JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.92.38.249

120.92.38.249 was found in our database!

This IP was reported 11,900 times. Confidence of Abuse is 13%: ?

13%

ISP	Beijing Kingsoft Cloud Internet Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS59019
Domain Name	kingsoft.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.92.38.249

Whois 120.92.38.249

IP Abuse Reports for 120.92.38.249:

This IP address has been reported a total of 11,900 times from 1,397 distinct sources. 120.92.38.249 was first reported on December 11th 2020, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-06-05 19:21:37 (2 weeks ago)	ICS Labs identified 120.92.38.249 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Exploited Host
🇩🇪 ghostwarriors	2026-04-24 01:22:43 (1 month ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇫🇮 MindSolve	2026-04-24 01:05:24 (1 month ago)	Feb 7 03:01:16 sip sshd[29007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Feb 7 03:01:16 sip sshd[29007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.38.249 Feb 7 03:01:17 sip sshd[29007]: Failed password for invalid user gzuser from 120.92.38.249 port 63244 ssh2 Feb 7 03:15:37 sip sshd[372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.38.249 show less	Brute-Force SSH
🇩🇪 psauxit	2024-09-26 04:16:03 (1 year ago)	Fail2Ban - SSHD brute-force SSH server	SSH
🇹🇷 rtbh.com.tr	2024-09-25 20:54:18 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2024-09-24 20:54:20 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 eurows.net	2024-09-24 03:51:10 (1 year ago)	Sep 24 05:41:17 hydrogen sshd[1411831]: Invalid user admin from 120.92.38.249 port 25656 Sep 24 05:4 ... show more Sep 24 05:41:17 hydrogen sshd[1411831]: Invalid user admin from 120.92.38.249 port 25656 Sep 24 05:42:09 hydrogen sshd[1412246]: Invalid user elasticsearch from 120.92.38.249 port 40628 Sep 24 05:43:55 hydrogen sshd[1413126]: Invalid user admin from 120.92.38.249 port 6138 Sep 24 05:44:50 hydrogen sshd[1413403]: Invalid user bkp from 120.92.38.249 port 21230 Sep 24 05:51:10 hydrogen sshd[1416227]: Invalid user basesystem from 120.92.38.249 port 50068 ... show less	Brute-Force SSH
🇩🇪 eurows.net	2024-09-24 03:30:49 (1 year ago)	Sep 24 05:24:51 hydrogen sshd[1404544]: Invalid user nisec from 120.92.38.249 port 38604 Sep 24 05:2 ... show more Sep 24 05:24:51 hydrogen sshd[1404544]: Invalid user nisec from 120.92.38.249 port 38604 Sep 24 05:28:16 hydrogen sshd[1406059]: Invalid user david from 120.92.38.249 port 18780 Sep 24 05:29:06 hydrogen sshd[1406321]: Invalid user admin from 120.92.38.249 port 33748 Sep 24 05:29:58 hydrogen sshd[1406765]: Invalid user debian from 120.92.38.249 port 48714 Sep 24 05:30:49 hydrogen sshd[1407204]: Invalid user daniel from 120.92.38.249 port 63880 ... show less	Brute-Force SSH
Anonymous	2024-09-24 03:28:13 (1 year ago)	Sep 24 03:24:03 ubuntu sshd[296306]: Failed password for invalid user nisec from 120.92.38.249 port ... show more Sep 24 03:24:03 ubuntu sshd[296306]: Failed password for invalid user nisec from 120.92.38.249 port 19410 ssh2 Sep 24 03:24:03 ubuntu sshd[296306]: Disconnected from invalid user nisec 120.92.38.249 port 19410 [preauth] Sep 24 03:28:10 ubuntu sshd[296326]: Invalid user david from 120.92.38.249 port 8324 Sep 24 03:28:10 ubuntu sshd[296326]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.38.249 Sep 24 03:28:13 ubuntu sshd[296326]: Failed password for invalid user david from 120.92.38.249 port 8324 ssh2 ... show less	Brute-Force SSH
🇩🇪 manasiwibi	2024-09-24 03:08:47 (1 year ago)	2024-09-24T10:07:44.661932+07:00 vmi1457482.contaboserver.net sshd[2487711]: Invalid user ubuntu fro ... show more 2024-09-24T10:07:44.661932+07:00 vmi1457482.contaboserver.net sshd[2487711]: Invalid user ubuntu from 120.92.38.249 port 22016 2024-09-24T10:08:46.877991+07:00 vmi1457482.contaboserver.net sshd[2488233]: Invalid user support from 120.92.38.249 port 39974 2024-09-24T10:08:46.877991+07:00 vmi1457482.contaboserver.net sshd[2488233]: Invalid user support from 120.92.38.249 port 39974 ... show less	Brute-Force
🇩🇪 manasiwibi	2024-09-24 02:32:32 (1 year ago)	2024-09-24T09:25:55.658971+07:00 vmi1457482.contaboserver.net sshd[2467210]: Invalid user thomas fro ... show more 2024-09-24T09:25:55.658971+07:00 vmi1457482.contaboserver.net sshd[2467210]: Invalid user thomas from 120.92.38.249 port 28036 2024-09-24T09:27:47.942829+07:00 vmi1457482.contaboserver.net sshd[2468126]: Invalid user steve from 120.92.38.249 port 56854 2024-09-24T09:30:38.917040+07:00 vmi1457482.contaboserver.net sshd[2469551]: Invalid user sysadmin from 120.92.38.249 port 46208 2024-09-24T09:31:33.836877+07:00 vmi1457482.contaboserver.net sshd[2470017]: Invalid user svn from 120.92.38.249 port 63824 2024-09-24T09:32:31.442840+07:00 vmi1457482.contaboserver.net sshd[2470487]: Invalid user sysadmin from 120.92.38.249 port 17260 ... show less	Brute-Force
🇺🇸 Phish.gg	2024-09-24 01:41:19 (1 year ago)	Sep 24 01:36:59 gx1 sshd[1454371]: Invalid user user from 120.92.38.249 port 41776 Sep 24 01:37:53 g ... show more Sep 24 01:36:59 gx1 sshd[1454371]: Invalid user user from 120.92.38.249 port 41776 Sep 24 01:37:53 gx1 sshd[1454378]: Invalid user git from 120.92.38.249 port 57606 Sep 24 01:41:18 gx1 sshd[1454415]: Invalid user sysadmin from 120.92.38.249 port 55336 ... show less	Brute-Force SSH
🇩🇪 Lars	2024-09-24 00:15:17 (1 year ago)	Sep 24 02:10:32 h2996638 sshd[913510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show more Sep 24 02:10:32 h2996638 sshd[913510]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.38.249 user=root Sep 24 02:10:34 h2996638 sshd[913510]: Failed password for root from 120.92.38.249 port 29484 ssh2 Sep 24 02:14:39 h2996638 sshd[913724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.38.249 user=root Sep 24 02:14:41 h2996638 sshd[913724]: Failed password for root from 120.92.38.249 port 17000 ssh2 Sep 24 02:15:17 h2996638 sshd[913776]: Invalid user admin from 120.92.38.249 port 28160 ... show less	Brute-Force SSH
🇫🇷 NXO WAN	2024-09-23 23:05:07 (1 year ago)	SSH login attempts with invalid user	Brute-Force SSH
🇹🇷 rtbh.com.tr	2024-09-23 20:54:23 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force

Showing 1 to 15 of 11900 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 2a02:26f0:8d00:68a::1e80

🇺🇸 207.90.244.10

🇺🇸 205.210.31.95

🇧🇪 198.235.24.183

🇺🇸 165.154.172.36

🇺🇸 162.251.122.120

🇺🇸 66.132.153.19

🇫🇷 51.68.236.92

🇩🇪 46.101.201.146

🇳🇱 45.156.128.150

🇺🇸 40.119.41.182

🇨🇦 20.104.244.165

🇧🇷 4.201.96.144

🇰🇷 222.109.65.231

🇬🇧 195.140.214.25

🇺🇸 185.251.19.202

🇮🇩 182.8.182.61

🇧🇷 179.189.68.116

🇺🇸 172.234.217.192

🇺🇸 162.158.158.153