This IP address has been reported a total of
57
times from
44 distinct
sources.
120.71.144.228 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Report 2654260 with IP 3694706 for SSH brute-force attack by source 3696485 via ssh-honeypot/0.2.0+h ...
show moreReport 2654260 with IP 3694706 for SSH brute-force attack by source 3696485 via ssh-honeypot/0.2.0+http
show less
2026-08-31T14:27:00.388024+02:00 mail sshd-session[928054]: Failed password for root from 120.71.144 ...
show more2026-08-31T14:27:00.388024+02:00 mail sshd-session[928054]: Failed password for root from 120.71.144.228 port 40454 ssh2
2026-08-31T14:27:06.482236+02:00 mail sshd-session[928056]: Failed password for root from 120.71.144.228 port 41642 ssh2
2026-08-31T14:27:13.256759+02:00 mail sshd-session[928058]: Failed password for root from 120.71.144.228 port 42936 ssh2
2026-08-31T14:27:17.650301+02:00 mail sshd-session[928062]: Failed password for root from 120.71.144.228 port 44174 ssh2
2026-08-31T14:27:23.530437+02:00 mail sshd-session[928064]: Failed password for root from 120.71.144.228 port 45768 ssh2
...
show less
SSH/Telnet honeypot (ssh) recorded 2 session(s) and 10 logged event(s) from this address. Observed: ...
show moreSSH/Telnet honeypot (ssh) recorded 2 session(s) and 10 logged event(s) from this address. Observed: automated credential brute-force attempts. Sample credentials attempted: \xef\xbb\xbf------fuck------, root. Reported automatically from honeypot telemetry.
show less
SSH brute-force attempt from 120.71.144.228 blocked by Houston-Xeon-Dartnode. 2026-08-30T10:52:25.48 ...
show moreSSH brute-force attempt from 120.71.144.228 blocked by Houston-Xeon-Dartnode. 2026-08-30T10:52:25.482796+00:00 texas.dartnode.com sshd[3622441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.71.144.228 user=root
2026-08-30T10:52:27.963279+00:00 texas.dartnode.com sshd[3622441]: Failed password for root from 120.71.144.228 port 47642 ssh2
2026-08-30T10:52:28.716861+00:00 texas.dartnode.com sshd[3622441]: Connection closed by authenticating user root 120.71.144.228 port 47642 [preauth]
show less
2026-08-30T00:31:41.171465+00:00 rc01 sshd-session[1035146]: Failed password for root from 120.71.14 ...
show more2026-08-30T00:31:41.171465+00:00 rc01 sshd-session[1035146]: Failed password for root from 120.71.144.228 port 52376 ssh2
2026-08-30T00:31:43.975990+00:00 rc01 sshd-session[1035149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.71.144.228 user=root
2026-08-30T00:31:46.671363+00:00 rc01 sshd-session[1035149]: Failed password for root from 120.71.144.228 port 54414 ssh2
...
show less
SSH/Telnet honeypot (ssh) recorded 2 session(s) and 10 logged event(s) from this address. Observed: ...
show moreSSH/Telnet honeypot (ssh) recorded 2 session(s) and 10 logged event(s) from this address. Observed: automated credential brute-force attempts. Sample credentials attempted: \xef\xbb\xbf------fuck------, root. Reported automatically from honeypot telemetry.
show less
Report 2650067 with IP 3694706 for SSH brute-force attack by source 3692292 via ssh-honeypot/0.2.1+h ...
show moreReport 2650067 with IP 3694706 for SSH brute-force attack by source 3692292 via ssh-honeypot/0.2.1+http
show less
2026-08-29T11:51:21.550592Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.71.144.228:582 ...
show more2026-08-29T11:51:21.550592Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.71.144.228:58216 (158.69.22.11:2222) [session: 87b3623d0a75]
2026-08-29T11:51:22.123075Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.71.144.228:58324 (158.69.22.11:2222) [session: de96ac4143e1]
...
show less
Brute-Force
SSH
Showing 1 to
15
of 57 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩