This IP address has been reported a total of
1,743
times from
666 distinct
sources.
120.48.153.92 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
SSH honeypot interaction detected. The source host initiated a connection to a monitored SSH endpoin ...
show moreSSH honeypot interaction detected. The source host initiated a connection to a monitored SSH endpoint, behavior consistent with automated SSH scanning or brute-force reconnaissance.
show less
2026-05-25T06:52:11.942578+00:00 mercury.fsmail.org.uk sshd-session[328577]: Failed password for inv ...
show more2026-05-25T06:52:11.942578+00:00 mercury.fsmail.org.uk sshd-session[328577]: Failed password for invalid user grace from 120.48.153.92 port 53830 ssh2
2026-05-25T06:53:51.478150+00:00 mercury.fsmail.org.uk sshd-session[328590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.153.92 user=root
2026-05-25T06:53:53.106781+00:00 mercury.fsmail.org.uk sshd-session[328590]: Failed password for root from 120.48.153.92 port 58474 ssh2
...
show less
This IP address carried out 4 port scanning attempts on 24-05-2026. For more information or to repor ...
show moreThis IP address carried out 4 port scanning attempts on 24-05-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
2026-05-25T06:15:43.784975+01:00 sv5.ggsrv.de sshd-session[3340901]: Invalid user administrator from ...
show more2026-05-25T06:15:43.784975+01:00 sv5.ggsrv.de sshd-session[3340901]: Invalid user administrator from 120.48.153.92 port 34830
2026-05-25T06:17:16.764761+01:00 sv5.ggsrv.de sshd-session[3341685]: Invalid user curl from 120.48.153.92 port 40688
2026-05-25T06:18:46.672556+01:00 sv5.ggsrv.de sshd-session[3342480]: Invalid user sajid from 120.48.153.92 port 58094
2026-05-25T06:21:35.457229+01:00 sv5.ggsrv.de sshd-session[3344096]: Invalid user marketing from 120.48.153.92 port 49484
2026-05-25T06:22:55.286277+01:00 sv5.ggsrv.de sshd-session[3344861]: Invalid user ubuntu from 120.48.153.92 port 33740
...
show less
2026-05-25T04:33:49.836883+00:00 thelemmy.club sshd-session[2535872]: Connection closed by 120.48.15 ...
show more2026-05-25T04:33:49.836883+00:00 thelemmy.club sshd-session[2535872]: Connection closed by 120.48.153.92 port 51960 [preauth]
2026-05-25T04:35:38.199916+00:00 thelemmy.club sshd-session[2537211]: Connection closed by 120.48.153.92 port 59394 [preauth]
...
show less
2026-05-25T02:24:44.844440+00:00 ip-172-31-32-95 sshd[2076626]: Invalid user user from 120.48.153.92 ...
show more2026-05-25T02:24:44.844440+00:00 ip-172-31-32-95 sshd[2076626]: Invalid user user from 120.48.153.92 port 33070
2026-05-25T02:24:44.847319+00:00 ip-172-31-32-95 sshd[2076626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.153.92
2026-05-25T02:24:46.687728+00:00 ip-172-31-32-95 sshd[2076626]: Failed password for invalid user user from 120.48.153.92 port 33070 ssh2
...
show less
2026-05-25T04:15:42.675120+02:00 pbs01 sshd-session[1963760]: Failed password for root from 120.48.1 ...
show more2026-05-25T04:15:42.675120+02:00 pbs01 sshd-session[1963760]: Failed password for root from 120.48.153.92 port 57740 ssh2
2026-05-25T04:15:43.454862+02:00 pbs01 sshd-session[1963760]: Disconnected from authenticating user root 120.48.153.92 port 57740 [preauth]
2026-05-25T04:24:41.939972+02:00 pbs01 sshd-session[1965507]: Invalid user user from 120.48.153.92 port 58468
...
show less
2026-05-25T01:24:49.502186+00:00 edge-fog-swb01.int.pdx.net.uk sshd[248381]: Invalid user ubuntu fro ...
show more2026-05-25T01:24:49.502186+00:00 edge-fog-swb01.int.pdx.net.uk sshd[248381]: Invalid user ubuntu from 120.48.153.92 port 54332
2026-05-25T01:24:49.507389+00:00 edge-fog-swb01.int.pdx.net.uk sshd[248381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.153.92
2026-05-25T01:24:51.152090+00:00 edge-fog-swb01.int.pdx.net.uk sshd[248381]: Failed password for invalid user ubuntu from 120.48.153.92 port 54332 ssh2
...
show less
2026-05-24T14:40:47.808373-05:00 nocix-dedi-bf2421-mci sshd-session[730340]: Invalid user zhao from ...
show more2026-05-24T14:40:47.808373-05:00 nocix-dedi-bf2421-mci sshd-session[730340]: Invalid user zhao from 120.48.153.92 port 34986
2026-05-24T14:50:43.992999-05:00 nocix-dedi-bf2421-mci sshd-session[731015]: Invalid user httpd from 120.48.153.92 port 36036
2026-05-24T15:19:19.735725-05:00 nocix-dedi-bf2421-mci sshd-session[733100]: Invalid user work from 120.48.153.92 port 37412
...
show less
2026-05-24T21:48:21.926730+02:00 zg0iiuob sshd-session[644822]: Disconnected from invalid user httpd ...
show more2026-05-24T21:48:21.926730+02:00 zg0iiuob sshd-session[644822]: Disconnected from invalid user httpd 120.48.153.92 port 56900 [preauth]
2026-05-24T21:58:21.674857+02:00 zg0iiuob sshd-session[644876]: Connection closed by 120.48.153.92 port 52150 [preauth]
2026-05-24T22:03:18.160900+02:00 zg0iiuob sshd-session[644920]: Disconnected from authenticating user root 120.48.153.92 port 43040 [preauth]
2026-05-24T22:12:04.079373+02:00 zg0iiuob sshd-session[645006]: Invalid user cloud from 120.48.153.92 port 38304
2026-05-24T22:12:04.236861+02:00 zg0iiuob sshd-session[645006]: Disconnected from invalid user cloud 120.48.153.92 port 38304 [preauth]
...
show less
2026-05-24T21:28:09.470518+02:00 zg0iiuob sshd-session[644725]: Disconnected from authenticating use ...
show more2026-05-24T21:28:09.470518+02:00 zg0iiuob sshd-session[644725]: Disconnected from authenticating user root 120.48.153.92 port 59580 [preauth]
2026-05-24T21:38:40.835593+02:00 zg0iiuob sshd-session[644763]: Invalid user zhao from 120.48.153.92 port 53734
2026-05-24T21:38:40.996300+02:00 zg0iiuob sshd-session[644763]: Disconnected from invalid user zhao 120.48.153.92 port 53734 [preauth]
2026-05-24T21:43:21.563080+02:00 zg0iiuob sshd-session[644779]: Invalid user ftpsecure from 120.48.153.92 port 46184
2026-05-24T21:43:21.715941+02:00 zg0iiuob sshd-session[644779]: Disconnected from invalid user ftpsecure 120.48.153.92 port 46184 [preauth]
...
show less
[fail2ban Auto Report] 2026-05-24T19:40:40.695675+00:00 omega sshd[2883520]: Invalid user zhao from ...
show more[fail2ban Auto Report] 2026-05-24T19:40:40.695675+00:00 omega sshd[2883520]: Invalid user zhao from 120.48.153.92 port 38018
...
show less
May 24 19:39:04 v4bgp sshd[1805975]: Invalid user zhao from 120.48.153.92 port 41422
May 24 19:39:04 ...
show moreMay 24 19:39:04 v4bgp sshd[1805975]: Invalid user zhao from 120.48.153.92 port 41422
May 24 19:39:04 v4bgp sshd[1805975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.153.92
May 24 19:39:06 v4bgp sshd[1805975]: Failed password for invalid user zhao from 120.48.153.92 port 41422 ssh2
...
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-24T18:51:51Z and 2026-05-2 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-24T18:51:51Z and 2026-05-24T19:02:52Z
show less
Brute-Force
SSH
Showing 211 to
225
of 1743 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩