This IP address has been reported a total of
40
times from
32 distinct
sources.
120.52.19.149 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-15T09:11:30.391024+08:00 *hostname* sshd-session[873129]: Invalid user user from 120.52.19.1 ...
show more2026-07-15T09:11:30.391024+08:00 *hostname* sshd-session[873129]: Invalid user user from 120.52.19.149 port 33599
2026-07-15T09:11:30.121378+08:00 *hostname* sshd-session[873129]: Connection from 120.52.19.149 port 33599 on 10.66.0.230 port 22 rdomain ""
2026-07-15T09:11:30.391024+08:00 *hostname* sshd-session[873129]: Invalid user user from 120.52.19.149 port 33599
2026-07-15T09:14:51.200224+08:00 *hostname* sshd-session[873456]: Connection from 120.52.19.149 port 15843 on 10.66.0.230 port 22 rdomain ""
2026-07-15T09:14:51.478942+08:00 *hostname* sshd-session[873456]: Invalid user testuser from 120.52.19.149 port 15843
show less
2026-07-14T02:23:14.072719+00:00 edge-eqx-iad03.int.pdx.net.uk sshd[1995759]: Failed password for in ...
show more2026-07-14T02:23:14.072719+00:00 edge-eqx-iad03.int.pdx.net.uk sshd[1995759]: Failed password for invalid user test1 from 120.52.19.149 port 45363 ssh2
2026-07-14T02:32:43.807127+00:00 edge-eqx-iad03.int.pdx.net.uk sshd[1996670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.19.149 user=root
2026-07-14T02:32:46.031267+00:00 edge-eqx-iad03.int.pdx.net.uk sshd[1996670]: Failed password for root from 120.52.19.149 port 31621 ssh2
...
show less
2026-07-14T00:07:33.579Z, an unauthorized access attempt was detected on port 22 (SSH) from source I ...
show more2026-07-14T00:07:33.579Z, an unauthorized access attempt was detected on port 22 (SSH) from source IP address 120.52.19.149.
show less
Jul 13 16:57:23 fedi sshd[710875]: Invalid user huy from 120.52.19.149 port 48346
Jul 13 17:05:37 fe ...
show moreJul 13 16:57:23 fedi sshd[710875]: Invalid user huy from 120.52.19.149 port 48346
Jul 13 17:05:37 fedi sshd[711442]: Invalid user oracle from 120.52.19.149 port 42631
...
show less
2026-07-13T17:38:35.654353+02:00 router02.imr-richtsfeld.de sshd[755578]: Disconnected from invalid ...
show more2026-07-13T17:38:35.654353+02:00 router02.imr-richtsfeld.de sshd[755578]: Disconnected from invalid user matt 120.52.19.149 port 34234 [preauth]
2026-07-13T17:46:03.435091+02:00 router02.imr-richtsfeld.de sshd[756534]: Connection closed by 120.52.19.149 port 13334 [preauth]
2026-07-13T17:48:44.462807+02:00 router02.imr-richtsfeld.de sshd[756782]: Connection closed by 120.52.19.149 port 54578 [preauth]
2026-07-13T17:51:27.830721+02:00 router02.imr-richtsfeld.de sshd[757149]: Invalid user evan from 120.52.19.149 port 34620
2026-07-13T17:51:27.996915+02:00 router02.imr-richtsfeld.de sshd[757149]: Disconnected from invalid user evan 120.52.19.149 port 34620 [preauth]
show less
2026-07-13T13:00:30.444180+02:00 amqp-host01.amqp.srvfarm.net sshd-session[1510983]: Invalid user de ...
show more2026-07-13T13:00:30.444180+02:00 amqp-host01.amqp.srvfarm.net sshd-session[1510983]: Invalid user deploy from 120.52.19.149 port 64133
2026-07-13T13:00:30.793180+02:00 amqp-host01.amqp.srvfarm.net sshd-session[1510983]: Disconnected from invalid user deploy 120.52.19.149 port 64133 [preauth]
2026-07-13T13:01:20.428080+02:00 amqp-host01.amqp.srvfarm.net sshd-session[1511022]: Disconnected from authenticating user root 120.52.19.149 port 31918 [preauth]
2026-07-13T13:02:13.690230+02:00 amqp-host01.amqp.srvfarm.net sshd-session[1511062]: Invalid user mysql from 120.52.19.149 port 30325
2026-07-13T13:02:14.040821+02:00 amqp-host01.amqp.srvfarm.net sshd-session[1511062]: Disconnected from invalid user mysql 120.52.19.149 port 30325 [preauth]
show less
2026-07-13T02:52:21.394532+02:00 ubuntu-iqw sshd[1101785]: Connection closed by 120.52.19.149 port 1 ...
show more2026-07-13T02:52:21.394532+02:00 ubuntu-iqw sshd[1101785]: Connection closed by 120.52.19.149 port 11421 [preauth]
2026-07-13T02:53:16.700369+02:00 ubuntu-iqw sshd[1101788]: Disconnected from authenticating user root 120.52.19.149 port 1960 [preauth]
2026-07-13T02:53:50.798955+02:00 ubuntu-iqw sshd[1101793]: Connection closed by 120.52.19.149 port 37442 [preauth]
...
show less
Brute-Force
SSH
Showing 1 to
15
of 40 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ