This IP address has been reported a total of
52
times from
47 distinct
sources.
120.48.108.72 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 11
reports;
United States of America
with 8
reports;
France
with 5
reports.
The most common categories in these recent reports were:
SSH
49
times;
Brute-Force
44
times;
Port Scan
3
times;
Exploited Host
1
time;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-03T23:30:07.242652+02:00 sshd-session[2884619]: Invalid user openkm from 120.48.108.72 port ...
show more2026-10-03T23:30:07.242652+02:00 sshd-session[2884619]: Invalid user openkm from 120.48.108.72 port 57384
2026-10-03T23:30:07.444904+02:00 sshd-session[2884619]: Disconnected from invalid user openkm 120.48.108.72 port 57384 [preauth]
2026-10-03T23:35:11.330258+02:00 sshd-session[2944148]: Invalid user asterisk from 120.48.108.72 port 48664
...
show less
2026-10-03T21:30:20.310166+00:00 vps1 sshd[4064377]: Invalid user openkm from 120.48.108.72 port 498 ...
show more2026-10-03T21:30:20.310166+00:00 vps1 sshd[4064377]: Invalid user openkm from 120.48.108.72 port 49836
2026-10-03T21:30:20.470375+00:00 vps1 sshd[4064377]: Disconnected from invalid user openkm 120.48.108.72 port 49836 [preauth]
2026-10-03T21:33:48.226457+00:00 vps1 sshd[4064708]: Connection closed by 120.48.108.72 port 53538 [preauth]
...
show less
2026-10-03T23:34:13.774833+03:00 singularity2 sshd[2268786]: Connection closed by 120.48.108.72 port ...
show more2026-10-03T23:34:13.774833+03:00 singularity2 sshd[2268786]: Connection closed by 120.48.108.72 port 59246 [preauth]
2026-10-03T23:41:57.738387+03:00 singularity2 sshd[2274480]: Disconnected from authenticating user root 120.48.108.72 port 43504 [preauth]
2026-10-03T23:47:17.590559+03:00 singularity2 sshd[2278189]: Disconnected from authenticating user root 120.48.108.72 port 33430 [preauth]
...
show less
Brute-Force
SSH
Anonymous
Repeated failed SSH authentication attempts over TCP triggered a Fail2Ban ban.
(sshd) Failed SSH login from 120.48.108.72 (CN/China/-): 1 in the last 3600 secs; Ports: *; Directio ...
show more(sshd) Failed SSH login from 120.48.108.72 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: 0; Trigger: LF_TRIGGER; Logs: 2026-10-03T20:21:32.737637+00:00 crichton sshd[3621653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.108.72 user=root
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: root, Pass: [REDACTED]
2026-10-03T21:51:49.295004+02:00 serengeti sshd-session[3587649]: Failed password for root from 120. ...
show more2026-10-03T21:51:49.295004+02:00 serengeti sshd-session[3587649]: Failed password for root from 120.48.108.72 port 37646 ssh2
2026-10-03T21:56:34.172955+02:00 serengeti sshd-session[3588400]: Invalid user icinga from 120.48.108.72 port 50164
2026-10-03T21:56:34.176547+02:00 serengeti sshd-session[3588400]: Failed password for invalid user icinga from 120.48.108.72 port 50164 ssh2
2026-10-03T21:58:47.171030+02:00 serengeti sshd-session[3588541]: Invalid user test from 120.48.108.72 port 40310
2026-10-03T21:58:47.172625+02:00 serengeti sshd-session[3588541]: Failed password for invalid user test from 120.48.108.72 port 40310 ssh2
...
show less
2026-10-03T21:35:15.222570+02:00 serengeti sshd-session[3584832]: Failed password for root from 120. ...
show more2026-10-03T21:35:15.222570+02:00 serengeti sshd-session[3584832]: Failed password for root from 120.48.108.72 port 33428 ssh2
2026-10-03T21:37:53.889877+02:00 serengeti sshd-session[3585172]: Invalid user dbuser from 120.48.108.72 port 50100
2026-10-03T21:37:53.891513+02:00 serengeti sshd-session[3585172]: Failed password for invalid user dbuser from 120.48.108.72 port 50100 ssh2
2026-10-03T21:39:12.601790+02:00 serengeti sshd-session[3585568]: Invalid user mapadmin from 120.48.108.72 port 42772
2026-10-03T21:39:12.603565+02:00 serengeti sshd-session[3585568]: Failed password for invalid user mapadmin from 120.48.108.72 port 42772 ssh2
...
show less
Brute-Force
SSH
Anonymous
Reported by RattusGuard: Honeypot: ssh emulator (port 2222/tcp)
SSH brute force attack detected: 5 failed attempts
Brute-Force
Anonymous
2026-10-03T20:02:21.915018+02:00 polaris sshd-session[1567603]: Invalid user admin1 from 120.48.108. ...
show more2026-10-03T20:02:21.915018+02:00 polaris sshd-session[1567603]: Invalid user admin1 from 120.48.108.72 port 51984
2026-10-03T20:08:50.493442+02:00 polaris sshd-session[1569357]: Invalid user customer from 120.48.108.72 port 57158
2026-10-03T20:15:12.202477+02:00 polaris sshd-session[1571163]: Invalid user botuser from 120.48.108.72 port 58456
...
show less
2026-10-03T17:58:34.542489+00:00 ubuntu-s-1vcpu-1gb-sfo2 sshd[487303]: Invalid user ftpuser from 120 ...
show more2026-10-03T17:58:34.542489+00:00 ubuntu-s-1vcpu-1gb-sfo2 sshd[487303]: Invalid user ftpuser from 120.48.108.72 port 39430
2026-10-03T18:01:37.768300+00:00 ubuntu-s-1vcpu-1gb-sfo2 sshd[487374]: Invalid user admin1 from 120.48.108.72 port 57202
2026-10-03T18:10:25.548124+00:00 ubuntu-s-1vcpu-1gb-sfo2 sshd[487397]: Invalid user factorio from 120.48.108.72 port 52312
...
show less
