This IP address has been reported a total of
3,465
times from
977 distinct
sources.
120.48.82.124 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Aug 21 13:36:46 ser162528253480 sshd[845402]: Failed password for root from 120.48.82.124 port 44020 ...
show moreAug 21 13:36:46 ser162528253480 sshd[845402]: Failed password for root from 120.48.82.124 port 44020 ssh2
Aug 21 13:36:49 ser162528253480 sshd[845468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.82.124 user=root
Aug 21 13:36:51 ser162528253480 sshd[845468]: Failed password for root from 120.48.82.124 port 46774 ssh2
...
show less
2026-08-21T02:03:23.732047node-27053.nodehost.ru sshd[492365]: Failed password for root from 120.48. ...
show more2026-08-21T02:03:23.732047node-27053.nodehost.ru sshd[492365]: Failed password for root from 120.48.82.124 port 46584 ssh2
2026-08-21T02:03:29.150382node-27053.nodehost.ru sshd[492367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.82.124 user=root
2026-08-21T02:03:31.577082node-27053.nodehost.ru sshd[492367]: Failed password for root from 120.48.82.124 port 54894 ssh2
...
show less
Brute-Force
SSH
Anonymous
SSH Honeypot: Attacker logged in and executed commands/transferred files.
Event log:
2026-08-20 22:5 ...
show moreSSH Honeypot: Attacker logged in and executed commands/transferred files.
Event log:
2026-08-20 22:55:02 - [LOGIN] root connected from 120.48.82.124
2026-08-20 22:55:02 - [COMMAND] Executed command via -c: uname -s -m for 120.48.82.124
show less
2026-08-20T08:53:34.173981+02:00 vm1386.de.snk.wtf sshd[207641]: Failed password for root from 120.4 ...
show more2026-08-20T08:53:34.173981+02:00 vm1386.de.snk.wtf sshd[207641]: Failed password for root from 120.48.82.124 port 58418 ssh2
2026-08-20T08:53:37.517556+02:00 vm1386.de.snk.wtf sshd[207641]: Connection closed by authenticating user root 120.48.82.124 port 58418 [preauth]
...
show less
2026-08-20T07:44:09.286022+02:00 monitoring.infra.crazycraftland.net sshd-session[2954272]: User roo ...
show more2026-08-20T07:44:09.286022+02:00 monitoring.infra.crazycraftland.net sshd-session[2954272]: User root from 120.48.82.124 not allowed because not listed in AllowUsers
2026-08-20T07:44:11.074359+02:00 monitoring.infra.crazycraftland.net sshd-session[2954374]: User root from 120.48.82.124 not allowed because not listed in AllowUsers
2026-08-20T07:44:12.622926+02:00 monitoring.infra.crazycraftland.net sshd-session[2954376]: User root from 120.48.82.124 not allowed because not listed in AllowUsers
...
show less