This IP address has been reported a total of
4,523
times from
578 distinct
sources.
120.48.199.28 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-05-30T04:34:25.298038+00:00 de2.cbz.pw sshd[2190243]: Failed password for root from 120.48.199. ...
show more2026-05-30T04:34:25.298038+00:00 de2.cbz.pw sshd[2190243]: Failed password for root from 120.48.199.28 port 52152 ssh2
2026-05-30T04:35:24.013634+00:00 de2.cbz.pw sshd[2190259]: Invalid user pi from 120.48.199.28 port 54174
2026-05-30T04:35:24.227469+00:00 de2.cbz.pw sshd[2190259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
2026-05-30T04:35:25.773190+00:00 de2.cbz.pw sshd[2190259]: Failed password for invalid user pi from 120.48.199.28 port 54174 ssh2
2026-05-30T04:36:23.731363+00:00 de2.cbz.pw sshd[2190265]: Invalid user hive from 120.48.199.28 port 48218
...
show less
2026-05-30T01:52:06.853270+00:00 reliablesite sshd[3715277]: Failed password for root from 120.48.19 ...
show more2026-05-30T01:52:06.853270+00:00 reliablesite sshd[3715277]: Failed password for root from 120.48.199.28 port 42334 ssh2
2026-05-30T01:52:36.897356+00:00 reliablesite sshd[3720542]: Invalid user pi from 120.48.199.28 port 56242
2026-05-30T01:52:37.153190+00:00 reliablesite sshd[3720542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
2026-05-30T01:52:39.527635+00:00 reliablesite sshd[3720542]: Failed password for invalid user pi from 120.48.199.28 port 56242 ssh2
2026-05-30T01:53:08.180873+00:00 reliablesite sshd[3727094]: Invalid user hive from 120.48.199.28 port 58676
...
show less
(sshd) Failed SSH login from 120.48.199.28 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directio ...
show more(sshd) Failed SSH login from 120.48.199.28 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 30 01:50:53 nx1 sshd-session[467188]: Invalid user from 120.48.199.28 port 50940
May 30 01:52:23 nx1 sshd-session[467275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28 user=root
May 30 01:52:25 nx1 sshd-session[467275]: Failed password for root from 120.48.199.28 port 36912 ssh2
May 30 01:52:54 nx1 sshd-session[467305]: Invalid user pi from 120.48.199.28 port 42754
May 30 01:52:56 nx1 sshd-session[467305]: Failed password for invalid user pi from 120.48.199.28 port 42754 ssh2
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: es, Pass: [REDACTED]
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: zabbix, Pass: [REDACTED]
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: mysql, Pass: [REDACTED]
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: root, Pass: [REDACTED]
2026-05-29T23:36:53.526729+03:30 vm940970 sshd[178624]: Invalid user from 120.48.199.28 port 58900
...
show more2026-05-29T23:36:53.526729+03:30 vm940970 sshd[178624]: Invalid user from 120.48.199.28 port 58900
...
show less
Active SSH brute-force detected. Logs: 2026-05-29T09:08:01.140137-04:00 icecast.nashvilledispatch.li ...
show moreActive SSH brute-force detected. Logs: 2026-05-29T09:08:01.140137-04:00 icecast.nashvilledispatch.live sshd[2714568]: Failed password for invalid user oracle from 120.48.199.28 port 52574 ssh2 2026-05-29T09:08:26.684558-04:00 icecast.nashvilledispatch....
show less
SSH
Brute-Force
Anonymous
2026-05-28T14:21:04.729063+02:00 hvs sshd-session[31976]: Invalid user from 120.48.199.28 port 5096 ...
show more2026-05-28T14:21:04.729063+02:00 hvs sshd-session[31976]: Invalid user from 120.48.199.28 port 50964
2026-05-28T14:21:11.910504+02:00 hvs sshd-session[31976]: Connection closed by invalid user 120.48.199.28 port 50964 [preauth]
2026-05-29T00:15:53.221678+02:00 hvs sshd[714]: Timeout before authentication for connection from 120.48.199.28 to 93.123.85.42, pid = 38463
2026-05-29T04:27:18.860827+02:00 hvs sshd[714]: Timeout before authentication for connection from 120.48.199.28 to 93.123.85.42, pid = 42436
2026-05-29T14:49:10.253440+02:00 hvs sshd-session[49552]: Invalid user from 120.48.199.28 port 53470
...
show less
Brute-Force
SSH
Showing 166 to
180
of 4523 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩