This IP address has been reported a total of
390
times from
227 distinct
sources.
120.133.52.228 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Fail2Ban banned IP after 3 attempts against AbuseIPDB
2026-04-25T21:05:57.637478-04:00 debian sshd[2231617]: Invalid user ubuntu from 120.133.52.228 port ...
show more2026-04-25T21:05:57.637478-04:00 debian sshd[2231617]: Invalid user ubuntu from 120.133.52.228 port 36870
2026-04-25T21:05:57.640757-04:00 debian sshd[2231617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.133.52.228
2026-04-25T21:05:59.640705-04:00 debian sshd[2231617]: Failed password for invalid user ubuntu from 120.133.52.228 port 36870 ssh2
2026-04-25T21:07:35.837033-04:00 debian sshd[2232313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.133.52.228 user=root
2026-04-25T21:07:37.959452-04:00 debian sshd[2232313]: Failed password for root from 120.133.52.228 port 48590 ssh2
...
show less
2026-04-25T22:47:46.493755+01:00 hostname sshd[4105088]: Failed password for invalid user n8n from 1 ...
show more2026-04-25T22:47:46.493755+01:00 hostname sshd[4105088]: Failed password for invalid user n8n from 120.133.52.228 port 57340 ssh2
2026-04-25T22:57:36.224014+01:00 hostname sshd[4105225]: Invalid user ftpuser from 120.133.52.228 port 40686
2026-04-25T22:57:36.226791+01:00 hostname sshd[4105225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.133.52.228
2026-04-25T22:57:38.129677+01:00 hostname sshd[4105225]: Failed password for invalid user ftpuser from 120.133.52.228 port 40686 ssh2
2026-04-25T22:58:09.242026+01:00 hostname sshd[4105237]: Invalid user steam from 120.133.52.228 port 47450
...
show less
Brute-Force
SSH
Anonymous
2026-04-25T22:12:57+02:00 lb-2 sshd[788458]: Failed password for invalid user fauzi from 120.133.52. ...
show more2026-04-25T22:12:57+02:00 lb-2 sshd[788458]: Failed password for invalid user fauzi from 120.133.52.228 port 60298 ssh2
2026-04-25T22:15:15+02:00 lb-2 sshd[788725]: Invalid user ubuntu from 120.133.52.228 port 57416
2026-04-25T22:15:15+02:00 lb-2 sshd[788725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.133.52.228
2026-04-25T22:15:17+02:00 lb-2 sshd[788725]: Failed password for invalid user ubuntu from 120.133.52.228 port 57416 ssh2
...
show less
(sshd) Failed SSH login from 120.133.52.228 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directi ...
show more(sshd) Failed SSH login from 120.133.52.228 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Apr 25 14:02:17 17126 sshd[23130]: Invalid user ubuntu from 120.133.52.228 port 48142
Apr 25 14:02:19 17126 sshd[23130]: Failed password for invalid user ubuntu from 120.133.52.228 port 48142 ssh2
Apr 25 14:43:56 17126 sshd[26864]: Invalid user admin from 120.133.52.228 port 33686
Apr 25 14:43:57 17126 sshd[26864]: Failed password for invalid user admin from 120.133.52.228 port 33686 ssh2
Apr 25 14:45:57 17126 sshd[27042]: Invalid user deploy from 120.133.52.228 port 55008
show less
Brute-Force
SSH
Showing 1 to
15
of 390 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩