This IP address has been reported a total of
6,735
times from
1,177 distinct
sources.
120.48.181.192 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
May 28 01:48:23 game-05 sshd[3886270]: Invalid user nvidia from 120.48.181.192 port 60428
May 28 01: ...
show moreMay 28 01:48:23 game-05 sshd[3886270]: Invalid user nvidia from 120.48.181.192 port 60428
May 28 01:48:23 game-05 sshd[3886270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.181.192
May 28 01:48:25 game-05 sshd[3886270]: Failed password for invalid user nvidia from 120.48.181.192 port 60428 ssh2
May 28 01:56:38 game-05 sshd[3891185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.181.192 user=root
May 28 01:56:40 game-05 sshd[3891185]: Failed password for root from 120.48.181.192 port 50878 ssh2
...
show less
2026-05-28T03:45:14.440544+00:00 web sshd[1202444]: Invalid user minecraft from 120.48.181.192 port ...
show more2026-05-28T03:45:14.440544+00:00 web sshd[1202444]: Invalid user minecraft from 120.48.181.192 port 45490
2026-05-28T03:46:18.205593+00:00 web sshd[1202471]: Invalid user yann from 120.48.181.192 port 52628
...
show less
2026-05-28T02:03:49.727118+00:00 edge-thn-par02.int.pdx.net.uk sshd[3395797]: Invalid user reloj fro ...
show more2026-05-28T02:03:49.727118+00:00 edge-thn-par02.int.pdx.net.uk sshd[3395797]: Invalid user reloj from 120.48.181.192 port 39152
2026-05-28T02:05:10.491108+00:00 edge-thn-par02.int.pdx.net.uk sshd[3395928]: Invalid user steam from 120.48.181.192 port 39338
2026-05-28T02:11:49.733426+00:00 edge-thn-par02.int.pdx.net.uk sshd[3396422]: Invalid user noreply from 120.48.181.192 port 40476
...
show less
2026-05-28T00:58:46.223314+02:00 matrix.ursinn.dev sshd-session[2628051]: Invalid user gino from 120 ...
show more2026-05-28T00:58:46.223314+02:00 matrix.ursinn.dev sshd-session[2628051]: Invalid user gino from 120.48.181.192 port 47896
2026-05-28T01:02:54.153065+02:00 matrix.ursinn.dev sshd-session[2632980]: User root from 120.48.181.192 not allowed because not listed in AllowUsers
2026-05-28T01:05:01.066981+02:00 matrix.ursinn.dev sshd-session[2635348]: User root from 120.48.181.192 not allowed because not listed in AllowUsers
...
show less
May 27 23:19:26 bongen-tmp-rt.local sshd[3775468]: Disconnected from invalid user developer 120.48.1 ...
show moreMay 27 23:19:26 bongen-tmp-rt.local sshd[3775468]: Disconnected from invalid user developer 120.48.181.192 port 40000 [preauth]
May 27 23:24:53 bongen-tmp-rt.local sshd[3776068]: Connection closed by 120.48.181.192 port 36294 [preauth]
May 27 23:26:03 bongen-tmp-rt.local sshd[3776179]: Connection closed by 120.48.181.192 port 40718 [preauth]
May 27 23:31:52 bongen-tmp-rt.local sshd[3776875]: Connection closed by 120.48.181.192 port 51914 [preauth]
May 27 23:32:52 bongen-tmp-rt.local sshd[3776975]: Connection closed by 120.48.181.192 port 46270 [preauth]
show less
May 27 18:24:01 dabeau sshd[8044]: Invalid user usuarioftp from 120.48.181.192 port 47354
May 27 18: ...
show moreMay 27 18:24:01 dabeau sshd[8044]: Invalid user usuarioftp from 120.48.181.192 port 47354
May 27 18:24:01 dabeau sshd[8044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.181.192
May 27 18:24:03 dabeau sshd[8044]: Failed password for invalid user usuarioftp from 120.48.181.192 port 47354 ssh2
...
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-27T16:59:17Z and 2026-05-2 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-27T16:59:17Z and 2026-05-27T18:20:37Z
show less
This IP address carried out 213 port scanning attempts on 26-05-2026. For more information or to rep ...
show moreThis IP address carried out 213 port scanning attempts on 26-05-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
This IP address carried out 43 SSH credential attack (attempts) on 26-05-2026. For more information ...
show moreThis IP address carried out 43 SSH credential attack (attempts) on 26-05-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Brute-Force
SSH
Showing 121 to
135
of 6735 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩