This IP address has been reported a total of
1,791
times from
675 distinct
sources.
120.48.36.106 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
Brute-Force
SSH
Anonymous
2026-05-30T21:28:26.886972-07:00 hessvillage.com sshd[3523644]: Invalid user user from 120.48.36.106 ...
show more2026-05-30T21:28:26.886972-07:00 hessvillage.com sshd[3523644]: Invalid user user from 120.48.36.106 port 35400
2026-05-30T21:28:35.622612-07:00 hessvillage.com sshd[3523646]: Invalid user user from 120.48.36.106 port 35408
2026-05-30T21:28:38.327642-07:00 hessvillage.com sshd[3523648]: Invalid user user from 120.48.36.106 port 37874
2026-05-30T21:28:41.510765-07:00 hessvillage.com sshd[3523650]: Invalid user user from 120.48.36.106 port 37880
2026-05-30T21:28:44.712558-07:00 hessvillage.com sshd[3523652]: Invalid user user from 120.48.36.106 port 34858
...
show less
2026-05-30T21:39:34.043630+02:00 blinx-rpi4 endlessh[359]: 2026-05-30T19:39:34.043Z CLOSE host=::fff ...
show more2026-05-30T21:39:34.043630+02:00 blinx-rpi4 endlessh[359]: 2026-05-30T19:39:34.043Z CLOSE host=::ffff:120.48.36.106 port=38284 fd=4 time=20.020 bytes=26
...
show less
Brute-Force
SSH
Anonymous
2026-05-31T03:10:00.902495+08:00 kltw-debian sshd[85864]: Connection closed by authenticating user r ...
show more2026-05-31T03:10:00.902495+08:00 kltw-debian sshd[85864]: Connection closed by authenticating user root 120.48.36.106 port 53334 [preauth]
2026-05-31T03:30:49.042140+08:00 kltw-debian sshd[85921]: Connection closed by authenticating user root 120.48.36.106 port 57306 [preauth]
2026-05-31T03:30:51.374704+08:00 kltw-debian sshd[85923]: Connection closed by authenticating user root 120.48.36.106 port 41640 [preauth]
2026-05-31T03:30:54.710007+08:00 kltw-debian sshd[85925]: Connection closed by authenticating user root 120.48.36.106 port 41650 [preauth]
2026-05-31T03:30:56.186199+08:00 kltw-debian sshd[85928]: Connection closed by authenticating user root 120.48.36.106 port 33864 [preauth]
...
show less
May 30 18:14:36 epaper-docker-02 sshd[3356508]: User root from 120.48.36.106 not allowed because non ...
show moreMay 30 18:14:36 epaper-docker-02 sshd[3356508]: User root from 120.48.36.106 not allowed because none of user's groups are listed in AllowGroups
May 30 18:14:37 epaper-docker-02 sshd[3356508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.36.106 user=root
May 30 18:14:38 epaper-docker-02 sshd[3356508]: Failed password for invalid user root from 120.48.36.106 port 45206 ssh2
May 30 18:14:40 epaper-docker-02 sshd[3356835]: Connection from 120.48.36.106 port 45210 on 176.9.120.211 port 22 rdomain ""
May 30 18:14:47 epaper-docker-02 sshd[3356835]: User root from 120.48.36.106 not allowed because none of user's groups are listed in AllowGroups
...
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
2026-05-30T19:12:04.368548+09:00 no6 sshd[534103]: Connection closed by authenticating user root 120 ...
show more2026-05-30T19:12:04.368548+09:00 no6 sshd[534103]: Connection closed by authenticating user root 120.48.36.106 port 37326 [preauth]
...
show less
May 30 06:33:25 ssh sshd-session[52015]: User root from 120.48.36.106 not allowed because not listed ...
show moreMay 30 06:33:25 ssh sshd-session[52015]: User root from 120.48.36.106 not allowed because not listed in AllowUsers
May 30 06:33:25 ssh sshd-session[52015]: Connection closed by invalid user root 120.48.36.106 port 52094 [preauth]
May 30 06:34:30 ssh sshd-session[52021]: User root from 120.48.36.106 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
Showing 1 to
15
of 1791 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩