This IP address has been reported a total of
143
times from
91 distinct
sources.
120.52.18.229 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-14T12:08:11.908208+02:00 sshd-session[2176217]: Invalid user webuser from 120.52.18.229 por ...
show more2026-07-14T12:08:11.908208+02:00 sshd-session[2176217]: Invalid user webuser from 120.52.18.229 port 55159
2026-07-14T12:08:12.167803+02:00 sshd-session[2176217]: Disconnected from invalid user webuser 120.52.18.229 port 55159 [preauth]
2026-07-14T12:09:44.888593+02:00 sshd-session[2193915]: Disconnected from authenticating user root 120.52.18.229 port 1338 [preauth]
...
show less
(sshd) Failed SSH login from 120.52.18.229 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directio ...
show more(sshd) Failed SSH login from 120.52.18.229 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 14 09:00:57 23822 sshd[4191]: Invalid user dev from 120.52.18.229 port 15578
Jul 14 09:00:58 23822 sshd[4191]: Failed password for invalid user dev from 120.52.18.229 port 15578 ssh2
Jul 14 09:35:28 23822 sshd[22863]: Invalid user kafka from 120.52.18.229 port 35986
Jul 14 09:35:30 23822 sshd[22863]: Failed password for invalid user kafka from 120.52.18.229 port 35986 ssh2
Jul 14 09:44:14 23822 sshd[27648]: Invalid user test2 from 120.52.18.229 port 44121
show less
Malicious activity from 120.52.18.229 detected by FDC honeypots. Categories: 14,18,22. 43 events in ...
show moreMalicious activity from 120.52.18.229 detected by FDC honeypots. Categories: 14,18,22. 43 events in last 24h.
show less
This IP address carried out 192 port scanning attempts on 13-07-2026. For more information or to rep ...
show moreThis IP address carried out 192 port scanning attempts on 13-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
2026-07-14T05:51:35.176501+02:00 zg0iiuob sshd-session[3243250]: Disconnected from authenticating us ...
show more2026-07-14T05:51:35.176501+02:00 zg0iiuob sshd-session[3243250]: Disconnected from authenticating user root 120.52.18.229 port 42829 [preauth]
2026-07-14T05:54:15.943774+02:00 zg0iiuob sshd-session[3243396]: Disconnected from authenticating user root 120.52.18.229 port 31495 [preauth]
2026-07-14T06:02:32.807387+02:00 zg0iiuob sshd-session[3243842]: Invalid user normaluser from 120.52.18.229 port 2979
2026-07-14T06:02:32.940045+02:00 zg0iiuob sshd-session[3243842]: Disconnected from invalid user normaluser 120.52.18.229 port 2979 [preauth]
2026-07-14T06:05:08.221466+02:00 zg0iiuob sshd-session[3243980]: Invalid user User from 120.52.18.229 port 33596
...
show less
2026-07-14T05:31:56.721435+02:00 zg0iiuob sshd-session[3242178]: Invalid user alien from 120.52.18.2 ...
show more2026-07-14T05:31:56.721435+02:00 zg0iiuob sshd-session[3242178]: Invalid user alien from 120.52.18.229 port 48847
2026-07-14T05:31:56.894510+02:00 zg0iiuob sshd-session[3242178]: Disconnected from invalid user alien 120.52.18.229 port 48847 [preauth]
2026-07-14T05:45:51.537640+02:00 zg0iiuob sshd-session[3242912]: Invalid user frappe from 120.52.18.229 port 9513
2026-07-14T05:45:51.729832+02:00 zg0iiuob sshd-session[3242912]: Disconnected from invalid user frappe 120.52.18.229 port 9513 [preauth]
2026-07-14T05:48:31.456907+02:00 zg0iiuob sshd-session[3243090]: Disconnected from authenticating user root 120.52.18.229 port 34286 [preauth]
...
show less
This IP address carried out 12 SSH credential attack (attempts) on 13-07-2026. For more information ...
show moreThis IP address carried out 12 SSH credential attack (attempts) on 13-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less