This IP address has been reported a total of
696
times from
350 distinct
sources.
120.48.14.39 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-02T12:10:12.257393fra01-de-pop.as202427.net sshd[1435524]: User root from 120.48.14.39 not a ...
show more2026-06-02T12:10:12.257393fra01-de-pop.as202427.net sshd[1435524]: User root from 120.48.14.39 not allowed because not listed in AllowUsers
2026-06-02T12:11:15.109892fra01-de-pop.as202427.net sshd[1435725]: User root from 120.48.14.39 not allowed because not listed in AllowUsers
2026-06-02T12:11:27.761244fra01-de-pop.as202427.net sshd[1435733]: User root from 120.48.14.39 not allowed because not listed in AllowUsers
...
show less
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS ...
show moreVerified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=22 | HITS=2 | IPSET=ADD | FIRST=2026-06-02 09:43:36 | LAST=2026-06-02 09:43:37. Last seen 2026-06-02 09:43:37.
show less
2026-06-02T07:05:02.912304+02:00 endernation sshd[3916689]: Failed password for root from 120.48.14. ...
show more2026-06-02T07:05:02.912304+02:00 endernation sshd[3916689]: Failed password for root from 120.48.14.39 port 35130 ssh2
2026-06-02T07:05:59.208403+02:00 endernation sshd[3917090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.14.39 user=root
2026-06-02T07:06:01.314203+02:00 endernation sshd[3917090]: Failed password for root from 120.48.14.39 port 39270 ssh2
...
show less
2026-06-02T02:50:27.157114+02:00 axisverse sshd-session[3446654]: Invalid user ubuntu from 120.48.14 ...
show more2026-06-02T02:50:27.157114+02:00 axisverse sshd-session[3446654]: Invalid user ubuntu from 120.48.14.39 port 45394
2026-06-02T02:50:31.947999+02:00 axisverse sshd-session[3446900]: Invalid user ubuntu from 120.48.14.39 port 42632
2026-06-02T02:50:36.637347+02:00 axisverse sshd-session[3447028]: Invalid user ubuntu from 120.48.14.39 port 42636
...
show less
Jun 1 22:36:40 proxy sshd[869492]: User root from 120.48.14.39 not allowed because not listed in Al ...
show moreJun 1 22:36:40 proxy sshd[869492]: User root from 120.48.14.39 not allowed because not listed in AllowUsers
Jun 1 22:36:46 proxy sshd[869497]: User root from 120.48.14.39 not allowed because not listed in AllowUsers
Jun 1 22:36:53 proxy sshd[869499]: User root from 120.48.14.39 not allowed because not listed in AllowUsers
...
show less
2026-06-01T19:46:49.517959+00:00 [SERVER] sshd-session[1693626]: Connection closed by authenticating ...
show more2026-06-01T19:46:49.517959+00:00 [SERVER] sshd-session[1693626]: Connection closed by authenticating user [USER] 120.48.14.39 port 39884 [preauth]
2026-06-01T19:53:05.469722+00:00 [SERVER] sshd-session[1693963]: Connection closed by authenticating user [USER] 120.48.14.39 port 52688 [preauth]
2026-06-01T19:53:10.406984+00:00 [SERVER] sshd-session[1693978]: Connection closed by authenticating user [USER] 120.48.14.39 port 37766 [preauth]
show less
Report 2422661 with IP 3346715 for SSH brute-force attack by source 3464886 via ssh-honeypot/0.2.0+h ...
show moreReport 2422661 with IP 3346715 for SSH brute-force attack by source 3464886 via ssh-honeypot/0.2.0+http
show less
Brute-Force
SSH
Showing 31 to
45
of 696 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩