This IP address has been reported a total of
66
times from
52 distinct
sources.
120.52.92.35 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
Automated sensor: 3 SSH brute-force attempts over the last 24h (latest 2026-07-21T10:56Z). Usernames ...
show moreAutomated sensor: 3 SSH brute-force attempts over the last 24h (latest 2026-07-21T10:56Z). Usernames tried: root.
show less
Brute-Force
SSH
Anonymous
2026-07-21T10:06:15.723343+00:00 de-fra2-dns3 sshd[3492527]: Invalid user vpn from 120.52.92.35 port ...
show more2026-07-21T10:06:15.723343+00:00 de-fra2-dns3 sshd[3492527]: Invalid user vpn from 120.52.92.35 port 43325
2026-07-21T10:08:14.609317+00:00 de-fra2-dns3 sshd[3492547]: Invalid user gabriella from 120.52.92.35 port 65314
2026-07-21T10:09:10.987166+00:00 de-fra2-dns3 sshd[3492552]: Invalid user ari from 120.52.92.35 port 64173
...
show less
This IP address carried out 2 port scanning attempts on 20-07-2026. For more information or to repor ...
show moreThis IP address carried out 2 port scanning attempts on 20-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
2026-07-21T02:42:45.886526+02:00 pve-osd-102 sshd[4106003]: Disconnected from invalid user postgres ...
show more2026-07-21T02:42:45.886526+02:00 pve-osd-102 sshd[4106003]: Disconnected from invalid user postgres 120.52.92.35 port 32955 [preauth]
2026-07-21T02:46:08.054731+02:00 pve-osd-102 sshd[4106441]: Invalid user user2 from 120.52.92.35 port 43103
2026-07-21T02:46:08.056893+02:00 pve-osd-102 sshd[4106441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.92.35
2026-07-21T02:46:08.071374+02:00 pve-osd-102 sshd[4106441]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.92.35 user=user2
2026-07-21T02:46:10.350091+02:00 pve-osd-102 sshd[4106441]: Failed password for invalid user user2 from 120.52.92.35 port 43103 ssh2
2026-07-21T02:46:11.129734+02:00 pve-osd-102 sshd[4106441]: Disconnected from invalid user user2 120.52.92.35 port 43103 [preauth]
...
show less
2026-07-21T03:59:36.761837+12:00 dara sshd-session[66941]: Disconnected from invalid user yesung 120 ...
show more2026-07-21T03:59:36.761837+12:00 dara sshd-session[66941]: Disconnected from invalid user yesung 120.52.92.35 port 21689 [preauth]
2026-07-21T04:03:32.665457+12:00 dara sshd-session[66954]: Connection from 120.52.92.35 port 1641 on 135.181.182.173 port 22 rdomain ""
2026-07-21T04:03:33.390803+12:00 dara sshd-session[66954]: Connection closed by 120.52.92.35 port 1641 [preauth]
2026-07-21T04:05:12.523517+12:00 dara sshd-session[66958]: Connection from 120.52.92.35 port 51689 on 135.181.182.173 port 22 rdomain ""
2026-07-21T04:05:13.736692+12:00 dara sshd-session[66958]: Invalid user michael from 120.52.92.35 port 51689
...
show less
Brute-Force
SSH
Anonymous
(sshd) Failed SSH login from 120.52.92.35 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction ...
show more(sshd) Failed SSH login from 120.52.92.35 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 20 10:51:52 server5 sshd[21955]: Invalid user daniel from 120.52.92.35
Jul 20 10:51:52 server5 sshd[21955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.92.35
Jul 20 10:51:54 server5 sshd[21955]: Failed password for invalid user daniel from 120.52.92.35 port 45781 ssh2
Jul 20 11:10:02 server5 sshd[1527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.92.35 user=root
Jul 20 11:10:03 server5 sshd[1527]: Failed password for root from 120.52.92.35 port 1027 ssh2
show less
2026-07-20T17:00:57.247956+02:00 ezri sshd[827045]: Invalid user daniel from 120.52.92.35 port 6834
...
show more2026-07-20T17:00:57.247956+02:00 ezri sshd[827045]: Invalid user daniel from 120.52.92.35 port 6834
2026-07-20T17:00:57.503421+02:00 ezri sshd[827045]: Disconnected from invalid user daniel 120.52.92.35 port 6834 [preauth]
2026-07-20T17:05:28.499677+02:00 ezri sshd[827323]: Connection closed by 120.52.92.35 port 36502 [preauth]
...
show less
Brute-Force
SSH
Showing 1 to
15
of 66 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩