This IP address has been reported a total of
785
times from
423 distinct
sources.
120.48.150.20 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-08-20T12:29:21.712089+00:00 habibi.infra.lumis.moe sshd-session[898990]: Failed password for ro ...
show more2026-08-20T12:29:21.712089+00:00 habibi.infra.lumis.moe sshd-session[898990]: Failed password for root from 120.48.150.20 port 37730 ssh2
2026-08-20T12:29:25.368983+00:00 habibi.infra.lumis.moe sshd-session[898993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.150.20 user=root
2026-08-20T12:29:27.274570+00:00 habibi.infra.lumis.moe sshd-session[898993]: Failed password for root from 120.48.150.20 port 33514 ssh2
...
show less
Aug 7 18:38:05 Sayrix2 sshd[607114]: Failed password for root from 120.48.150.20 port 44586 ssh2
Au ...
show moreAug 7 18:38:05 Sayrix2 sshd[607114]: Failed password for root from 120.48.150.20 port 44586 ssh2
Aug 7 18:38:16 Sayrix2 sshd[607123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.150.20 user=root
Aug 7 18:38:17 Sayrix2 sshd[607123]: Failed password for root from 120.48.150.20 port 60666 ssh2
Aug 7 18:38:42 Sayrix2 sshd[607125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.150.20 user=root
Aug 7 18:38:44 Sayrix2 sshd[607125]: Failed password for root from 120.48.150.20 port 42306 ssh2
...
show less
2026-08-07T18:15:07.154775+00:00 rc02 sshd-session[67673]: Failed password for root from 120.48.150. ...
show more2026-08-07T18:15:07.154775+00:00 rc02 sshd-session[67673]: Failed password for root from 120.48.150.20 port 42414 ssh2
2026-08-07T18:15:17.263755+00:00 rc02 sshd-session[67676]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.150.20 user=root
2026-08-07T18:15:19.364347+00:00 rc02 sshd-session[67676]: Failed password for root from 120.48.150.20 port 32968 ssh2
...
show less
IT02-IF: SSH Brute Force from 120.48.150.20 at 2026-08-07 16:18:24 IST
Brute-Force
SSH
Anonymous
Aug 7 07:49:55 logs auth.info sshd-session[11648]: Connection closed by authenticating user root 12 ...
show moreAug 7 07:49:55 logs auth.info sshd-session[11648]: Connection closed by authenticating user root 120.48.150.20 port 59972 [preauth]
Aug 7 07:50:04 logs auth.info sshd-session[11655]: Connection closed by authenticating user root 120.48.150.20 port 47210 [preauth]
Aug 7 07:50:44 logs auth.info sshd-session[11584]: Connection closed by authenticating user root 120.48.150.20 port 37770 [preauth]
...
show less
Active SSH brute-force detected. Logs: 2026-08-07T10:29:33.936502+05:30 ChinkHaven sshd-session[2614 ...
show moreActive SSH brute-force detected. Logs: 2026-08-07T10:29:33.936502+05:30 ChinkHaven sshd-session[26140]: Failed password for root from 120.48.150.20 port 50906 ssh2 2026-08-07T10:29:50.458422+05:30 ChinkHaven sshd-session[26143]: pam_unix(sshd:auth): au...
show less
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-08-06T23:20:02Z and 2026-08-0 ...
show moreCowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-08-06T23:20:02Z and 2026-08-06T23:22:09Z
show less
Brute-Force
SSH
Anonymous
2026-08-06T22:06:18.182356+02:00 lXXX.com sshd[2951906]: Failed password for root from 120.48.150.20 ...
show more2026-08-06T22:06:18.182356+02:00 lXXX.com sshd[2951906]: Failed password for root from 120.48.150.20 port 55678 ssh2
2026-08-06T22:06:42.987675+02:00 lXXX.com sshd[2951908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.150.20 user=root
2026-08-06T22:06:45.577758+02:00 lXXX.com sshd[2951908]: Failed password for root from 120.48.150.20 port 55686 ssh2
...
show less
Report 2598733 with IP 3480411 for SSH brute-force attack by source 3475069 via ssh-honeypot/0.2.0+h ...
show moreReport 2598733 with IP 3480411 for SSH brute-force attack by source 3475069 via ssh-honeypot/0.2.0+http
show less
Brute-Force
SSH
Showing 1 to
15
of 785 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩