This IP address has been reported a total of
4,691
times from
1,054 distinct
sources.
120.48.123.76 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-04T09:35:22.068422+08:00 self-dedi-wyse-5070-tna sshd-session[3626368]: Invalid user sd from ...
show more2026-06-04T09:35:22.068422+08:00 self-dedi-wyse-5070-tna sshd-session[3626368]: Invalid user sd from 120.48.123.76 port 36988
2026-06-04T09:37:45.462817+08:00 self-dedi-wyse-5070-tna sshd-session[3626672]: Invalid user zenith from 120.48.123.76 port 60350
2026-06-04T09:38:45.220593+08:00 self-dedi-wyse-5070-tna sshd-session[3626787]: Invalid user centos from 120.48.123.76 port 42158
...
show less
2026-06-03T19:26:20.388934+02:00 jadzia sshd-session[139219]: Connection closed by 120.48.123.76 por ...
show more2026-06-03T19:26:20.388934+02:00 jadzia sshd-session[139219]: Connection closed by 120.48.123.76 port 37048 [preauth]
2026-06-03T19:28:14.704199+02:00 jadzia sshd-session[139377]: Connection closed by 120.48.123.76 port 58162 [preauth]
2026-06-03T19:31:13.849091+02:00 jadzia sshd-session[139590]: Invalid user alexis from 120.48.123.76 port 33414
2026-06-03T19:31:14.137410+02:00 jadzia sshd-session[139590]: Disconnected from invalid user alexis 120.48.123.76 port 33414 [preauth]
2026-06-03T19:34:23.440545+02:00 jadzia sshd-session[139797]: Connection closed by 120.48.123.76 port 36862 [preauth]
...
show less
2026-06-03T15:42:46.726535+08:00 us21.cdn.420422709.xyz sshd-session[40010]: pam_unix(sshd:auth): au ...
show more2026-06-03T15:42:46.726535+08:00 us21.cdn.420422709.xyz sshd-session[40010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.123.76
2026-06-03T15:42:48.430410+08:00 us21.cdn.420422709.xyz sshd-session[40010]: Failed password for invalid user unreal from 120.48.123.76 port 34772 ssh2
2026-06-03T15:59:40.476516+08:00 us21.cdn.420422709.xyz sshd-session[40126]: Invalid user es from 120.48.123.76 port 45942
...
show less
Brute-Force
SSH
Anonymous
Honeypot hit: Brute-force attack detected on 22/SSH
• Credentials: root:Dev@123, jenny1:123456, sftp ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Credentials: root:Dev@123, jenny1:123456, sftpuser:password
• Number of login attempts: 3
• Client: SSH-2.0-libssh_0.11.1
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-03T04:39:21Z and 2026-06-0 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-03T04:39:21Z and 2026-06-03T04:39:37Z
show less
Brute-Force
SSH
Anonymous
2026-06-03T03:40:44.903207+00:00 de-fsn1-it1 sshd[2225985]: Invalid user bitrix from 120.48.123.76 p ...
show more2026-06-03T03:40:44.903207+00:00 de-fsn1-it1 sshd[2225985]: Invalid user bitrix from 120.48.123.76 port 56654
2026-06-03T03:50:24.979835+00:00 de-fsn1-it1 sshd[2226159]: Invalid user dd from 120.48.123.76 port 40586
2026-06-03T03:54:38.370767+00:00 de-fsn1-it1 sshd[2226684]: Invalid user ionadmin from 120.48.123.76 port 54628
...
show less