This IP address has been reported a total of
588
times from
306 distinct
sources.
120.48.115.202 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Jan 13 03:04:29 cloud sshd[1189333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ...
show moreJan 13 03:04:29 cloud sshd[1189333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.115.202 user=root
Jan 13 03:04:31 cloud sshd[1189333]: Failed password for root from 120.48.115.202 port 46798 ssh2
Jan 13 03:04:33 cloud sshd[1189333]: Disconnected from authenticating user root 120.48.115.202 port 46798 [preauth]
Jan 13 03:04:53 cloud sshd[1189350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.115.202 user=root
Jan 13 03:04:55 cloud sshd[1189350]: Failed password for root from 120.48.115.202 port 51932 ssh2
show less
2024-03-25T23:27:54.085794-05:00 elijahr.dev sshd[901399]: Disconnected from authenticating user roo ...
show more2024-03-25T23:27:54.085794-05:00 elijahr.dev sshd[901399]: Disconnected from authenticating user root 120.48.115.202 port 52902 [preauth]
2024-03-25T23:27:57.017744-05:00 elijahr.dev sshd[901216]: Connection closed by 120.48.115.202 port 39956 [preauth]
2024-03-25T23:28:44.957193-05:00 elijahr.dev sshd[901488]: Disconnected from authenticating user root 120.48.115.202 port 37592 [preauth]
2024-03-25T23:29:32.253997-05:00 elijahr.dev sshd[901572]: Invalid user test from 120.48.115.202 port 50510
2024-03-25T23:29:32.473772-05:00 elijahr.dev sshd[901572]: Disconnected from invalid user test 120.48.115.202 port 50510 [preauth]
...
show less
Mar 25 18:44:31 www4 sshd[2085679]: Failed password for invalid user rohan from 120.48.115.202 port ...
show moreMar 25 18:44:31 www4 sshd[2085679]: Failed password for invalid user rohan from 120.48.115.202 port 38918 ssh2
Mar 25 18:57:22 www4 sshd[2086957]: Invalid user carol from 120.48.115.202 port 53342
Mar 25 18:57:22 www4 sshd[2086957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.115.202
Mar 25 18:57:24 www4 sshd[2086957]: Failed password for invalid user carol from 120.48.115.202 port 53342 ssh2
Mar 25 18:58:30 www4 sshd[2086982]: Invalid user server1 from 120.48.115.202 port 44564
...
show less
2024-03-25T23:47:23.920815+01:00 fra01-de-pop.as202427.net sshd[441005]: Invalid user rohan from 120 ...
show more2024-03-25T23:47:23.920815+01:00 fra01-de-pop.as202427.net sshd[441005]: Invalid user rohan from 120.48.115.202 port 39704
2024-03-25T23:51:02.900265+01:00 fra01-de-pop.as202427.net sshd[441679]: Invalid user admin from 120.48.115.202 port 44178
2024-03-25T23:52:41.994780+01:00 fra01-de-pop.as202427.net sshd[441798]: User root from 120.48.115.202 not allowed because not listed in AllowUsers
...
show less
{"action": "connection", "dest_ip": "0.0.0.0", "dest_port": "22", "server": "ssh_server", "src_ip": ...
show more{"action": "connection", "dest_ip": "0.0.0.0", "dest_port": "22", "server": "ssh_server", "src_ip": "120.48.115.202", "src_port": "55920", "timestamp": "2024-03-25T22:11:43.395873"}
show less
Brute-Force
SSH
Anonymous
Mar 25 22:16:08 hosting08 sshd[10122]: Failed password for mysql from 120.48.115.202 port 36848 ssh2 ...
show moreMar 25 22:16:08 hosting08 sshd[10122]: Failed password for mysql from 120.48.115.202 port 36848 ssh2
Mar 25 22:17:07 hosting08 sshd[10207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.115.202
Mar 25 22:17:09 hosting08 sshd[10207]: Failed password for invalid user ubuntu from 120.48.115.202 port 54120 ssh2
...
show less