This IP address has been reported a total of
4,655
times from
1,107 distinct
sources.
120.48.135.189 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jun 2 05:18:25 HydrAttack-TW-HL sshd[363632]: Invalid user actions from 120.48.135.189 port 57176
J ...
show moreJun 2 05:18:25 HydrAttack-TW-HL sshd[363632]: Invalid user actions from 120.48.135.189 port 57176
Jun 2 05:27:17 HydrAttack-TW-HL sshd[363986]: Invalid user t24test from 120.48.135.189 port 41766
Jun 2 05:29:20 HydrAttack-TW-HL sshd[364071]: Invalid user user from 120.48.135.189 port 60406
Jun 2 05:31:51 HydrAttack-TW-HL sshd[364187]: Invalid user tania from 120.48.135.189 port 51104
Jun 2 05:33:55 HydrAttack-TW-HL sshd[364273]: Invalid user sam from 120.48.135.189 port 46124
...
show less
Jun 2 02:27:08 ubuntu sshd[424884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ...
show moreJun 2 02:27:08 ubuntu sshd[424884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.135.189
Jun 2 02:27:10 ubuntu sshd[424884]: Failed password for invalid user t24test from 120.48.135.189 port 40008 ssh2
Jun 2 02:29:09 ubuntu sshd[424899]: Invalid user user from 120.48.135.189 port 39248
Jun 2 02:29:09 ubuntu sshd[424899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.135.189
Jun 2 02:29:12 ubuntu sshd[424899]: Failed password for invalid user user from 120.48.135.189 port 39248 ssh2
...
show less
SSH brute-force detected: 18 failed login attempts in the last 1 hour.
Brute-Force
SSH
Anonymous
2026-06-02T01:14:09.955617+00:00 ams-1-vm-xjvt sshd[72418]: pam_unix(sshd:auth): authentication fail ...
show more2026-06-02T01:14:09.955617+00:00 ams-1-vm-xjvt sshd[72418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.135.189
2026-06-02T01:14:11.796819+00:00 ams-1-vm-xjvt sshd[72418]: Failed password for invalid user jenkins from 120.48.135.189 port 49044 ssh2
2026-06-02T01:16:08.044529+00:00 ams-1-vm-xjvt sshd[72466]: Invalid user kevin from 120.48.135.189 port 33146
2026-06-02T01:16:08.047654+00:00 ams-1-vm-xjvt sshd[72466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.135.189
2026-06-02T01:16:10.556527+00:00 ams-1-vm-xjvt sshd[72466]: Failed password for invalid user kevin from 120.48.135.189 port 33146 ssh2
...
show less
Knock-Knock honeypot brute-force: SSH (20 total hits)
Brute-Force
SSH
Anonymous
2026-06-02T00:11:47.148871+00:00 xmr sshd[166015]: Invalid user rubicon from 120.48.135.189 port 598 ...
show more2026-06-02T00:11:47.148871+00:00 xmr sshd[166015]: Invalid user rubicon from 120.48.135.189 port 59870
...
show less
2026-06-02T01:09:57.124149+02:00 pietje sshd-session[2632925]: pam_unix(sshd:auth): authentication f ...
show more2026-06-02T01:09:57.124149+02:00 pietje sshd-session[2632925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.135.189
2026-06-02T01:09:58.628170+02:00 pietje sshd-session[2632925]: Failed password for invalid user socksuser from 120.48.135.189 port 38130 ssh2
2026-06-02T01:10:00.041478+02:00 pietje sshd-session[2632925]: Disconnected from invalid user socksuser 120.48.135.189 port 38130 [preauth]
...
show less
2026-06-01T23:30:43.163278+03:00 proxy-msk1 sshd[1047211]: pam_unix(sshd:auth): authentication failu ...
show more2026-06-01T23:30:43.163278+03:00 proxy-msk1 sshd[1047211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.135.189 user=root
2026-06-01T23:30:45.042610+03:00 proxy-msk1 sshd[1047211]: Failed password for root from 120.48.135.189 port 45358 ssh2
2026-06-01T23:32:29.673374+03:00 proxy-msk1 sshd[1047373]: Invalid user daniel from 120.48.135.189 port 50722
2026-06-01T23:32:29.679510+03:00 proxy-msk1 sshd[1047373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.135.189
2026-06-01T23:32:31.442825+03:00 proxy-msk1 sshd[1047373]: Failed password for invalid user daniel from 120.48.135.189 port 50722 ssh2
show less
2026-06-01T20:18:55.808544+00:00 [host] sshd[19863]: User root from 120.48.135.189 not allowed becau ...
show more2026-06-01T20:18:55.808544+00:00 [host] sshd[19863]: User root from 120.48.135.189 not allowed because not listed in AllowUsers
2026-06-01T20:21:33.502573+00:00 [host] sshd[19915]: User root from 120.48.135.189 not allowed because not listed in AllowUsers
2026-06-01T20:23:13.221301+00:00 [host] sshd[19927]: Invalid user whmcs from 120.48.135.189 port 53564
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-01T19:33:35Z and 2026-06-0 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-01T19:33:35Z and 2026-06-01T20:16:17Z
show less
Jun 1 21:51:59 Debian-1202-bookworm-amd64-base sshd[2744340]: Failed password for invalid user evm ...
show moreJun 1 21:51:59 Debian-1202-bookworm-amd64-base sshd[2744340]: Failed password for invalid user evm from 120.48.135.189 port 57022 ssh2
Jun 1 21:54:35 Debian-1202-bookworm-amd64-base sshd[2826848]: Invalid user megaplan from 120.48.135.189 port 32780
Jun 1 21:54:35 Debian-1202-bookworm-amd64-base sshd[2826848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.135.189
Jun 1 21:54:37 Debian-1202-bookworm-amd64-base sshd[2826848]: Failed password for invalid user megaplan from 120.48.135.189 port 32780 ssh2
Jun 1 22:00:59 Debian-1202-bookworm-amd64-base sshd[3041796]: Invalid user transfer from 120.48.135.189 port 46514
...
show less
(sshd) Failed SSH login from 120.48.135.189 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directi ...
show more(sshd) Failed SSH login from 120.48.135.189 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 1 15:28:14 zeus sshd[1380204]: Invalid user swa from 120.48.135.189 port 45154
Jun 1 15:39:07 zeus sshd[1384538]: Invalid user acces from 120.48.135.189 port 52540
Jun 1 15:44:30 zeus sshd[1386621]: Invalid user lookup from 120.48.135.189 port 43270
Jun 1 15:48:25 zeus sshd[1388284]: Invalid user ems from 120.48.135.189 port 41228
Jun 1 15:52:19 zeus sshd[1389845]: Invalid user rds from 120.48.135.189 port 50464
show less
Brute-Force
SSH
Showing 91 to
105
of 4655 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩