This IP address has been reported a total of
309
times from
211 distinct
sources.
120.48.14.72 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[Fail2Ban]: Jail sshd triggered 3 time(s) for 120.48.14.72.
May 31 16:31:09 - sshd[3244382]: Disconn ...
show more[Fail2Ban]: Jail sshd triggered 3 time(s) for 120.48.14.72.
May 31 16:31:09 - sshd[3244382]: Disconnected from authenticating user root 120.48.14.72 port 32878 [preauth]
May 31 16:42:59 - sshd[3246164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.14.72 user=root
May 31 16:43:01 - sshd[3246164]: Failed password for root from 120.48.14.72 port 59714 ssh2
...
show less
17 hits seen on 2026-05-31, ports 22 (SSH) on a honeypot from www.toce.ch
SSH
Anonymous
May 31 10:40:57 f2b auth.info sshd[5090]: Invalid user tt from 120.48.14.72 port 38064
May 31 10:40: ...
show moreMay 31 10:40:57 f2b auth.info sshd[5090]: Invalid user tt from 120.48.14.72 port 38064
May 31 10:40:57 f2b auth.info sshd[5090]: Failed password for invalid user tt from 120.48.14.72 port 38064 ssh2
May 31 10:40:57 f2b auth.info sshd[5090]: Disconnected from invalid user tt 120.48.14.72 port 38064 [preauth]
...
show less
2026-05-31T16:13:47.046762+08:00 CVM24121 sshd[2965888]: pam_unix(sshd:auth): authentication failure ...
show more2026-05-31T16:13:47.046762+08:00 CVM24121 sshd[2965888]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.14.72
2026-05-31T16:13:48.956264+08:00 CVM24121 sshd[2965888]: Failed password for invalid user syncuser from 120.48.14.72 port 49380 ssh2
2026-05-31T16:21:15.542735+08:00 CVM24121 sshd[2966792]: Invalid user newuser from 120.48.14.72 port 60706
...
show less
Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security too ...
show moreFail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security tooling. Technical log details and local server identifiers intentionally omitted for privacy.
show less
May 31 05:58:03 plsk sshd[412950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ...
show moreMay 31 05:58:03 plsk sshd[412950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.14.72 user=root
May 31 05:58:05 plsk sshd[412950]: Failed password for root from 120.48.14.72 port 43040 ssh2
May 31 05:59:07 plsk sshd[413050]: Invalid user multi from 120.48.14.72 port 53226
May 31 05:59:07 plsk sshd[413050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.14.72
May 31 05:59:10 plsk sshd[413050]: Failed password for invalid user multi from 120.48.14.72 port 53226 ssh2
...
show less
May 31 01:29:03 stn7875 sshd[15892]: Invalid user appuser from 120.48.14.72 port 37836
May 31 01:46: ...
show moreMay 31 01:29:03 stn7875 sshd[15892]: Invalid user appuser from 120.48.14.72 port 37836
May 31 01:46:25 stn7875 sshd[18108]: Invalid user testuser from 120.48.14.72 port 40634
...
show less
(sshd) Failed SSH login from 120.48.14.72 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction ...
show more(sshd) Failed SSH login from 120.48.14.72 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 31 03:11:00 da057 sshd[4177782]: Invalid user soporte from 120.48.14.72 port 42248
May 31 03:19:49 da057 sshd[4188613]: Invalid user devops from 120.48.14.72 port 36868
May 31 03:20:37 da057 sshd[4190698]: Invalid user aditya from 120.48.14.72 port 44482
May 31 03:21:54 da057 sshd[4191742]: Invalid user docker from 120.48.14.72 port 59676
May 31 03:23:16 da057 sshd[4192989]: Invalid user ts3 from 120.48.14.72 port 46664
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-30T20:58:23Z and 2026-05-3 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-30T20:58:23Z and 2026-05-30T22:46:52Z
show less
[mirai-detector honeypot] Inbound attack against our honeypot on tcp/2222 (ssh).
Family fingerprint: ...
show more[mirai-detector honeypot] Inbound attack against our honeypot on tcp/2222 (ssh).
Family fingerprint: ssh-bruteforce
Commands captured:
$ SSH-2.0-libssh_0.9.6
show less
DDoS Attack
Anonymous
May 30 20:15:25 sftp-cognizant-san-jose-1 sshd[836585]: Failed password for root from 120.48.14.72 p ...
show moreMay 30 20:15:25 sftp-cognizant-san-jose-1 sshd[836585]: Failed password for root from 120.48.14.72 port 55018 ssh2
May 30 20:17:25 sftp-cognizant-san-jose-1 sshd[836603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.14.72 user=root
May 30 20:17:26 sftp-cognizant-san-jose-1 sshd[836603]: Failed password for root from 120.48.14.72 port 44942 ssh2
...
show less
Brute-Force
SSH
Showing 61 to
75
of 309 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩