This IP address has been reported a total of
4,530
times from
579 distinct
sources.
120.48.199.28 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
CSF/LFD blocked 120.48.199.28 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SSH ...
show moreCSF/LFD blocked 120.48.199.28 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SSH login from 120.48.199.28 (CN/China/-): 5 in the last 3600 secs. Evidence: Jun 2 05:53:07 paladin sshd[546011]: Invalid user from 120.48.199.28 port 44740
show less
Jun 2 09:33:19 backup sshd[2829504]: Failed password for root from 120.48.199.28 port 37536 ssh2
Ju ...
show moreJun 2 09:33:19 backup sshd[2829504]: Failed password for root from 120.48.199.28 port 37536 ssh2
Jun 2 09:34:17 backup sshd[2829661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28 user=root
Jun 2 09:34:19 backup sshd[2829661]: Failed password for root from 120.48.199.28 port 37830 ssh2
Jun 2 09:35:21 backup sshd[2829793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28 user=root
Jun 2 09:35:22 backup sshd[2829793]: Failed password for root from 120.48.199.28 port 55522 ssh2
...
show less
Jun 2 09:10:59 backup sshd[2826465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJun 2 09:10:59 backup sshd[2826465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
Jun 2 09:11:02 backup sshd[2826465]: Failed password for invalid user dev from 120.48.199.28 port 40460 ssh2
Jun 2 09:11:58 backup sshd[2826602]: Invalid user oceanbase from 120.48.199.28 port 47296
Jun 2 09:11:58 backup sshd[2826602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
Jun 2 09:12:01 backup sshd[2826602]: Failed password for invalid user oceanbase from 120.48.199.28 port 47296 ssh2
...
show less
2026-06-02T09:08:13.281463+00:00 instance-20241019-1127 sshd[2761046]: Invalid user from 120.48.199 ...
show more2026-06-02T09:08:13.281463+00:00 instance-20241019-1127 sshd[2761046]: Invalid user from 120.48.199.28 port 38614
...
show less
2026-06-02T10:52:57.690494+02:00 francesco sshd[909740]: Invalid user vagrant from 120.48.199.28 por ...
show more2026-06-02T10:52:57.690494+02:00 francesco sshd[909740]: Invalid user vagrant from 120.48.199.28 port 48622
2026-06-02T10:52:57.907537+02:00 francesco sshd[909740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
2026-06-02T10:52:59.526144+02:00 francesco sshd[909740]: Failed password for invalid user vagrant from 120.48.199.28 port 48622 ssh2
2026-06-02T10:52:57.907537+02:00 francesco sshd[909740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
2026-06-02T10:52:59.526144+02:00 francesco sshd[909740]: Failed password for invalid user vagrant from 120.48.199.28 port 48622 ssh2
...
show less
Jun 2 08:46:03 backup sshd[2822916]: Failed password for root from 120.48.199.28 port 53836 ssh2
Ju ...
show moreJun 2 08:46:03 backup sshd[2822916]: Failed password for root from 120.48.199.28 port 53836 ssh2
Jun 2 08:46:59 backup sshd[2823066]: Invalid user postgres from 120.48.199.28 port 41940
Jun 2 08:46:59 backup sshd[2823066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
Jun 2 08:47:01 backup sshd[2823066]: Failed password for invalid user postgres from 120.48.199.28 port 41940 ssh2
Jun 2 08:47:59 backup sshd[2823213]: Invalid user dev from 120.48.199.28 port 58092
...
show less
Jun 2 08:20:05 backup sshd[2819053]: Invalid user www from 120.48.199.28 port 36354
Jun 2 08:20:06 ...
show moreJun 2 08:20:05 backup sshd[2819053]: Invalid user www from 120.48.199.28 port 36354
Jun 2 08:20:06 backup sshd[2819053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
Jun 2 08:20:08 backup sshd[2819053]: Failed password for invalid user www from 120.48.199.28 port 36354 ssh2
Jun 2 08:21:05 backup sshd[2819194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28 user=root
Jun 2 08:21:08 backup sshd[2819194]: Failed password for root from 120.48.199.28 port 46630 ssh2
...
show less
Jun 2 07:54:14 backup sshd[2815425]: Invalid user test from 120.48.199.28 port 52856
Jun 2 07:54:1 ...
show moreJun 2 07:54:14 backup sshd[2815425]: Invalid user test from 120.48.199.28 port 52856
Jun 2 07:54:14 backup sshd[2815425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
Jun 2 07:54:16 backup sshd[2815425]: Failed password for invalid user test from 120.48.199.28 port 52856 ssh2
Jun 2 07:55:13 backup sshd[2815556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28 user=root
Jun 2 07:55:15 backup sshd[2815556]: Failed password for root from 120.48.199.28 port 34740 ssh2
...
show less
Jun 2 07:27:21 backup sshd[2811794]: Failed password for invalid user docker from 120.48.199.28 por ...
show moreJun 2 07:27:21 backup sshd[2811794]: Failed password for invalid user docker from 120.48.199.28 port 37078 ssh2
Jun 2 07:28:19 backup sshd[2811926]: Invalid user user from 120.48.199.28 port 52574
Jun 2 07:28:19 backup sshd[2811926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
Jun 2 07:28:21 backup sshd[2811926]: Failed password for invalid user user from 120.48.199.28 port 52574 ssh2
Jun 2 07:29:21 backup sshd[2812066]: Invalid user elastic from 120.48.199.28 port 39382
...
show less
Jun 2 07:02:27 backup sshd[2808394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJun 2 07:02:27 backup sshd[2808394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28 user=root
Jun 2 07:02:29 backup sshd[2808394]: Failed password for root from 120.48.199.28 port 40278 ssh2
Jun 2 07:03:27 backup sshd[2808534]: Invalid user git from 120.48.199.28 port 49746
Jun 2 07:03:27 backup sshd[2808534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
Jun 2 07:03:29 backup sshd[2808534]: Failed password for invalid user git from 120.48.199.28 port 49746 ssh2
...
show less
2026-06-02T07:50:19.401756+01:00 frans sshd[771859]: Invalid user oscar from 120.48.199.28 port 5915 ...
show more2026-06-02T07:50:19.401756+01:00 frans sshd[771859]: Invalid user oscar from 120.48.199.28 port 59156
2026-06-02T07:50:19.628339+01:00 frans sshd[771859]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.199.28
2026-06-02T07:50:21.788558+01:00 frans sshd[771859]: Failed password for invalid user oscar from 120.48.199.28 port 59156 ssh2
...
show less
Brute-Force
SSH
Showing 61 to
75
of 4530 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩