JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.52.92.99

120.52.92.99 was found in our database!

This IP was reported 1,763 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINA UNICOM CLOUD DATA COMPANY LIMITED
Usage Type	Fixed Line ISP
ASN	AS133119
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.52.92.99

Whois 120.52.92.99

IP Abuse Reports for 120.52.92.99:

This IP address has been reported a total of 1,763 times from 516 distinct sources. 120.52.92.99 was first reported on July 9th 2026, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 AdrianT	2026-08-20 06:58:36 (18 hours ago)	SSH brute force	Brute-Force SSH
🇧🇷 helix	2026-08-19 01:13:26 (2 days ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇩🇪 iamimmanuelraj	2026-08-18 19:20:37 (2 days ago)	Fail2ban SSH Bruteforce - Port = 22 - Failures = 5 - Time = 1785606914	Brute-Force SSH
🇯🇵 Summer Joe	2026-08-15 06:14:57 (5 days ago)	Automated report: port-scan (cat14) / SSH brute-force (cat18,22) against VPS japan2, detected via UF ... show more Automated report: port-scan (cat14) / SSH brute-force (cat18,22) against VPS japan2, detected via UFW BLOCK + fail2ban + lastb. show less	Brute-Force SSH
🇧🇷 helix	2026-08-13 20:44:27 (1 week ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇧🇷 helix	2026-08-12 06:21:34 (1 week ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇮🇳 evicky2002	2026-08-12 06:00:03 (1 week ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 Bech0r	2026-08-11 06:13:28 (1 week ago)	Fail2ban sshd: 2026-08-11T06:07:39.757194+00:00 siem-test sshd[2681169]: pam_unix(sshd:auth): authen ... show more Fail2ban sshd: 2026-08-11T06:07:39.757194+00:00 siem-test sshd[2681169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.92.99 2026-08-11T06:07:42.205364+00:00 siem-test sshd[2681169]: Failed password for invalid user nia from 120.52.92.99 port 51871 ssh2 2026-08-11T06:10:34.720131+00:00 siem-test sshd[2681364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.92.99 user=root 2026-08-11T06:10:36.526364+00:00 siem-tes show less	Brute-Force SSH
🇺🇸 Clarkcj	2026-08-11 06:07:09 (1 week ago)	2026-08-11T02:04:18.257861-04:00 ns1006901 sshd-session[131335]: Disconnected from authenticating us ... show more 2026-08-11T02:04:18.257861-04:00 ns1006901 sshd-session[131335]: Disconnected from authenticating user root 120.52.92.99 port 26957 [preauth] 2026-08-11T02:07:08.701907-04:00 ns1006901 sshd-session[131538]: Disconnected from authenticating user root 120.52.92.99 port 45380 [preauth] show less	Brute-Force SSH
🇫🇷 John Doe	2026-08-11 05:12:39 (1 week ago)	$f2bV_matches	Brute-Force SSH
🇩🇪 Bech0r	2026-08-11 05:04:16 (1 week ago)	Fail2ban sshd: 2026-08-11T05:01:13.815273+00:00 siem-test sshd[2677037]: pam_unix(sshd:auth): authen ... show more Fail2ban sshd: 2026-08-11T05:01:13.815273+00:00 siem-test sshd[2677037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.92.99 user=root 2026-08-11T05:01:16.058138+00:00 siem-test sshd[2677037]: Failed password for root from 120.52.92.99 port 59651 ssh2 2026-08-11T05:04:13.639102+00:00 siem-test sshd[2677218]: Invalid user jay from 120.52.92.99 port 32091 2026-08-11T05:04:13.645333+00:00 siem-test sshd[2677218]: pam_unix(sshd:auth): authentication failure; lognam show less	Brute-Force SSH
🇺🇸 Clarkcj	2026-08-11 05:03:40 (1 week ago)	2026-08-11T01:00:20.110093-04:00 ns1006901 sshd-session[125660]: Invalid user cad from 120.52.92.99 ... show more 2026-08-11T01:00:20.110093-04:00 ns1006901 sshd-session[125660]: Invalid user cad from 120.52.92.99 port 30031 2026-08-11T01:00:20.326125-04:00 ns1006901 sshd-session[125660]: Disconnected from invalid user cad 120.52.92.99 port 30031 [preauth] 2026-08-11T01:03:40.354732-04:00 ns1006901 sshd-session[125913]: Disconnected from authenticating user root 120.52.92.99 port 27990 [preauth] show less	Brute-Force SSH
🇺🇸 markawes	2026-08-11 05:03:10 (1 week ago)	[EmExpress] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evide ... show more [EmExpress] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence: Aug 11 05:58:50 emexpress sshd[1838104]: Failed password for invalid user cad from 120.52.92.99 port 31505 ssh2 Aug 11 06:03:07 emexpress sshd[1838209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.52.92.99 user=root Aug 11 06:03:09 emexpress sshd[1838209]: Failed password for root from 120.52.92.99 port 64121 ssh2 show less	Brute-Force SSH
🇨🇦 hpg	2026-08-11 04:32:08 (1 week ago)	44 invalid SSH login attempts from 120.52.92.99 in the last 2.2 hours	Brute-Force SSH
Anonymous	2026-08-11 03:35:15 (1 week ago)	SSH brute force attempt. User: eren, Pass: [REDACTED]	Brute-Force SSH

Showing 1 to 15 of 1763 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇺 197.227.8.186

🇺🇸 91.230.168.50

🇩🇪 213.209.159.228

🇳🇱 193.29.139.132

🇨🇳 192.140.175.158

🇦🇷 190.12.104.147

🇲🇽 189.217.96.223

🇺🇦 176.105.198.78

🇺🇸 168.62.48.100

🇧🇴 166.114.173.210

🇺🇸 162.216.150.196

🇫🇮 147.185.133.235

🇨🇳 110.166.76.195

🇪🇸 94.73.44.52

🇺🇸 66.228.47.200

🇺🇸 34.228.104.231

🇵🇱 2.26.148.64

🇨🇳 223.104.83.99

🇺🇸 216.244.81.2

🇨🇱 201.223.44.26