This IP address has been reported a total of
4
times from
4 distinct
sources.
120.53.120.28 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-31T09:40:55.040293+00:00 news2.dwmp.it sshd[2534084]: Failed password for root from 120.53.1 ...
show more2026-07-31T09:40:55.040293+00:00 news2.dwmp.it sshd[2534084]: Failed password for root from 120.53.120.28 port 46058 ssh2
2026-07-31T09:40:59.361249+00:00 news2.dwmp.it sshd[2534084]: Failed password for root from 120.53.120.28 port 46058 ssh2
2026-07-31T09:41:01.593141+00:00 news2.dwmp.it sshd[2534084]: Failed password for root from 120.53.120.28 port 46058 ssh2
...
show less
2026-07-31T02:57:13.540755+00:00 NBG-VS01-WebServer sshd-session[1803468]: Failed password for root ...
show more2026-07-31T02:57:13.540755+00:00 NBG-VS01-WebServer sshd-session[1803468]: Failed password for root from 120.53.120.28 port 39748 ssh2
2026-07-31T02:57:16.349010+00:00 NBG-VS01-WebServer sshd-session[1803468]: Failed password for root from 120.53.120.28 port 39748 ssh2
2026-07-31T02:57:19.892115+00:00 NBG-VS01-WebServer sshd-session[1803468]: Failed password for root from 120.53.120.28 port 39748 ssh2
...
show less
2026-07-30T20:15:47.338475+02:00 Linux12 sshd-session[4022615]: Failed password for root from 120.53 ...
show more2026-07-30T20:15:47.338475+02:00 Linux12 sshd-session[4022615]: Failed password for root from 120.53.120.28 port 53290 ssh2
2026-07-30T20:15:51.466412+02:00 Linux12 sshd-session[4022615]: Failed password for root from 120.53.120.28 port 53290 ssh2
2026-07-30T20:15:55.752395+02:00 Linux12 sshd-session[4022615]: Failed password for root from 120.53.120.28 port 53290 ssh2
2026-07-30T20:15:59.938405+02:00 Linux12 sshd-session[4022615]: Failed password for root from 120.53.120.28 port 53290 ssh2
2026-07-30T20:16:01.718912+02:00 Linux12 sshd-session[4022615]: Disconnecting authenticating user root 120.53.120.28 port 53290: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth]
2026-07-30T20:16:02.994847+02:00 Linux12 sshd-session[4023972]: Invalid user test from 120.53.120.28 port 53796
2026-07-30T20:16:02.997233+02:00 Linux12 sshd-session[4023972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.53.120.
...
show less
Brute-Force
SSH
Showing 1 to
4
of 4 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩