This IP address has been reported a total of
4,627
times from
1,012 distinct
sources.
120.48.147.81 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jun 2 01:09:26 GT sshd[4056943]: Failed password for root from 120.48.147.81 port 49958 ssh2
Jun 2 ...
show moreJun 2 01:09:26 GT sshd[4056943]: Failed password for root from 120.48.147.81 port 49958 ssh2
Jun 2 01:18:18 GT sshd[4057094]: Invalid user admin from 120.48.147.81 port 57432
Jun 2 01:18:18 GT sshd[4057094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.147.81
Jun 2 01:18:20 GT sshd[4057094]: Failed password for invalid user admin from 120.48.147.81 port 57432 ssh2
Jun 2 01:18:39 GT sshd[4057098]: Invalid user pruebas from 120.48.147.81 port 52696
...
show less
2026-06-01T23:33:36.604419Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.48.147.81:4095 ...
show more2026-06-01T23:33:36.604419Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.48.147.81:40950 (158.69.22.11:2222) [session: 377f0fc067bb]
2026-06-01T23:37:16.501065Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.48.147.81:40974 (158.69.22.11:2222) [session: e074369790ff]
...
show less
2026-06-01T21:55:05.891670+00:00 nlfr1 sshd[4079579]: Invalid user hd from 120.48.147.81 port 46878
...
show more2026-06-01T21:55:05.891670+00:00 nlfr1 sshd[4079579]: Invalid user hd from 120.48.147.81 port 46878
2026-06-01T22:04:31.606994+00:00 nlfr1 sshd[164337]: Invalid user rizal from 120.48.147.81 port 40720
2026-06-01T22:08:04.983884+00:00 nlfr1 sshd[269145]: Invalid user pavel from 120.48.147.81 port 56440
...
show less
SSH brute force - 3 attempts, usernames: invalid,root, | [3938530]: Failed password for invalid user ...
show moreSSH brute force - 3 attempts, usernames: invalid,root, | [3938530]: Failed password for invalid user webappuser from 120.48.147.81 ssh2 [3942566]: Failed password for root from 120.48.147.81 ssh2 [3944176]: Failed password for invalid user bob from 120.48.147.81 ssh2
show less
2026-06-01T19:54:17.886052+02:00 Server sshd[1101475]: Failed password for invalid user webappuser f ...
show more2026-06-01T19:54:17.886052+02:00 Server sshd[1101475]: Failed password for invalid user webappuser from 120.48.147.81 port 54154 ssh2
2026-06-01T20:01:34.026608+02:00 Server sshd[1106200]: Invalid user mc from 120.48.147.81 port 60642
2026-06-01T20:01:34.033132+02:00 Server sshd[1106200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.147.81
2026-06-01T20:01:36.369753+02:00 Server sshd[1106200]: Failed password for invalid user mc from 120.48.147.81 port 60642 ssh2
2026-06-01T20:03:20.004658+02:00 Server sshd[1107504]: Invalid user bob from 120.48.147.81 port 57348
...
show less
2026-06-01T17:45:32.754337+00:00 instance-20241105-1951 sshd[1966618]: Connection closed by 120.48.1 ...
show more2026-06-01T17:45:32.754337+00:00 instance-20241105-1951 sshd[1966618]: Connection closed by 120.48.147.81 port 35734 [preauth]
...
show less
Hacking
Brute-Force
SSH
Anonymous
Jun 1 17:12:27 gateway1-old sshd[20993]: Failed password for postgres from 120.48.147.81 port 57726 ...
show moreJun 1 17:12:27 gateway1-old sshd[20993]: Failed password for postgres from 120.48.147.81 port 57726 ssh2
Jun 1 17:21:31 gateway1-old sshd[21394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.147.81
Jun 1 17:21:33 gateway1-old sshd[21394]: Failed password for invalid user nokia from 120.48.147.81 port 32816 ssh2
show less
2026-06-01T13:30:55.304446+02:00 jantje sshd[7038]: pam_unix(sshd:auth): authentication failure; log ...
show more2026-06-01T13:30:55.304446+02:00 jantje sshd[7038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.147.81
2026-06-01T13:30:57.207868+02:00 jantje sshd[7038]: Failed password for invalid user homeassistant from 120.48.147.81 port 52832 ssh2
2026-06-01T13:30:58.593828+02:00 jantje sshd[7038]: Disconnected from invalid user homeassistant 120.48.147.81 port 52832 [preauth]
...
show less
2026-06-01T09:47:01.519022+02:00 servidor1 sshd-session[3517394]: Invalid user ec2-user from 120.48. ...
show more2026-06-01T09:47:01.519022+02:00 servidor1 sshd-session[3517394]: Invalid user ec2-user from 120.48.147.81 port 54278
2026-06-01T09:47:01.520324+02:00 servidor1 sshd-session[3517394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.147.81
2026-06-01T09:47:03.774486+02:00 servidor1 sshd-session[3517394]: Failed password for invalid user ec2-user from 120.48.147.81 port 54278 ssh2
2026-06-01T09:47:16.516567+02:00 servidor1 sshd-session[3517758]: User root from 120.48.147.81 not allowed because not listed in AllowUsers
2026-06-01T09:47:16.521826+02:00 servidor1 sshd-session[3517758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.147.81 user=root
2026-06-01T09:47:18.644845+02:00 servidor1 sshd-session[3517758]: Failed password for invalid user root from 120.48.147.81 port 53878 ssh2
2026-06-01T09:48:25.839875+02:00 servidor1 sshd-session[3517999]: Invalid user testa from 120.48.147.81 port 4926
...
show less
2026-06-01T07:38:37.571515+02:00 www sshd[137319]: pam_unix(sshd:auth): authentication failure; logn ...
show more2026-06-01T07:38:37.571515+02:00 www sshd[137319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.147.81
2026-06-01T07:38:39.261938+02:00 www sshd[137319]: Failed password for invalid user wso2 from 120.48.147.81 port 48392 ssh2
2026-06-01T07:41:51.950387+02:00 www sshd[137854]: Invalid user deployer from 120.48.147.81 port 45344
...
show less
Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security too ...
show moreFail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security tooling. Technical log details and local server identifiers intentionally omitted for privacy.
show less
2026-06-01T04:52:00.606698+02:00 apollo sshd-session[59875]: Invalid user nginx from 120.48.147.81 p ...
show more2026-06-01T04:52:00.606698+02:00 apollo sshd-session[59875]: Invalid user nginx from 120.48.147.81 port 35600
...
show less
Brute-Force
SSH
Showing 46 to
60
of 4627 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩