺🇦 185.35.8.103

🇵🇰 175.107.233.81

🇭🇰 152.32.134.166

🇨🇳 124.126.188.2

🇨🇳 118.113.15.18

🇺🇸 104.238.110.208

🇹🇼 104.199.176.250

🇺🇸 104.21.59.229

🇷🇴 92.118.39.14

🇱🇻 62.60.130.242

🇺🇸 20.57.77.194

🇫🇮 212.112.19.79