This IP address has been reported a total of
4,528
times from
578 distinct
sources.
120.48.199.28 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Dec 23 17:17:53 newyork sshd[385439]: Failed password for root from 120.48.199.28 port 45370 ssh2
De ...
show moreDec 23 17:17:53 newyork sshd[385439]: Failed password for root from 120.48.199.28 port 45370 ssh2
Dec 23 17:17:54 newyork sshd[385442]: Invalid user pi from 120.48.199.28 port 45382
Dec 23 17:17:54 newyork sshd[385442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
Dec 23 17:17:56 newyork sshd[385442]: Failed password for invalid user pi from 120.48.199.28 port 45382 ssh2
Dec 23 17:18:07 newyork sshd[385455]: Invalid user mongo from 120.48.199.28 port 41234
...
show less
2025-12-23T21:42:28.792336+01:00 mail sshd-session[1763492]: Invalid user from 120.48.199.28 port 5 ...
show more2025-12-23T21:42:28.792336+01:00 mail sshd-session[1763492]: Invalid user from 120.48.199.28 port 55550
2025-12-23T21:42:57.935746+01:00 mail sshd-session[1763506]: Invalid user pi from 120.48.199.28 port 58854
2025-12-23T21:43:13.204076+01:00 mail sshd-session[1763575]: Invalid user apache from 120.48.199.28 port 50270
2025-12-23T21:43:15.255631+01:00 mail sshd-session[1763575]: Failed password for invalid user apache from 120.48.199.28 port 50270 ssh2
2025-12-23T21:43:50.508832+01:00 mail sshd-session[1763684]: Invalid user dolphinscheduler from 120.48.199.28 port 44250
...
show less
2025-12-23T18:40:56.430992+00:00 nbg-vs01-mailserver sshd-session[2053594]: Invalid user wang from 1 ...
show more2025-12-23T18:40:56.430992+00:00 nbg-vs01-mailserver sshd-session[2053594]: Invalid user wang from 120.48.199.28 port 56948
2025-12-23T18:40:56.617416+00:00 nbg-vs01-mailserver sshd-session[2053594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
2025-12-23T18:40:58.091998+00:00 nbg-vs01-mailserver sshd-session[2053594]: Failed password for invalid user wang from 120.48.199.28 port 56948 ssh2
...
show less
2025-12-23T14:40:17.063843+00:00 personaldiamant3 sshd[3891925]: Invalid user pi from 120.48.199.28 ...
show more2025-12-23T14:40:17.063843+00:00 personaldiamant3 sshd[3891925]: Invalid user pi from 120.48.199.28 port 41108
2025-12-23T14:40:17.062700+00:00 personaldiamant3 sshd[3891924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28 user=root
2025-12-23T14:40:18.671582+00:00 personaldiamant3 sshd[3891924]: Failed password for root from 120.48.199.28 port 41104 ssh2
...
show less
2025-12-23T15:18:41.739229+02:00 khatuna sshd-session[1388446]: Invalid user oracle from 120.48.199. ...
show more2025-12-23T15:18:41.739229+02:00 khatuna sshd-session[1388446]: Invalid user oracle from 120.48.199.28 port 54850
2025-12-23T15:18:43.578380+02:00 khatuna sshd-session[1388446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
2025-12-23T15:18:45.440724+02:00 khatuna sshd-session[1388446]: Failed password for invalid user oracle from 120.48.199.28 port 54850 ssh2
2025-12-23T15:18:46.601507+02:00 khatuna sshd-session[1388384]: Invalid user pi from 120.48.199.28 port 39842
2025-12-23T15:18:52.018210+02:00 khatuna sshd-session[1388526]: Invalid user oracle from 120.48.199.28 port 53878
...
show less
2025-12-23T14:17:36.152130+01:00 tlgy-node0 sshd[2356163]: Invalid user from 120.48.199.28 port 597 ...
show more2025-12-23T14:17:36.152130+01:00 tlgy-node0 sshd[2356163]: Invalid user from 120.48.199.28 port 59780
2025-12-23T14:18:27.603403+01:00 tlgy-node0 sshd[2356180]: Invalid user hive from 120.48.199.28 port 45260
2025-12-23T14:18:27.818517+01:00 tlgy-node0 sshd[2356180]: Failed password for invalid user hive from 120.48.199.28 port 45260 ssh2
...
show less
Brute-Force
SSH
Anonymous
sshd
Brute-Force
SSH
Showing 4381 to
4395
of 4528 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩