This IP address has been reported a total of
16
times from
15 distinct
sources.
1.95.120.92 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-09T03:51:51.395604+02:00 ubuntu sshd[2755707]: pam_unix(sshd:auth): authentication failure; ...
show more2026-06-09T03:51:51.395604+02:00 ubuntu sshd[2755707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.95.120.92
2026-06-09T03:51:53.279881+02:00 ubuntu sshd[2755707]: Failed password for invalid user boss from 1.95.120.92 port 46508 ssh2
2026-06-09T03:57:23.842085+02:00 ubuntu sshd[2756073]: Invalid user system from 1.95.120.92 port 39038
...
show less
SSH Brute force: 3 attempts were recorded from 1.95.120.92
2026-06-08T23:14:23+02:00 User root from ...
show moreSSH Brute force: 3 attempts were recorded from 1.95.120.92
2026-06-08T23:14:23+02:00 User root from 1.95.120.92 not allowed because none of user's groups are listed in AllowGroups
2026-06-08T23:32:39+02:00 Invalid user murat from 1.95.120.92 port 48826
2026-06-08T23:35:53+02:00 User root from 1.95.120.92 not allowed because none of user's groups are listed in AllowGroups
show less
2026-06-08T21:14:07.781313+00:00 xenon sshd-session[3371976]: Disconnected from authenticating user ...
show more2026-06-08T21:14:07.781313+00:00 xenon sshd-session[3371976]: Disconnected from authenticating user root 1.95.120.92 port 49176 [preauth]
2026-06-08T21:30:48.808206+00:00 xenon sshd-session[3392320]: Invalid user comercial from 1.95.120.92 port 57686
2026-06-08T21:30:49.272214+00:00 xenon sshd-session[3392320]: Disconnected from invalid user comercial 1.95.120.92 port 57686 [preauth]
...
show less
(sshd) Failed SSH login from 1.95.120.92 (CN/China/ecs-1-95-120-92.compute.hwclouds-dns.com): 5 in t ...
show more(sshd) Failed SSH login from 1.95.120.92 (CN/China/ecs-1-95-120-92.compute.hwclouds-dns.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 8 17:33:57 aurora sshd[2604816]: Invalid user ubuntu from 1.95.120.92 port 57366
Jun 8 17:36:50 aurora sshd[2609270]: Invalid user admin from 1.95.120.92 port 34138
Jun 8 17:38:19 aurora sshd[2611234]: Invalid user pam from 1.95.120.92 port 51796
Jun 8 18:04:33 aurora sshd[2643197]: Invalid user uno from 1.95.120.92 port 37088
Jun 8 18:05:57 aurora sshd[2644716]: Invalid user msf from 1.95.120.92 port 43892
show less
[SSH Attack] SSH-related attack. Ports: *; Direction: 1; Trigger: LF_TRIGGER; Message: (sshd) Failed ...
show more[SSH Attack] SSH-related attack. Ports: *; Direction: 1; Trigger: LF_TRIGGER; Message: (sshd) Failed SSH login from 1.95.120.92 (ecs-1-95-120-92.compute.hwclouds-dns.com): 3 in the last 7200 secs; Logs: Jun 8 16:05:33 potedemel sshd[365324]: Invalid user test from 1.95.120.92 port 59672
Jun 8 16:05:36 potedemel sshd[365324]: Failed password for invalid user test from 1.95.120.92 port 59672 ssh2
Jun 8 16:11:05 potedemel sshd[365381]: Invalid user ark from 1.95.120.92 port 34552
show less
2026-06-08T15:36:09.800496+00:00 hostname sshd[793605]: pam_unix(sshd:auth): authentication failure; ...
show more2026-06-08T15:36:09.800496+00:00 hostname sshd[793605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.95.120.92 user=root
2026-06-08T15:36:11.520773+00:00 hostname sshd[793605]: Failed password for root from 1.95.120.92 port 47974 ssh2
2026-06-08T15:37:17.617544+00:00 hostname sshd[793633]: Invalid user ming from 1.95.120.92 port 55678
2026-06-08T15:37:17.627892+00:00 hostname sshd[793633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.95.120.92
2026-06-08T15:37:19.349189+00:00 hostname sshd[793633]: Failed password for invalid user ming from 1.95.120.92 port 55678 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-06-08T14:30:41.398319+02:00 vps sshd[847209]: Failed password for invalid user vncuser from 1.9 ...
show more2026-06-08T14:30:41.398319+02:00 vps sshd[847209]: Failed password for invalid user vncuser from 1.95.120.92 port 53488 ssh2
2026-06-08T14:49:25.921015+02:00 vps sshd[855753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.95.120.92 user=root
2026-06-08T14:49:28.264774+02:00 vps sshd[855753]: Failed password for root from 1.95.120.92 port 50180 ssh2
...
show less
SSH Brute force: 1 attempts were recorded from 1.95.120.92
2026-06-08T12:29:24+02:00 Disconnected fr ...
show moreSSH Brute force: 1 attempts were recorded from 1.95.120.92
2026-06-08T12:29:24+02:00 Disconnected from authenticating user root 1.95.120.92 port 60902 [preauth]
show less
Brute-Force
SSH
Anonymous
Jun 8 12:46:05 fi7 sshd[52231]: Failed password for root from 1.95.120.92 port 59920 ssh2
Jun 8 12 ...
show moreJun 8 12:46:05 fi7 sshd[52231]: Failed password for root from 1.95.120.92 port 59920 ssh2
Jun 8 12:48:20 fi7 sshd[52239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.95.120.92 user=root
Jun 8 12:48:22 fi7 sshd[52239]: Failed password for root from 1.95.120.92 port 57542 ssh2
...
show less
Jun 8 09:51:40 server sshd[375694]: Invalid user user from 1.95.120.92 port 43442
Jun 8 09:51:40 s ...
show moreJun 8 09:51:40 server sshd[375694]: Invalid user user from 1.95.120.92 port 43442
Jun 8 09:51:40 server sshd[375694]: Failed password for invalid user user from 1.95.120.92 port 43442 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 16 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩