This IP address has been reported a total of
4,523
times from
578 distinct
sources.
120.48.199.28 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Malicious activity detected from this IP during SSH attempts. VPN: No, Datacenter: No, Organization: ...
show moreMalicious activity detected from this IP during SSH attempts. VPN: No, Datacenter: No, Organization: AS38365 Beijing Baidu Netcom Science and Technology Co., Ltd., Region: Guangdong, Log: 2025-12-19T21:48:06.219820 01:00 Administracion sshd[3362899]: Failed password for invalid user gitlab from 120.48.199.28 port 53916 ssh2, Abuse Score: 5, Total Reports: 3
show less
Dec 19 20:51:44 vmi440488 sshd[308761]: Failed password for invalid user postgres from 120.48.199.28 ...
show moreDec 19 20:51:44 vmi440488 sshd[308761]: Failed password for invalid user postgres from 120.48.199.28 port 43056 ssh2
Dec 19 20:51:56 vmi440488 sshd[308775]: Invalid user dev from 120.48.199.28 port 39130
Dec 19 20:51:56 vmi440488 sshd[308775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
Dec 19 20:51:58 vmi440488 sshd[308775]: Failed password for invalid user dev from 120.48.199.28 port 39130 ssh2
Dec 19 20:52:10 vmi440488 sshd[308814]: Invalid user guest from 120.48.199.28 port 42310
...
show less
Dec 19 20:30:37 vmi440488 sshd[306960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreDec 19 20:30:37 vmi440488 sshd[306960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
Dec 19 20:30:40 vmi440488 sshd[306960]: Failed password for invalid user data from 120.48.199.28 port 41614 ssh2
Dec 19 20:30:52 vmi440488 sshd[306997]: Invalid user bigdata from 120.48.199.28 port 35448
Dec 19 20:30:52 vmi440488 sshd[306997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
Dec 19 20:30:53 vmi440488 sshd[306997]: Failed password for invalid user bigdata from 120.48.199.28 port 35448 ssh2
...
show less
Dec 19 20:09:18 vmi440488 sshd[305257]: Failed password for root from 120.48.199.28 port 55946 ssh2
...
show moreDec 19 20:09:18 vmi440488 sshd[305257]: Failed password for root from 120.48.199.28 port 55946 ssh2
Dec 19 20:09:31 vmi440488 sshd[305267]: Invalid user pi from 120.48.199.28 port 58960
Dec 19 20:09:31 vmi440488 sshd[305267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
Dec 19 20:09:33 vmi440488 sshd[305267]: Failed password for invalid user pi from 120.48.199.28 port 58960 ssh2
Dec 19 20:09:46 vmi440488 sshd[305306]: Invalid user hive from 120.48.199.28 port 50074
...
show less
Brute-Force
SSH
Showing 4516 to
4523
of 4523 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩