JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.52.92.157

120.52.92.157 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINA UNICOM CLOUD DATA COMPANY LIMITED
Usage Type	Fixed Line ISP
ASN	AS133119
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.52.92.157

Whois 120.52.92.157

IP Abuse Reports for 120.52.92.157:

This IP address has been reported a total of 29 times from 29 distinct sources. 120.52.92.157 was first reported on July 9th 2026, and the most recent report was 30 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bigscoots.com	2026-07-12 00:50:29 (30 minutes ago)	120.52.92.157 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ... show more 120.52.92.157 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jul 11 19:50:02 15122 sshd[27858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.92.162.244 user=root Jul 11 19:44:33 15122 sshd[24952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.92.157 user=root Jul 11 19:44:35 15122 sshd[24952]: Failed password for root from 120.52.92.157 port 10002 ssh2 Jul 11 19:11:09 15122 sshd[6996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.92.162.245 user=root Jul 11 19:11:10 15122 sshd[6996]: Failed password for root from 177.92.162.245 port 52338 ssh2 IP Addresses Blocked: 177.92.162.244 (BR/Brazil/sidi-177-92-162-244.siditelecom-isp.com.br) show less	Brute-Force SSH
🇨🇳 nong yiyi	2026-07-11 23:13:12 (2 hours ago)	Auto-reported by fail2ban (OSS): sshd ban after 5 failures	Brute-Force SSH
Anonymous	2026-07-11 20:53:15 (4 hours ago)	120.52.92.157 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Port ... show more 120.52.92.157 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jul 11 16:44:33 server5 sshd[5910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.47.41 user=root Jul 11 16:44:35 server5 sshd[5910]: Failed password for root from 159.89.47.41 port 56446 ssh2 Jul 11 16:53:08 server5 sshd[8958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.92.157 user=root Jul 11 16:49:12 server5 sshd[7691]: Failed password for root from 195.133.64.173 port 41536 ssh2 Jul 11 16:35:43 server5 sshd[3640]: Failed password for root from 132.251.135.107 port 33252 ssh2 Jul 11 16:49:10 server5 sshd[7691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.133.64.173 user=root IP Addresses Blocked: 159.89.47.41 (US/United States/-) show less	Brute-Force
🇫🇷 Cuteminded	2026-07-11 19:53:42 (5 hours ago)	Blocked for probing SSH accounts	Brute-Force SSH
🇺🇸 Hydrated8853	2026-07-11 18:23:14 (6 hours ago)	2026-07-12T02:18:08.936126+08:00 qq sshd[307837]: Invalid user business from 120.52.92.157 port 1527 ... show more 2026-07-12T02:18:08.936126+08:00 qq sshd[307837]: Invalid user business from 120.52.92.157 port 1527 2026-07-12T02:18:08.963772+08:00 qq sshd[307837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.92.157 2026-07-12T02:18:11.365416+08:00 qq sshd[307837]: Failed password for invalid user business from 120.52.92.157 port 1527 ssh2 2026-07-12T02:23:04.531473+08:00 qq sshd[307847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.92.157 user=root 2026-07-12T02:23:06.905026+08:00 qq sshd[307847]: Failed password for root from 120.52.92.157 port 50401 ssh2 ... show less	Brute-Force SSH
🇨🇦 bmcg	2026-07-11 17:02:03 (8 hours ago)	2026-07-10 02:24:48 server sshd[82876]: Failed password for invalid user ubuntu from 120.52.92.157 p ... show more 2026-07-10 02:24:48 server sshd[82876]: Failed password for invalid user ubuntu from 120.52.92.157 port 8069 ssh2 show less	Brute-Force SSH
🇺🇸 anon333	2026-07-11 16:33:15 (8 hours ago)	Hacker syslog review 1783787595	Hacking
Anonymous	2026-07-11 15:52:13 (9 hours ago)	Jul 11 23:52:01 mail sshd[867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 t ... show more Jul 11 23:52:01 mail sshd[867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.92.157 Jul 11 23:52:02 mail sshd[867]: Failed password for invalid user user2 from 120.52.92.157 port 27118 ssh2 show less	Brute-Force SSH
🇫🇷 boulton972.ddns.net	2026-07-11 12:23:34 (12 hours ago)	Jul 11 14:16:20 m73p sshd[435361]: Failed password for invalid user jairo from 120.52.92.157 port 49 ... show more Jul 11 14:16:20 m73p sshd[435361]: Failed password for invalid user jairo from 120.52.92.157 port 49947 ssh2 Jul 11 14:22:00 m73p sshd[437866]: Invalid user forest from 120.52.92.157 port 14732 Jul 11 14:22:00 m73p sshd[437866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.92.157 Jul 11 14:22:02 m73p sshd[437866]: Failed password for invalid user forest from 120.52.92.157 port 14732 ssh2 Jul 11 14:23:34 m73p sshd[438576]: Invalid user dev from 120.52.92.157 port 42572 ... show less	Brute-Force SSH
🇺🇸 m2jest1c	2026-07-11 06:03:03 (19 hours ago)	Jul 11 06:03:03 instance1 sshd[3964775]: Invalid user info from 120.52.92.157 port 40377 ...	Brute-Force SSH
🇨🇭 SOC [GOLINE SA]	2026-07-11 05:37:26 (19 hours ago)	SSH Brute Force Attack === ATTACK === Type: SSH Authentication Attack \| Pattern: Multiple failed log ... show more SSH Brute Force Attack === ATTACK === Type: SSH Authentication Attack \| Pattern: Multiple failed login attempts === SOURCE === IP: 120.52.92.157 (IPv4) \| Country: China \| ISP: CU-CDC \| rDNS: None === TARGET === Host: lilys.ch \| Port: 22 \| Protocol: TCP === RESPONSE === Time: 2026-07-11 07:37:24 \| Action: Blocked show less	SSH Brute-Force
🇳🇱 wlt-blocker	2026-07-11 02:48:55 (22 hours ago)	Attempts to access SSH server with wrong credentials	SSH
🇱🇻 alliance	2026-07-11 02:02:21 (23 hours ago)	Jul 11 05:02:18 ***** sshd[3036967]: Invalid user nebula from 120.52.92.157 port 10983	Brute-Force SSH
🇧🇷 modscleo4	2026-07-11 02:01:25 (23 hours ago)	2026-07-10T23:01:25.081143-03:00 salada-de-fruta sshd[1444778]: Invalid user nebula from 120.52.92.1 ... show more 2026-07-10T23:01:25.081143-03:00 salada-de-fruta sshd[1444778]: Invalid user nebula from 120.52.92.157 port 4956 ... show less	Port Scan Brute-Force SSH
🇵🇱 MP.tv	2026-07-11 01:15:58 (1 day ago)	2026-07-11T03:08:45.791325+02:00 transfer-srv sshd[3284614]: Failed password for invalid user ubuntu ... show more 2026-07-11T03:08:45.791325+02:00 transfer-srv sshd[3284614]: Failed password for invalid user ubuntu from 120.52.92.157 port 61726 ssh2 2026-07-11T03:15:54.458904+02:00 transfer-srv sshd[3296667]: Connection from 120.52.92.157 port 64222 on 192.168.1.201 port 2221 rdomain "" 2026-07-11T03:15:56.0528 ... show less	Brute-Force SSH

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 202.29.228.248

🇮🇩 180.243.189.153

🇰🇷 115.91.48.142

🇺🇸 104.168.4.152

🇻🇳 103.200.23.154

🇳🇱 91.92.40.8

🇺🇸 64.207.225.55

🇺🇸 64.121.14.72

🇺🇸 47.77.227.171

🇨🇳 36.250.220.29

🇪🇸 185.73.172.122

🇻🇳 171.244.143.209

🇩🇪 167.235.34.151

🇺🇸 165.154.218.143

🇮🇩 157.15.67.253

🇧🇬 146.70.245.150

🇮🇳 106.222.218.89

🇧🇬 91.191.209.118

🇸🇪 84.217.118.194

🇺🇸 72.212.176.37