This IP address has been reported a total of
377
times from
161 distinct
sources.
120.48.1.167 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
SSH login attempts with user root.
Brute-Force
SSH
Anonymous
120.48.1.167 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports ...
show more120.48.1.167 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jan 2 19:37:04 jbs1 sshd[7158]: Failed password for root from 120.48.1.167 port 51984 ssh2
Jan 2 19:38:00 jbs1 sshd[7397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.38.158.131 user=root
Jan 2 19:37:01 jbs1 sshd[7158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.1.167 user=root
Jan 2 19:37:40 jbs1 sshd[7344]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.170.145 user=root
Jan 2 19:37:42 jbs1 sshd[7344]: Failed password for root from 167.172.170.145 port 46624 ssh2
Jan 2 19:37:51 jbs1 sshd[7369]: Failed password for root from 166.62.126.35 port 24841 ssh2
IP Addresses Blocked:
show less
Jan 2 03:31:34 ns3148956 sshd[1125757]: Invalid user alex from 120.48.1.167 port 49116
Jan 2 03:31 ...
show moreJan 2 03:31:34 ns3148956 sshd[1125757]: Invalid user alex from 120.48.1.167 port 49116
Jan 2 03:31:34 ns3148956 sshd[1125757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.1.167
Jan 2 03:31:36 ns3148956 sshd[1125757]: Failed password for invalid user alex from 120.48.1.167 port 49116 ssh2
show less
Jan 2 02:16:03 ns3148956 sshd[1124913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreJan 2 02:16:03 ns3148956 sshd[1124913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.1.167
Jan 2 02:16:05 ns3148956 sshd[1124913]: Failed password for invalid user mongouser from 120.48.1.167 port 41794 ssh2
Jan 2 02:30:33 ns3148956 sshd[1125095]: Invalid user deploy from 120.48.1.167 port 45686
show less
Jan 1 22:13:50 v22019038103785759 sshd\[21389\]: Invalid user tomcat7 from 120.48.1.167 port 44004
...
show moreJan 1 22:13:50 v22019038103785759 sshd\[21389\]: Invalid user tomcat7 from 120.48.1.167 port 44004
Jan 1 22:13:50 v22019038103785759 sshd\[21389\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.1.167
Jan 1 22:13:52 v22019038103785759 sshd\[21389\]: Failed password for invalid user tomcat7 from 120.48.1.167 port 44004 ssh2
Jan 1 22:15:35 v22019038103785759 sshd\[21541\]: Invalid user server from 120.48.1.167 port 57022
Jan 1 22:15:35 v22019038103785759 sshd\[21541\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.1.167
...
show less
Jan 1 17:26:41 ns3079740 sshd[11961]: Invalid user karim from 120.48.1.167 port 36270
Jan 1 17:26: ...
show moreJan 1 17:26:41 ns3079740 sshd[11961]: Invalid user karim from 120.48.1.167 port 36270
Jan 1 17:26:41 ns3079740 sshd[11961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.1.167
Jan 1 17:26:41 ns3079740 sshd[11961]: Invalid user karim from 120.48.1.167 port 36270
Jan 1 17:26:43 ns3079740 sshd[11961]: Failed password for invalid user karim from 120.48.1.167 port 36270 ssh2
...
show less
Jan 1 07:39:51 ssh1 sshd[90740]: Invalid user webftp from 120.48.1.167 port 51900
Jan 1 07:39:51 s ...
show moreJan 1 07:39:51 ssh1 sshd[90740]: Invalid user webftp from 120.48.1.167 port 51900
Jan 1 07:39:51 ssh1 sshd[90740]: Failed password for invalid user webftp from 120.48.1.167 port 51900 ssh2
Jan 1 07:39:52 ssh1 sshd[90740]: Disconnected from invalid user webftp 120.48.1.167 port 51900 [preauth]
...
show less