This IP address has been reported a total of
53
times from
46 distinct
sources.
120.48.158.53 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-01T04:12:28.225525pantelemone.ru sshd[1298898]: Failed password for root from 120.48.158.53 ...
show more2026-09-01T04:12:28.225525pantelemone.ru sshd[1298898]: Failed password for root from 120.48.158.53 port 41678 ssh2
2026-09-01T04:12:46.669851pantelemone.ru sshd[1298900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.158.53 user=root
2026-09-01T04:12:48.697336pantelemone.ru sshd[1298900]: Failed password for root from 120.48.158.53 port 41680 ssh2
2026-09-01T04:12:54.671238pantelemone.ru sshd[1298914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.158.53 user=root
2026-09-01T04:12:56.131060pantelemone.ru sshd[1298914]: Failed password for root from 120.48.158.53 port 45258 ssh2
...
show less
2026-08-31T20:10:16.676053+02:00 gtchub sshd-session[2259802]: Invalid user user from 120.48.158.53 ...
show more2026-08-31T20:10:16.676053+02:00 gtchub sshd-session[2259802]: Invalid user user from 120.48.158.53 port 55098
2026-08-31T20:10:18.177679+02:00 gtchub sshd-session[2260526]: Invalid user user from 120.48.158.53 port 60222
2026-08-31T20:10:21.060139+02:00 gtchub sshd-session[2260542]: Invalid user user from 120.48.158.53 port 60232
...
show less
2026-08-31T23:58:53.725767+08:00 CVM24121 sshd[2987042]: Failed password for root from 120.48.158.53 ...
show more2026-08-31T23:58:53.725767+08:00 CVM24121 sshd[2987042]: Failed password for root from 120.48.158.53 port 60564 ssh2
2026-08-31T23:58:54.847053+08:00 CVM24121 sshd[2987059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.158.53 user=root
2026-08-31T23:58:57.032920+08:00 CVM24121 sshd[2987059]: Failed password for root from 120.48.158.53 port 60566 ssh2
...
show less
Aug 31 14:34:27 obsidian sshd[1547226]: Failed password for root from 120.48.158.53 port 33138 ssh2
...
show moreAug 31 14:34:27 obsidian sshd[1547226]: Failed password for root from 120.48.158.53 port 33138 ssh2
Aug 31 14:34:34 obsidian sshd[1547501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.158.53 user=root
Aug 31 14:34:36 obsidian sshd[1547501]: Failed password for root from 120.48.158.53 port 36226 ssh2
...
show less
2026-08-31T11:50:24.139400 yip.floofy.tech sshd-session[292735]: Failed password for root from 120.4 ...
show more2026-08-31T11:50:24.139400 yip.floofy.tech sshd-session[292735]: Failed password for root from 120.48.158.53 port 41606 ssh2
2026-08-31T11:50:28.703961 yip.floofy.tech sshd-session[292852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.158.53 user=root
2026-08-31T11:50:30.789860 yip.floofy.tech sshd-session[292852]: Failed password for root from 120.48.158.53 port 40142 ssh2
...
show less
Brute-Force
SSH
Anonymous
sshd
Brute-Force
SSH
Anonymous
suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan
2026-08-31T05:06:22.499065+02:00 mail sshd-session[891828]: Failed password for root from 120.48.158 ...
show more2026-08-31T05:06:22.499065+02:00 mail sshd-session[891828]: Failed password for root from 120.48.158.53 port 49266 ssh2
2026-08-31T05:06:37.350745+02:00 mail sshd-session[891837]: Failed password for root from 120.48.158.53 port 46540 ssh2
2026-08-31T05:06:43.638645+02:00 mail sshd-session[891844]: Failed password for root from 120.48.158.53 port 58856 ssh2
2026-08-31T05:06:47.290114+02:00 mail sshd-session[891884]: Failed password for root from 120.48.158.53 port 42406 ssh2
2026-08-31T05:06:57.336042+02:00 mail sshd-session[891934]: Failed password for root from 120.48.158.53 port 42410 ssh2
...
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: user, Pass: [REDACTED]
Report 2653018 with IP 3700585 for SSH brute-force attack by source 3695243 via ssh-honeypot/0.2.0+h ...
show moreReport 2653018 with IP 3700585 for SSH brute-force attack by source 3695243 via ssh-honeypot/0.2.0+http
show less
Brute-Force
SSH
Showing 1 to
15
of 53 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩