Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 120.203.161.201:
This IP address has been reported a total of
23
times from
22 distinct
sources.
120.203.161.201 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 6
reports;
France
with 3
reports;
Netherlands
with 3
reports.
The most common categories in these recent reports were:
Brute-Force
20
times;
SSH
19
times;
Port Scan
2
times;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-07T06:19:56.739079tim.mtkrbti.by sshd[24325]: Failed password for root from 120.203.161.201 ...
show more2026-09-07T06:19:56.739079tim.mtkrbti.by sshd[24325]: Failed password for root from 120.203.161.201 port 44390 ssh2
2026-09-07T06:19:58.721688tim.mtkrbti.by sshd[24327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.203.161.201 user=root
2026-09-07T06:20:01.115780tim.mtkrbti.by sshd[24327]: Failed password for root from 120.203.161.201 port 46658 ssh2
...
show less
2026-09-07T00:41:49.254398+02:00 vmi3226489 sshd[376099]: Connection from 120.203.161.201 port 43490 ...
show more2026-09-07T00:41:49.254398+02:00 vmi3226489 sshd[376099]: Connection from 120.203.161.201 port 43490 on 85.239.240.53 port 22 rdomain ""
2026-09-07T00:41:50.755400+02:00 vmi3226489 sshd[376099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.203.161.201 user=root
2026-09-07T00:41:52.509325+02:00 vmi3226489 sshd[376099]: Failed password for root from 120.203.161.201 port 43490 ssh2
...
show less
Brute-Force
Anonymous
Sep 6 17:07:19 vmi3075181 sshd[450981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreSep 6 17:07:19 vmi3075181 sshd[450981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.203.161.201 user=root
Sep 6 17:07:21 vmi3075181 sshd[450981]: Failed password for root from 120.203.161.201 port 37362 ssh2
...
show less
2026-09-06T12:58:24.171129+00:00 prod-westeu sshd[3287049]: Failed password for root from 120.203.16 ...
show more2026-09-06T12:58:24.171129+00:00 prod-westeu sshd[3287049]: Failed password for root from 120.203.161.201 port 36816 ssh2
2026-09-06T12:58:27.183783+00:00 prod-westeu sshd[3287064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.203.161.201 user=root
2026-09-06T12:58:29.301549+00:00 prod-westeu sshd[3287064]: Failed password for root from 120.203.161.201 port 39270 ssh2
...
show less
2026-09-06T00:21:18.522615+00:00 boron sshd[249137]: pam_unix(sshd:auth): authentication failure; lo ...
show more2026-09-06T00:21:18.522615+00:00 boron sshd[249137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.203.161.201 user=root
2026-09-06T00:21:20.698703+00:00 boron sshd[249137]: Failed password for root from 120.203.161.201 port 37802 ssh2
2026-09-06T00:21:22.458700+00:00 boron sshd[249137]: Connection closed by authenticating user root 120.203.161.201 port 37802 [preauth]
...
show less
Report 2663834 with IP 3711401 for SSH brute-force attack by source 3706059 via ssh-honeypot/0.2.0+h ...
show moreReport 2663834 with IP 3711401 for SSH brute-force attack by source 3706059 via ssh-honeypot/0.2.0+http
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
