This IP address has been reported a total of
3,025
times from
937 distinct
sources.
120.48.104.37 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-15T20:09:35.883089+00:00 CVM51718 sshd[861179]: pam_unix(sshd:auth): authentication failure; ...
show more2026-06-15T20:09:35.883089+00:00 CVM51718 sshd[861179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.104.37
2026-06-15T20:09:37.698134+00:00 CVM51718 sshd[861179]: Failed password for invalid user cc from 120.48.104.37 port 51366 ssh2
2026-06-15T20:11:28.932148+00:00 CVM51718 sshd[861311]: Invalid user anderson from 120.48.104.37 port 38194
...
show less
Port Scan
Brute-Force
Anonymous
Honeypot hit: Unauthorized connection attempt detected on 22/SSH
Reported by: https://github.com/sef ...
show moreHoneypot hit: Unauthorized connection attempt detected on 22/SSH
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
2026-06-15T14:48:04.446462+02:00 telekom-de-01.api.my-carrier-services.com sshd[67454]: Disconnected ...
show more2026-06-15T14:48:04.446462+02:00 telekom-de-01.api.my-carrier-services.com sshd[67454]: Disconnected from invalid user meta 120.48.104.37 port 46972 [preauth]
2026-06-15T14:53:38.050052+02:00 telekom-de-01.api.my-carrier-services.com sshd[67614]: Invalid user pigeon from 120.48.104.37 port 34864
2026-06-15T14:53:38.242732+02:00 telekom-de-01.api.my-carrier-services.com sshd[67614]: Disconnected from invalid user pigeon 120.48.104.37 port 34864 [preauth]
2026-06-15T15:00:11.850373+02:00 telekom-de-01.api.my-carrier-services.com sshd[67957]: Connection closed by 120.48.104.37 port 43816 [preauth]
2026-06-15T15:00:56.513667+02:00 telekom-de-01.api.my-carrier-services.com sshd[67975]: Invalid user extreme from 120.48.104.37 port 43000
show less
2026-06-15T14:14:21.018634+02:00 servidor1 sshd-session[4046388]: Failed password for invalid user a ...
show more2026-06-15T14:14:21.018634+02:00 servidor1 sshd-session[4046388]: Failed password for invalid user ashish from 120.48.104.37 port 52472 ssh2
2026-06-15T14:20:02.098878+02:00 servidor1 sshd-session[4050026]: User root from 120.48.104.37 not allowed because not listed in AllowUsers
2026-06-15T14:20:02.111021+02:00 servidor1 sshd-session[4050026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.104.37 user=root
2026-06-15T14:20:04.782798+02:00 servidor1 sshd-session[4050026]: Failed password for invalid user root from 120.48.104.37 port 47166 ssh2
2026-06-15T14:21:54.995867+02:00 servidor1 sshd-session[4052173]: Invalid user devadmin from 120.48.104.37 port 51192
2026-06-15T14:21:54.997258+02:00 servidor1 sshd-session[4052173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.104.37
2026-06-15T14:21:56.838632+02:00 servidor1 sshd-session[4052173]: Failed password for invalid user devadmin from 12
...
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-15T01:25:04Z and 2026-06-1 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-15T01:25:04Z and 2026-06-15T01:38:21Z
show less
Brute-Force
SSH
Anonymous
$f2bV_matches
DDoS Attack
FTP Brute-Force
Port Scan
Hacking
SQL Injection
Spoofing
Bad Web Bot
Brute-Force
SSH
IoT Targeted
2026-06-15T09:10:04.693757+08:00 vmi996132.contaboserver.net sshd[2606932]: pam_unix(sshd:auth): aut ...
show more2026-06-15T09:10:04.693757+08:00 vmi996132.contaboserver.net sshd[2606932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.104.37
2026-06-15T09:10:07.029974+08:00 vmi996132.contaboserver.net sshd[2606932]: Failed password for invalid user tomcat from 120.48.104.37 port 45588 ssh2
2026-06-15T09:10:08.462688+08:00 vmi996132.contaboserver.net sshd[2606932]: Disconnected from invalid user tomcat 120.48.104.37 port 45588 [preauth]
...
show less
Brute-Force
SSH
Anonymous
Jun 14 21:48:45 newbrook-two sshd[2089485]: Invalid user mike from 120.48.104.37 port 48826
Jun 14 2 ...
show moreJun 14 21:48:45 newbrook-two sshd[2089485]: Invalid user mike from 120.48.104.37 port 48826
Jun 14 21:53:37 newbrook-two sshd[2090859]: Invalid user pvx from 120.48.104.37 port 56424
Jun 14 22:00:14 newbrook-two sshd[2092756]: Invalid user newuser1 from 120.48.104.37 port 56304
Jun 14 22:11:28 newbrook-two sshd[2095980]: Invalid user rami from 120.48.104.37 port 50560
Jun 14 22:15:42 newbrook-two sshd[2097227]: Invalid user k8s from 120.48.104.37 port 56208
...
show less
2026-06-14T19:59:45.172713+02:00 websrv1.aknwsrv.net sshd[3259113]: Disconnected from authenticating ...
show more2026-06-14T19:59:45.172713+02:00 websrv1.aknwsrv.net sshd[3259113]: Disconnected from authenticating user root 120.48.104.37 port 32938 [preauth]
2026-06-14T20:01:09.226553+02:00 websrv1.aknwsrv.net sshd[3293382]: Connection closed by 120.48.104.37 port 37086 [preauth]
2026-06-14T20:09:07.918429+02:00 websrv1.aknwsrv.net sshd[3304321]: Disconnected from authenticating user root 120.48.104.37 port 57580 [preauth]
2026-06-14T20:10:27.866019+02:00 websrv1.aknwsrv.net sshd[3305221]: Invalid user student1 from 120.48.104.37 port 59228
2026-06-14T20:10:28.049202+02:00 websrv1.aknwsrv.net sshd[3305221]: Disconnected from invalid user student1 120.48.104.37 port 59228 [preauth]
show less
2026-06-14T12:29:47.795036+02:00 muse sshd-session[67343]: Invalid user server from 120.48.104.37 po ...
show more2026-06-14T12:29:47.795036+02:00 muse sshd-session[67343]: Invalid user server from 120.48.104.37 port 38172
...
show less
Brute-Force
SSH
Showing 1 to
15
of 3025 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩