This IP address has been reported a total of
18
times from
18 distinct
sources.
120.48.19.39 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
CSF/LFD blocked 120.48.19.39 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SSH l ...
show moreCSF/LFD blocked 120.48.19.39 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SSH login from 120.48.19.39 (CN/China/-): 5 in the last 3600 secs. Evidence: Jun 28 13:17:47 paladin sshd-session[2232744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.19.39 user=root
show less
2026-06-28T11:36:27.291402Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.48.19.39:40392 ...
show more2026-06-28T11:36:27.291402Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.48.19.39:40392 (158.69.22.11:2222) [session: c9016d7130ad]
2026-06-28T11:36:27.836572Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.48.19.39:40400 (158.69.22.11:2222) [session: 7973908ccfa7]
...
show less
2026-06-27T04:17:07.262251+03:00 vatnik sshd[83714]: error: kex_exchange_identification: Connection ...
show more2026-06-27T04:17:07.262251+03:00 vatnik sshd[83714]: error: kex_exchange_identification: Connection closed by remote host
2026-06-27T04:17:07.263876+03:00 vatnik sshd[83714]: Connection closed by 120.48.19.39 port 40250
...
show less
Detected by CrowdSec on web-c2ce28cf: CrowdSec: crowdsecurity/ssh-slow-bf | ASN: 38365 (Beijing Baid ...
show moreDetected by CrowdSec on web-c2ce28cf: CrowdSec: crowdsecurity/ssh-slow-bf | ASN: 38365 (Beijing Baidu Netcom Science and Technology Co., Ltd.) | Country: CN | Range: 120.48.0.0/16
show less