This IP address has been reported a total of
4,526
times from
578 distinct
sources.
120.48.199.28 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2025-12-21T21:32:15.777144chnode7 sshd[1238932]: Invalid user developer from 120.48.199.28 port 4737 ...
show more2025-12-21T21:32:15.777144chnode7 sshd[1238932]: Invalid user developer from 120.48.199.28 port 47374
2025-12-21T21:32:13.545405chnode7 sshd[1238535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28 user=root
2025-12-21T21:32:15.918105chnode7 sshd[1238535]: Failed password for root from 120.48.199.28 port 47372 ssh2
2025-12-21T21:32:15.965732chnode7 sshd[1238932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
2025-12-21T21:32:17.612425chnode7 sshd[1238932]: Failed password for invalid user developer from 120.48.199.28 port 47374 ssh2
...
show less
Brute-Force
SSH
Anonymous
2025-12-21T22:17:53.271119+02:00 mailserver sshd-session[3756437]: Invalid user user from 120.48.199 ...
show more2025-12-21T22:17:53.271119+02:00 mailserver sshd-session[3756437]: Invalid user user from 120.48.199.28 port 50236
2025-12-21T22:17:53.447429+02:00 mailserver sshd-session[3756437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
2025-12-21T22:17:55.786630+02:00 mailserver sshd-session[3756437]: Failed password for invalid user user from 120.48.199.28 port 50236 ssh2
2025-12-21T22:17:56.752616+02:00 mailserver sshd-session[3756437]: Connection closed by invalid user user 120.48.199.28 port 50236 [preauth]
...
show less
2025-12-21T13:58:08.140815+02:00 blinx-rpi4 endlessh[359]: 2025-12-21T11:58:08.140Z CLOSE host=::fff ...
show more2025-12-21T13:58:08.140815+02:00 blinx-rpi4 endlessh[359]: 2025-12-21T11:58:08.140Z CLOSE host=::ffff:120.48.199.28 port=56376 fd=4 time=20.020 bytes=5
...
show less
2025-12-21T13:17:50.855046tim.mtkrbti.by sshd[22919]: Invalid user user from 120.48.199.28 port 4705 ...
show more2025-12-21T13:17:50.855046tim.mtkrbti.by sshd[22919]: Invalid user user from 120.48.199.28 port 47050
2025-12-21T13:17:51.067000tim.mtkrbti.by sshd[22919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
2025-12-21T13:17:53.260597tim.mtkrbti.by sshd[22919]: Failed password for invalid user user from 120.48.199.28 port 47050 ssh2
...
show less
Detected multiple authentication failures and invalid user attempts from IP address 120.48.199.28 on ...
show moreDetected multiple authentication failures and invalid user attempts from IP address 120.48.199.28 on [NL] Lobo Node.
show less
Brute-Force
SSH
Showing 4456 to
4470
of 4526 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩