This IP address has been reported a total of
324
times from
197 distinct
sources.
120.48.162.52 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
CSF/LFD blocked 120.48.162.52 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SSH ...
show moreCSF/LFD blocked 120.48.162.52 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SSH login from 120.48.162.52 (CN/China/-): 5 in the last 3600 secs. Evidence: Jun 2 18:52:10 paladin sshd[861480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.162.52 user=root
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
2026-06-02T08:09:58.893658+00:00 ubuntu-4gb-fsn1-2 sshd[2636832]: Failed password for root from 120. ...
show more2026-06-02T08:09:58.893658+00:00 ubuntu-4gb-fsn1-2 sshd[2636832]: Failed password for root from 120.48.162.52 port 42046 ssh2
2026-06-02T08:10:02.868429+00:00 ubuntu-4gb-fsn1-2 sshd[2636837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.162.52 user=root
2026-06-02T08:10:04.651823+00:00 ubuntu-4gb-fsn1-2 sshd[2636837]: Failed password for root from 120.48.162.52 port 43392 ssh2
...
show less
2026-06-02T08:06:18.797065Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.48.162.52:5935 ...
show more2026-06-02T08:06:18.797065Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.48.162.52:59350 (158.69.22.11:2222) [session: a50c92f54e9c]
2026-06-02T08:06:19.334351Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.48.162.52:59454 (158.69.22.11:2222) [session: 76e382b38222]
...
show less
2026-06-02T00:37:17.209665+00:00 kansas1 sshd[2489000]: Failed password for root from 120.48.162.52 ...
show more2026-06-02T00:37:17.209665+00:00 kansas1 sshd[2489000]: Failed password for root from 120.48.162.52 port 53086 ssh2
2026-06-02T00:37:21.576359+00:00 kansas1 sshd[2489002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.162.52 user=root
2026-06-02T00:37:23.628840+00:00 kansas1 sshd[2489002]: Failed password for root from 120.48.162.52 port 54032 ssh2
...
show less
[Fail2Ban:sshd-sensitive] 2026-06-01T19:16:37.972808+02:00 server sshd[354697]: Failed password for ...
show more[Fail2Ban:sshd-sensitive] 2026-06-01T19:16:37.972808+02:00 server sshd[354697]: Failed password for root from 120.48.162.52 port 39084 ssh2 2026-06-01T19:16:44.108224+02:00 server sshd[354778]: Failed password for root from 120.48.162.52 port 40152 ssh2 2026-06-01T19:16:47.711359+02:00 server sshd[354836]: Failed password for root from 120.48.162.52 port 40888 ssh2
show less
Jun 1 14:34:48 backup sshd[1181711]: Failed password for root from 120.48.162.52 port 35694 ssh2
Ju ...
show moreJun 1 14:34:48 backup sshd[1181711]: Failed password for root from 120.48.162.52 port 35694 ssh2
Jun 1 14:34:53 backup sshd[1181713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.162.52 user=root
Jun 1 14:34:54 backup sshd[1181713]: Failed password for root from 120.48.162.52 port 37744 ssh2
Jun 1 14:34:57 backup sshd[1181717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.162.52 user=root
Jun 1 14:35:00 backup sshd[1181717]: Failed password for root from 120.48.162.52 port 38608 ssh2
...
show less
[AUTORAVALT][[01/06/2026 - 07:11:00 -03:00 UTC]
Attack from [Baidu Noc]
[120.48.162.52]-[RANGE:120.4 ...
show more[AUTORAVALT][[01/06/2026 - 07:11:00 -03:00 UTC]
Attack from [Baidu Noc]
[120.48.162.52]-[RANGE:120.48.0.0 - 120.49.255.255]
Action: BLocKed
FTP Brute-Force -> Running brute force credentials on the FTP server.
Brute-Force -> Credential brute-force attacks on webpage logins and services like SSH, FTP, SIP, SMTP, RDP, etc.
]
...
show less
FTP Brute-Force
Brute-Force
Showing 16 to
30
of 324 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩