This IP address has been reported a total of
1,652
times from
681 distinct
sources.
120.48.175.122 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jun 25 03:51:05 backup sshd[1567371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJun 25 03:51:05 backup sshd[1567371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.175.122
Jun 25 03:51:07 backup sshd[1567371]: Failed password for invalid user legales from 120.48.175.122 port 33640 ssh2
Jun 25 03:53:46 backup sshd[1567389]: Invalid user jellyfin from 120.48.175.122 port 34398
Jun 25 03:53:46 backup sshd[1567389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.175.122
Jun 25 03:53:48 backup sshd[1567389]: Failed password for invalid user jellyfin from 120.48.175.122 port 34398 ssh2
...
show less
Jun 25 02:36:21 sshd[433360]: Invalid user venus from 120.48.175.122 port 49346
Jun 25 02:42:33 sshd ...
show moreJun 25 02:36:21 sshd[433360]: Invalid user venus from 120.48.175.122 port 49346
Jun 25 02:42:33 sshd[433467]: Invalid user fmanager from 120.48.175.122 port 48716
Jun 25 02:44:41 sshd[433489]: Invalid user wwww from 120.48.175.122 port 47334
...
show less
👿 120.48.175.122 has been involved in malicious and brute-force activity. Reported by umarmohammad.x ...
show more👿 120.48.175.122 has been involved in malicious and brute-force activity. Reported by umarmohammad.xyz
show less
Brute-Force
SSH
Anonymous
2026-06-24T18:41:46.165213+00:00 de-fra2-ntp1 sshd[1950562]: Invalid user administrator from 120.48. ...
show more2026-06-24T18:41:46.165213+00:00 de-fra2-ntp1 sshd[1950562]: Invalid user administrator from 120.48.175.122 port 44278
2026-06-24T19:05:13.060013+00:00 de-fra2-ntp1 sshd[1951217]: Invalid user ubuntu from 120.48.175.122 port 53922
2026-06-24T19:09:44.981567+00:00 de-fra2-ntp1 sshd[1951254]: Invalid user support from 120.48.175.122 port 43258
...
show less
Brute-Force
SSH
Anonymous
2026-06-24T18:41:23.743823front2.int sshd[87123]: Invalid user administrator from 120.48.175.122 por ...
show more2026-06-24T18:41:23.743823front2.int sshd[87123]: Invalid user administrator from 120.48.175.122 port 51902
2026-06-24T18:41:23.753306front2.int sshd[87123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.175.122
2026-06-24T18:41:26.346210front2.int sshd[87123]: Failed password for invalid user administrator from 120.48.175.122 port 51902 ssh2
2026-06-24T18:55:52.452768front2.int sshd[93549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.175.122 user=root
2026-06-24T18:55:54.672172front2.int sshd[93549]: Failed password for root from 120.48.175.122 port 35026 ssh2
...
show less
Cluster member (Omitted) (US/United States/-) said, DENY 120.48.175.122, Reason:[(sshd) Failed SSH l ...
show moreCluster member (Omitted) (US/United States/-) said, DENY 120.48.175.122, Reason:[(sshd) Failed SSH login from 120.48.175.122 (CN/China/-): 3 in the last 3600 secs]
show less
2026-06-24T15:05:20.028337+02:00 geneba sshd-session[1560782]: Invalid user user1 from 120.48.175.12 ...
show more2026-06-24T15:05:20.028337+02:00 geneba sshd-session[1560782]: Invalid user user1 from 120.48.175.122 port 57902
...
show less
2026-06-24T09:13:26.991496+02:00 gaia sshd[354795]: Failed password for invalid user david from 120. ...
show more2026-06-24T09:13:26.991496+02:00 gaia sshd[354795]: Failed password for invalid user david from 120.48.175.122 port 40932 ssh2
2026-06-24T09:17:34.844049+02:00 gaia sshd[356531]: Connection from 120.48.175.122 port 50064 on 23.88.28.109 port 22 rdomain ""
2026-06-24T09:17:36.869717+02:00 gaia sshd[356531]: User root from 120.48.175.122 not allowed because not listed in AllowUsers
...
show less
2026-06-23T11:28:33.885649+02:00 kotiacat sshd-session[650841]: Invalid user mike from 120.48.175.12 ...
show more2026-06-23T11:28:33.885649+02:00 kotiacat sshd-session[650841]: Invalid user mike from 120.48.175.122 port 49496
...
show less
2026-06-23T10:32:16.874422+02:00 mail.srvfarm.net sshd-session[3179077]: Disconnected from authentic ...
show more2026-06-23T10:32:16.874422+02:00 mail.srvfarm.net sshd-session[3179077]: Disconnected from authenticating user root 120.48.175.122 port 41414 [preauth]
2026-06-23T10:35:47.126736+02:00 mail.srvfarm.net sshd-session[3181010]: Disconnected from authenticating user root 120.48.175.122 port 59728 [preauth]
2026-06-23T10:41:04.043233+02:00 mail.srvfarm.net sshd-session[3184589]: Connection closed by 120.48.175.122 port 36548 [preauth]
2026-06-23T10:41:58.517832+02:00 mail.srvfarm.net sshd-session[3185179]: Connection closed by 120.48.175.122 port 38664 [preauth]
2026-06-23T10:42:47.060844+02:00 mail.srvfarm.net sshd-session[3185745]: Connection closed by 120.48.175.122 port 59170 [preauth]
show less
Brute-Force
Showing 1 to
15
of 1652 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩