This IP address has been reported a total of
44
times from
34 distinct
sources.
120.157.199.149 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
2026-09-12T10:55:36.907596+00:00 thecount sshd[173607]: Invalid user a from 120.157.199.149 port 447 ...
show more2026-09-12T10:55:36.907596+00:00 thecount sshd[173607]: Invalid user a from 120.157.199.149 port 44772
...
show less
2026-09-11T14:37:08.788328+00:00 bot3 sshd-session[197268]: pam_unix(sshd:auth): authentication fail ...
show more2026-09-11T14:37:08.788328+00:00 bot3 sshd-session[197268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.157.199.149
2026-09-11T14:37:10.638762+00:00 bot3 sshd-session[197268]: Failed password for invalid user a from 120.157.199.149 port 42738 ssh2
2026-09-11T14:37:12.426503+00:00 bot3 sshd-session[197270]: Invalid user ubnt from 120.157.199.149 port 45590
...
show less
Blocked by UFW on f2VPS [22/tcp]
Source Port: 47792
TTL: 45
Packet Length: 60
TOS: 0x10
Analyzed by ...
show moreBlocked by UFW on f2VPS [22/tcp]
Source Port: 47792
TTL: 45
Packet Length: 60
TOS: 0x10
Analyzed by https://ip.wiredalter.com
show less
SSH Brute force: 34 attempts were recorded from 120.157.199.149
2026-09-10T11:05:27+02:00 Invalid us ...
show moreSSH Brute force: 34 attempts were recorded from 120.157.199.149
2026-09-10T11:05:27+02:00 Invalid user a from 120.157.199.149 port 34606
2026-09-10T11:05:41+02:00 Invalid user ubnt from 120.157.199.149 port 50918
2026-09-10T11:05:58+02:00 Connection closed by authenticating user root 120.157.199.149 port 51738 [preauth]
2026-09-10T11:06:12+02:00 Connection closed by authenticating user root 120.157.199.149 port 43992 [preauth]
2026-09-10T11:06:22+02:00 Invalid user orangepi from 120.157.199.149 port 46110
2026-09-10T11:06:34+02:00 Invalid user support from 120.157.199.149 port 49902
2026-09-10T11:06:49+02:00 Connection closed by authenticating user root 120.157.199.149 port 56180 [preauth]
2026-09-10T11:07:04+02:00 Connection closed by authenticating user root 120.157.199.149 port 32904 [preauth]
2026-09-10T11:07:19+02:00 Connection closed by authenticating user root 120.157.199.149 port
show less
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS ...
show moreVerified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=22 | HITS=2 | IPSET=ADD | FIRST=2026-09-10 08:51:25 | LAST=2026-09-10 08:51:26. Last seen 2026-09-10 08:51:26.
show less
2026-09-09T22:18:36.482773+00:00 hel.updn.io sshd[1505949]: Invalid user ubnt from 120.157.199.149 p ...
show more2026-09-09T22:18:36.482773+00:00 hel.updn.io sshd[1505949]: Invalid user ubnt from 120.157.199.149 port 34130
2026-09-09T22:18:36.927239+00:00 hel.updn.io sshd[1505949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.157.199.149
2026-09-09T22:18:38.955015+00:00 hel.updn.io sshd[1505949]: Failed password for invalid user ubnt from 120.157.199.149 port 34130 ssh2
2026-09-09T22:18:44.836242+00:00 hel.updn.io sshd[1506702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.157.199.149 user=root
2026-09-09T22:18:46.629132+00:00 hel.updn.io sshd[1506702]: Failed password for root from 120.157.199.149 port 34136 ssh2
...
show less
Brute-Force
SSH
Anonymous
denied SSH access attempt. destination port 22.
Port Scan
Brute-Force
SSH
Anonymous
denied traffic to a honeypot network. destination port 22.
2024-12-31T05:46:06.416750mailcow sshd[2821892]: Failed password for invalid user a from 120.157.199 ...
show more2024-12-31T05:46:06.416750mailcow sshd[2821892]: Failed password for invalid user a from 120.157.199.149 port 51306 ssh2
2024-12-31T05:46:26.350112mailcow sshd[2822124]: Invalid user ubnt from 120.157.199.149 port 52362
2024-12-31T05:46:26.843403mailcow sshd[2822124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.157.199.149
2024-12-31T05:46:28.994145mailcow sshd[2822124]: Failed password for invalid user ubnt from 120.157.199.149 port 52362 ssh2
...
show less
2024-12-31T01:33:52.979455+02:00 beammp sshd[1619955]: Invalid user ubnt from 120.157.199.149 port 5 ...
show more2024-12-31T01:33:52.979455+02:00 beammp sshd[1619955]: Invalid user ubnt from 120.157.199.149 port 50416
2024-12-31T01:33:53.429003+02:00 beammp sshd[1619955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.157.199.149
2024-12-31T01:33:55.903429+02:00 beammp sshd[1619955]: Failed password for invalid user ubnt from 120.157.199.149 port 50416 ssh2
2024-12-31T01:34:13.571212+02:00 beammp sshd[1619959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.157.199.149 user=root
2024-12-31T01:34:15.458494+02:00 beammp sshd[1619959]: Failed password for root from 120.157.199.149 port 43798 ssh2
...
show less
[rede-44-49] (sshd) Failed SSH login from 120.157.199.149 (AU/Australia/-): 5 in the last 3600 secs; ...
show more[rede-44-49] (sshd) Failed SSH login from 120.157.199.149 (AU/Australia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Dec 30 17:20:53 sshd[18883]: Did not receive identification string from 120.157.199.149 port 46364
Dec 30 17:59:36 sshd[19755]: Invalid user [USERNAME] from 120.157.199.149 port 44218
Dec 30 17:59:39 sshd[19755]: Failed password for invalid user [USERNAME] from 120.157.199.149 port 44218 ssh2
Dec 30 17:59:45 sshd[19761]: Invalid user [USERNAME] from 120.157.199.149 port 36134
Dec 30 17:59:47 sshd[19761]: Failed password for invalid user [USERNAME] from 120.157.199.149 port 36134 ssh2
show less
Port Scan
Showing 1 to
15
of 44 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩