This IP address has been reported a total of
4,523
times from
578 distinct
sources.
120.48.199.28 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-03T05:56:47.315390+02:00 pokevador sshd[1334415]: Invalid user hadoop from 120.48.199.28 por ...
show more2026-06-03T05:56:47.315390+02:00 pokevador sshd[1334415]: Invalid user hadoop from 120.48.199.28 port 50814
2026-06-03T05:56:47.514824+02:00 pokevador sshd[1334415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
2026-06-03T05:56:49.505090+02:00 pokevador sshd[1334415]: Failed password for invalid user hadoop from 120.48.199.28 port 50814 ssh2
...
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: tomcat, Pass: [REDACTED]
2026-06-03T05:41:18.704129+02:00 pokevador sshd[1325414]: Failed password for invalid user ranger fr ...
show more2026-06-03T05:41:18.704129+02:00 pokevador sshd[1325414]: Failed password for invalid user ranger from 120.48.199.28 port 57622 ssh2
2026-06-03T05:41:29.629717+02:00 pokevador sshd[1325522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28 user=root
2026-06-03T05:41:31.593383+02:00 pokevador sshd[1325522]: Failed password for root from 120.48.199.28 port 49836 ssh2
...
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: git, Pass: [REDACTED]
2026-06-03T05:25:57.489946+02:00 pokevador sshd[1316963]: pam_unix(sshd:auth): authentication failur ...
show more2026-06-03T05:25:57.489946+02:00 pokevador sshd[1316963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28 user=root
2026-06-03T05:25:59.841520+02:00 pokevador sshd[1316963]: Failed password for root from 120.48.199.28 port 44106 ssh2
2026-06-03T05:26:08.578822+02:00 pokevador sshd[1317072]: Invalid user pi from 120.48.199.28 port 56620
...
show less
2026-06-03T05:22:00.877122+02:00 ariane-Precision-Tower-5810 sshd[298892]: Invalid user from 120.48 ...
show more2026-06-03T05:22:00.877122+02:00 ariane-Precision-Tower-5810 sshd[298892]: Invalid user from 120.48.199.28 port 56290
...
show less
2026-06-03T09:04:50.684900+06:00 zabbix sshd[466672]: Failed password for root from 120.48.199.28 po ...
show more2026-06-03T09:04:50.684900+06:00 zabbix sshd[466672]: Failed password for root from 120.48.199.28 port 50168 ssh2
2026-06-03T09:04:56.511576+06:00 zabbix sshd[466678]: Invalid user pi from 120.48.199.28 port 56522
...
show less
Jun 3 02:53:51 v3 sshd[2382921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ...
show moreJun 3 02:53:51 v3 sshd[2382921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28 user=root
Jun 3 02:53:53 v3 sshd[2382921]: Failed password for invalid user root from 120.48.199.28 port 42318 ssh2
Jun 3 02:53:55 v3 sshd[2382924]: Invalid user pi from 120.48.199.28 port 42336
Jun 3 02:53:55 v3 sshd[2382924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
Jun 3 02:53:57 v3 sshd[2382924]: Failed password for invalid user pi from 120.48.199.28 port 42336 ssh2
...
show less
2026-06-03T08:55:50.910780+09:00 *** sshd-session[1419745]: pam_unix(sshd:auth): authentication fai ...
show more2026-06-03T08:55:50.910780+09:00 *** sshd-session[1419745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28 user=root
2026-06-03T08:55:53.045608+09:00 *** sshd-session[1419745]: Failed password for root from 120.48.199.28 port 42874 ssh2
2026-06-03T08:56:03.765817+09:00 *** sshd-session[1419796]: Invalid user pi from 120.48.199.28 port 56920
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: www, Pass: [REDACTED]
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: gitlab, Pass: [REDACTED]
Brute-Force
SSH
Showing 31 to
45
of 4523 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩