This IP address has been reported a total of
139
times from
108 distinct
sources.
120.52.92.90 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-23T02:09:02.531452+02:00 guestgw-router01.remscheid.de sshd-session[4103307]: Connection clo ...
show more2026-07-23T02:09:02.531452+02:00 guestgw-router01.remscheid.de sshd-session[4103307]: Connection closed by 120.52.92.90 port 16899 [preauth]
2026-07-23T02:14:44.625658+02:00 guestgw-router01.remscheid.de sshd-session[4104175]: Disconnected from authenticating user root 120.52.92.90 port 25123 [preauth]
2026-07-23T02:17:48.783310+02:00 guestgw-router01.remscheid.de sshd-session[4104645]: Connection closed by 120.52.92.90 port 42423 [preauth]
2026-07-23T02:19:40.953157+02:00 guestgw-router01.remscheid.de sshd-session[4104933]: Invalid user meow from 120.52.92.90 port 2792
2026-07-23T02:19:41.114303+02:00 guestgw-router01.remscheid.de sshd-session[4104933]: Disconnected from invalid user meow 120.52.92.90 port 2792 [preauth]
show less
SSH brute force — 3 tentatives, user: user-backup
2026-07-22T11:38:50.584793+02:00 vps-de5e3fcc sshd ...
show moreSSH brute force — 3 tentatives, user: user-backup
2026-07-22T11:38:50.584793+02:00 vps-de5e3fcc sshd-session[1004378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.92.90
2026-07-22T11:38:52.906240+02:00 vps-de5e3fcc sshd-session[1004378]: Failed password for invalid user user-backup from 120.52.92.90 port 1350 ssh2
2026-07-22T11:40:05.511555+02:00 vps-de5e3fcc sshd-session[1004464]: Invalid user anil from 120.52.92.90 port 10077
show less
2026-07-22T11:01:23.641390+02:00 ns3006402 sshd[3615827]: Failed password for invalid user webuser f ...
show more2026-07-22T11:01:23.641390+02:00 ns3006402 sshd[3615827]: Failed password for invalid user webuser from 120.52.92.90 port 47954 ssh2
2026-07-22T11:24:12.546419+02:00 ns3006402 sshd[3619124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.92.90 user=root
2026-07-22T11:24:13.664278+02:00 ns3006402 sshd[3619124]: Failed password for root from 120.52.92.90 port 17012 ssh2
...
show less
2026-07-22T15:06:27.188453 redacted sshd[3949375]: pam_unix(sshd:auth): authentication failure; logn ...
show more2026-07-22T15:06:27.188453 redacted sshd[3949375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.92.90
2026-07-22T15:06:28.999558 redacted sshd[3949375]: Failed password for invalid user shiyi from 120.52.92.90 port 40570 ssh2
2026-07-22T15:09:52.168631 redacted sshd[3949392]: Invalid user ljd from 120.52.92.90 port 47551
show less
Jul 22 03:25:13 mx2 sshd[1114543]: Invalid user tym from 120.52.92.90 port 29916
Jul 22 03:25:13 mx2 ...
show moreJul 22 03:25:13 mx2 sshd[1114543]: Invalid user tym from 120.52.92.90 port 29916
Jul 22 03:25:13 mx2 sshd[1114543]: Disconnected from invalid user tym 120.52.92.90 port 29916 [preauth]
Jul 22 03:42:19 mx2 sshd[1116260]: Connection closed by 120.52.92.90 port 63882 [preauth]
Jul 22 03:43:34 mx2 sshd[1116371]: Connection closed by 120.52.92.90 port 12215 [preauth]
Jul 22 03:53:56 mx2 sshd[1117375]: Disconnected from authenticating user root 120.52.92.90 port 36818 [preauth]
...
show less
Malicious activity from 120.52.92.90 detected by FDC honeypots. Categories: 14,18,22. 35 events in l ...
show moreMalicious activity from 120.52.92.90 detected by FDC honeypots. Categories: 14,18,22. 35 events in last 24h.
show less
Jul 22 06:28:08 meow auth.info sshd-session[21620]: Invalid user mark from 120.52.92.90 port 25285
J ...
show moreJul 22 06:28:08 meow auth.info sshd-session[21620]: Invalid user mark from 120.52.92.90 port 25285
Jul 22 06:28:08 meow auth.info sshd-session[21620]: Failed password for invalid user mark from 120.52.92.90 port 25285 ssh2
Jul 22 06:28:08 meow auth.info sshd-session[21620]: Disconnected from invalid user mark 120.52.92.90 port 25285 [preauth]
Jul 22 06:29:28 meow auth.info sshd-session[23562]: Invalid user deploy from 120.52.92.90 port 42709
Jul 22 06:29:28 meow auth.info sshd-session[23562]: Failed password for invalid user deploy from 120.52.92.90 port 42709 ssh2
...
show less
2026-07-21T23:09:10.172030+02:00 vmd172806 sshd[1055914]: pam_unix(sshd:auth): authentication failur ...
show more2026-07-21T23:09:10.172030+02:00 vmd172806 sshd[1055914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.92.90
2026-07-21T23:09:12.188236+02:00 vmd172806 sshd[1055914]: Failed password for invalid user vishal from 120.52.92.90 port 1647 ssh2
2026-07-21T23:56:12.975729+02:00 vmd172806 sshd[1067657]: Invalid user sandra from 120.52.92.90 port 16943
...
show less
Brute-Force
SSH
FTP Brute-Force
Showing 1 to
15
of 139 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩