This IP address has been reported a total of
80
times from
64 distinct
sources.
120.48.167.172 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 16
reports;
United States of America
with 14
reports;
Netherlands
with 10
reports.
The most common categories in these recent reports were:
SSH
67
times;
Brute-Force
56
times;
Port Scan
14
times;
Hacking
8
times;
Web App Attack
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Oct 12 18:44:00 proxy-03 sshd[156062]: Failed password for root from 120.48.167.172 port 41020 ssh2
...
show moreOct 12 18:44:00 proxy-03 sshd[156062]: Failed password for root from 120.48.167.172 port 41020 ssh2
Oct 12 18:44:04 proxy-03 sshd[161996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.167.172 user=root
Oct 12 18:44:06 proxy-03 sshd[161996]: Failed password for root from 120.48.167.172 port 54878 ssh2
Oct 12 18:44:09 proxy-03 sshd[163988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.167.172 user=root
Oct 12 18:44:11 proxy-03 sshd[163988]: Failed password for root from 120.48.167.172 port 35842 ssh2
...
show less
AetherFox VoidGuard detected: Oct 12 16:50:34 heimdall sshd[816500]: Failed password for root from 1 ...
show moreAetherFox VoidGuard detected: Oct 12 16:50:34 heimdall sshd[816500]: Failed password for root from 120.48.167.172 port 56114 ssh2
Oct 12 16:50:36 heimdall sshd[816502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.167.172 user=root
Oct 12 16:50:38 heimdall sshd[816502]: Failed password for root from 120.48.167.172 port 56120 ssh2
Oct 12 16:50:40 heimdall sshd[816504]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.167.172 user=root
Oct 12 16:50:42 heimdall sshd[816504]: Failed password for root from 120.48.167.172 port 40842 ssh2
...
show less
Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity ...
show moreHoneypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity observed.
show less
Oct 11 17:11:57 plsk sshd[2301079]: Failed password for root from 120.48.167.172 port 44704 ssh2
Oct ...
show moreOct 11 17:11:57 plsk sshd[2301079]: Failed password for root from 120.48.167.172 port 44704 ssh2
Oct 11 17:12:01 plsk sshd[2301081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.167.172 user=root
Oct 11 17:12:03 plsk sshd[2301081]: Failed password for root from 120.48.167.172 port 37414 ssh2
Oct 11 17:12:11 plsk sshd[2301125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.167.172 user=root
Oct 11 17:12:14 plsk sshd[2301125]: Failed password for root from 120.48.167.172 port 43770 ssh2
...
show less
Honeypot Finding: repeated TCP service probing on TCP/22 (SSH); 2 application-level events across 2 ...
show moreHoneypot Finding: repeated TCP service probing on TCP/22 (SSH); 2 application-level events across 2 source port(s). Sensor(s): Cowrie.
show less
SSH Bruteforce Attempt. SSH honeypot on port 22 recorded 1 failed login attempt(s). Usernames tried: ...
show moreSSH Bruteforce Attempt. SSH honeypot on port 22 recorded 1 failed login attempt(s). Usernames tried: root. Client: SSH-2.0-Go. Last attempt: 2026-10-10T19:29:55+02:00.
show less
2026-10-10T15:37:55.375015+00:00 edge-con-mia01.int.pdx.net.uk sshd[3070831]: Failed password for ro ...
show more2026-10-10T15:37:55.375015+00:00 edge-con-mia01.int.pdx.net.uk sshd[3070831]: Failed password for root from 120.48.167.172 port 43992 ssh2
2026-10-10T15:38:03.886396+00:00 edge-con-mia01.int.pdx.net.uk sshd[3070852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.167.172 user=root
2026-10-10T15:38:05.940131+00:00 edge-con-mia01.int.pdx.net.uk sshd[3070852]: Failed password for root from 120.48.167.172 port 44028 ssh2
...
show less
Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity ...
show moreHoneypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity observed.
show less
Oct 10 03:14:58 pxe sshd[3774224]: Failed password for root from 120.48.167.172 port 48176 ssh2
Oct ...
show moreOct 10 03:14:58 pxe sshd[3774224]: Failed password for root from 120.48.167.172 port 48176 ssh2
Oct 10 03:15:03 pxe sshd[3774244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.167.172 user=root
Oct 10 03:15:05 pxe sshd[3774244]: Failed password for root from 120.48.167.172 port 51710 ssh2
...
show less
