This IP address has been reported a total of
4,526
times from
578 distinct
sources.
120.48.199.28 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2025-12-22T04:38:19.699264+00:00 hms84483 sshd-session[2736834]: Failed password for root from 120.4 ...
show more2025-12-22T04:38:19.699264+00:00 hms84483 sshd-session[2736834]: Failed password for root from 120.48.199.28 port 53980 ssh2
2025-12-22T04:38:24.086525+00:00 hms84483 sshd-session[2736840]: Invalid user pi from 120.48.199.28 port 53990
2025-12-22T04:38:24.350143+00:00 hms84483 sshd-session[2736840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
2025-12-22T04:38:26.177776+00:00 hms84483 sshd-session[2736840]: Failed password for invalid user pi from 120.48.199.28 port 53990 ssh2
2025-12-22T04:38:35.626918+00:00 hms84483 sshd-session[2736869]: Invalid user lighthouse from 120.48.199.28 port 58606
...
show less
2025-12-22T03:36:32.313510+01:00 donarev419.com sshd[3147360]: Invalid user from 120.48.199.28 port ...
show more2025-12-22T03:36:32.313510+01:00 donarev419.com sshd[3147360]: Invalid user from 120.48.199.28 port 43158
...
show less
2025-12-22T02:40:58.569441+01:00 mail sshd[2382592]: Invalid user mongo from 120.48.199.28 port 5345 ...
show more2025-12-22T02:40:58.569441+01:00 mail sshd[2382592]: Invalid user mongo from 120.48.199.28 port 53456
2025-12-22T02:40:58.752795+01:00 mail sshd[2382592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
2025-12-22T02:41:00.617455+01:00 mail sshd[2382592]: Failed password for invalid user mongo from 120.48.199.28 port 53456 ssh2
...
show less
2025-12-21T22:15:00.324145+01:00 www4 sshd-session[3776545]: Invalid user from 120.48.199.28 port 4 ...
show more2025-12-21T22:15:00.324145+01:00 www4 sshd-session[3776545]: Invalid user from 120.48.199.28 port 40522
2025-12-21T22:15:38.931759+01:00 www4 sshd-session[3778476]: Invalid user pi from 120.48.199.28 port 44354
2025-12-21T22:15:38.931759+01:00 www4 sshd-session[3778476]: Invalid user pi from 120.48.199.28 port 44354
2025-12-21T22:15:39.120493+01:00 www4 sshd-session[3778476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
2025-12-21T22:15:40.619292+01:00 www4 sshd-session[3778476]: Failed password for invalid user pi from 120.48.199.28 port 44354 ssh2
...
show less
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
Anonymous
2025-12-21T23:07:15.017839+02:00 mail sshd[93860]: Invalid user hadoop from 120.48.199.28 port 41470 ...
show more2025-12-21T23:07:15.017839+02:00 mail sshd[93860]: Invalid user hadoop from 120.48.199.28 port 41470
2025-12-21T23:07:15.219455+02:00 mail sshd[93860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
2025-12-21T23:07:17.824866+02:00 mail sshd[93860]: Failed password for invalid user hadoop from 120.48.199.28 port 41470 ssh2
...
show less
SSH
Showing 4441 to
4455
of 4526 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩