This IP address has been reported a total of
412
times from
290 distinct
sources.
120.48.124.81 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Apr 14 22:00:56 sterling sshd[337035]: Failed password for root from 120.48.124.81 port 36714 ssh2
A ...
show moreApr 14 22:00:56 sterling sshd[337035]: Failed password for root from 120.48.124.81 port 36714 ssh2
Apr 14 22:01:01 sterling sshd[337048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.124.81 user=root
Apr 14 22:01:03 sterling sshd[337048]: Failed password for root from 120.48.124.81 port 50746 ssh2
...
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
2026-04-15T02:09:08.897525+01:00 naomi sshd[315878]: Connection closed by authenticating user root 1 ...
show more2026-04-15T02:09:08.897525+01:00 naomi sshd[315878]: Connection closed by authenticating user root 120.48.124.81 port 50670 [preauth]
2026-04-15T02:09:10.856723+01:00 naomi sshd[315880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.124.81 user=root
2026-04-15T02:09:12.318476+01:00 naomi sshd[315880]: Failed password for root from 120.48.124.81 port 40220 ssh2
...
show less
2026-04-14T17:54:18.063795Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.48.124.81:4932 ...
show more2026-04-14T17:54:18.063795Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.48.124.81:49322 (158.69.22.11:2222) [session: 89d86b257351]
2026-04-14T17:54:18.586625Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.48.124.81:49336 (158.69.22.11:2222) [session: fc0b55d1a71c]
...
show less
Brute-Force
SSH
Showing 406 to
412
of 412 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩