This IP address has been reported a total of
6,731
times from
1,177 distinct
sources.
120.48.181.192 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-05-29T21:04:02.009551+02:00 server sshd-session[1013908]: Failed password for invalid user gith ...
show more2026-05-29T21:04:02.009551+02:00 server sshd-session[1013908]: Failed password for invalid user github from 120.48.181.192 port 56452 ssh2
2026-05-29T21:18:54.304017+02:00 server sshd-session[1014199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.181.192 user=root
2026-05-29T21:18:56.578334+02:00 server sshd-session[1014199]: Failed password for root from 120.48.181.192 port 42342 ssh2
show less
May 29 14:56:08 cloud-server-0 sshd[761382]: Invalid user ftpuser from 120.48.181.192 port 54116
May ...
show moreMay 29 14:56:08 cloud-server-0 sshd[761382]: Invalid user ftpuser from 120.48.181.192 port 54116
May 29 14:56:10 cloud-server-0 sshd[761382]: Failed password for invalid user ftpuser from 120.48.181.192 port 54116 ssh2
...
show less
2026-05-29T17:23:04.713942+03:00 kotia sshd-session[86593]: Invalid user ops from 120.48.181.192 por ...
show more2026-05-29T17:23:04.713942+03:00 kotia sshd-session[86593]: Invalid user ops from 120.48.181.192 port 46882
2026-05-29T17:24:58.513939+03:00 kotia sshd-session[86627]: Invalid user sales from 120.48.181.192 port 45182
2026-05-29T17:26:55.144658+03:00 kotia sshd-session[86646]: Invalid user newftpuser from 120.48.181.192 port 35806
...
show less
2026-05-29T12:54:49.533783tim.mtkrbti.by sshd[16243]: Failed password for root from 120.48.181.192 p ...
show more2026-05-29T12:54:49.533783tim.mtkrbti.by sshd[16243]: Failed password for root from 120.48.181.192 port 51144 ssh2
2026-05-29T12:56:56.368190tim.mtkrbti.by sshd[16270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.181.192 user=root
2026-05-29T12:56:58.489200tim.mtkrbti.by sshd[16270]: Failed password for root from 120.48.181.192 port 53728 ssh2
...
show less
2026-05-29T06:08:44.683837+02:00 sfdx sshd[130400]: Invalid user koha from 120.48.181.192 port 46830 ...
show more2026-05-29T06:08:44.683837+02:00 sfdx sshd[130400]: Invalid user koha from 120.48.181.192 port 46830
2026-05-29T06:08:44.850334+02:00 sfdx sshd[130400]: Disconnected from invalid user koha 120.48.181.192 port 46830 [preauth]
...
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-29T03:00:28Z and 2026-05-2 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-29T03:00:28Z and 2026-05-29T03:58:47Z
show less
2026-05-29T02:38:15.288111+00:00 fra.updn.io sshd[2819674]: pam_unix(sshd:auth): authentication fail ...
show more2026-05-29T02:38:15.288111+00:00 fra.updn.io sshd[2819674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.181.192
2026-05-29T02:38:17.662481+00:00 fra.updn.io sshd[2819674]: Failed password for invalid user uftp from 120.48.181.192 port 46626 ssh2
2026-05-29T02:50:04.314068+00:00 fra.updn.io sshd[2891191]: Invalid user personal from 120.48.181.192 port 43698
2026-05-29T02:50:04.318132+00:00 fra.updn.io sshd[2891191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.181.192
2026-05-29T02:50:06.356698+00:00 fra.updn.io sshd[2891191]: Failed password for invalid user personal from 120.48.181.192 port 43698 ssh2
...
show less
2026-05-29T02:55:55.729377DED-654966.op-net.com sshd[24572]: Invalid user cc from 120.48.181.192 por ...
show more2026-05-29T02:55:55.729377DED-654966.op-net.com sshd[24572]: Invalid user cc from 120.48.181.192 port 34340
2026-05-29T02:55:57.855439DED-654966.op-net.com sshd[24572]: Failed password for invalid user cc from 120.48.181.192 port 34340 ssh2
2026-05-29T02:57:42.560174DED-654966.op-net.com sshd[24588]: Invalid user admin from 120.48.181.192 port 54910
...
show less
Brute-Force
SSH
Showing 91 to
105
of 6731 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩