This IP address has been reported a total of
12
times from
9 distinct
sources.
120.238.52.95 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-26T02:22:55.924382+02:00 ipoac.nl sshd-session-: Connection closed by 120.238.52.95 port 447 ...
show more2026-06-26T02:22:55.924382+02:00 ipoac.nl sshd-session-: Connection closed by 120.238.52.95 port 44778 [preauth]
2026-06-26T02:23:24.154713+02:00 ipoac.nl sshd-session-: Connection closed by 120.238.52.95 port 45578 [preauth]
2026-06-26T02:24:03.863743+02:00 ipoac.nl sshd-session-: Connection closed by 120.238.52.95 port 33808 [preauth]
2026-06-26T02:26:17.381542+02:00 ipoac.nl sshd-session-: Unable to negotiate with 120.238.52.95 port 44592: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
2026-06-26T02:33:44.913622+02:00 ipoac.nl sshd-session-: Unable to negotiate with 120.238.52.95 port 41676: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256 [preauth]
2026-06-26T02:34:06.190626+02:00 ipoac.nl sshd-session-: Unable to negotiate with 120.238
show less
Automated trigger via Nginx-Police framework. Reason: FAKE-USER-BOT - Non-existent usernames (SSH) a ...
show moreAutomated trigger via Nginx-Police framework. Reason: FAKE-USER-BOT - Non-existent usernames (SSH) after 2 malicious interactions.
show less
Jun 26 05:25:38 honeypot sshd[13050]: Failed password for root from 120.238.52.95 port 39100 ssh2
.. ...
show moreJun 26 05:25:38 honeypot sshd[13050]: Failed password for root from 120.238.52.95 port 39100 ssh2
...
show less
Jun 26 04:46:09 honeypot sshd[11652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJun 26 04:46:09 honeypot sshd[11652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.238.52.95
...
show less
Brute-Force
SSH
Anonymous
Jun 25 23:18:26 srv sshd[10364]: Failed password for root from 120.238.52.95 port 59378 ssh2
Jun 25 ...
show moreJun 25 23:18:26 srv sshd[10364]: Failed password for root from 120.238.52.95 port 59378 ssh2
Jun 25 23:37:34 srv sshd[10595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.238.52.95
show less
Jun 26 04:26:42 honeypot sshd[10956]: Failed password for root from 120.238.52.95 port 35148 ssh2
.. ...
show moreJun 26 04:26:42 honeypot sshd[10956]: Failed password for root from 120.238.52.95 port 35148 ssh2
...
show less