This IP address has been reported a total of
230
times from
143 distinct
sources.
120.48.36.229 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
May 31 06:59:30 : Failed password for root from 120.48.36.229 port 2092 ssh2 May 31 06:59:53 : pam_u ...
show moreMay 31 06:59:30 : Failed password for root from 120.48.36.229 port 2092 ssh2 May 31 06:59:53 : pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.36.229 user=root May 31 06:59:55 : Failed password for root
show less
2026-05-22T06:53:39.727723+00:00 ks6.hofud.com sshd[636705]: Connection closed by authenticating use ...
show more2026-05-22T06:53:39.727723+00:00 ks6.hofud.com sshd[636705]: Connection closed by authenticating user root 120.48.36.229 port 32654 [preauth]
2026-05-22T06:53:52.530539+00:00 ks6.hofud.com sshd[636728]: Connection closed by authenticating user root 120.48.36.229 port 54556 [preauth]
2026-05-22T06:54:05.704825+00:00 ks6.hofud.com sshd[636735]: Connection closed by authenticating user root 120.48.36.229 port 60316 [preauth]
2026-05-22T06:54:37.158452+00:00 ks6.hofud.com sshd[636747]: Connection closed by authenticating user root 120.48.36.229 port 46864 [preauth]
2026-05-22T06:54:44.493695+00:00 ks6.hofud.com sshd[636784]: Connection closed by authenticating user root 120.48.36.229 port 49700 [preauth]
...
show less
Cluster member (Omitted) (US/United States/-) said, DENY 120.48.36.229, Reason:[(sshd) Failed SSH lo ...
show moreCluster member (Omitted) (US/United States/-) said, DENY 120.48.36.229, Reason:[(sshd) Failed SSH login from 120.48.36.229 (CN/China/-): 3 in the last 3600 secs]
show less
Historical Fail2Ban SSH ban observed on this host. Source: fail2ban.log. Categories: SSH brute-force ...
show moreHistorical Fail2Ban SSH ban observed on this host. Source: fail2ban.log. Categories: SSH brute-force.
show less
SSH Brute force: 18 attempts were recorded from 120.48.36.229
2026-05-10T23:27:03+02:00 Connection c ...
show moreSSH Brute force: 18 attempts were recorded from 120.48.36.229
2026-05-10T23:27:03+02:00 Connection closed by authenticating user root 120.48.36.229 port 25146 [preauth]
2026-05-10T23:27:39+02:00 Connection closed by authenticating user root 120.48.36.229 port 28424 [preauth]
2026-05-10T23:27:50+02:00 Connection closed by authenticating user root 120.48.36.229 port 15226 [preauth]
2026-05-10T23:28:42+02:00 Connection closed by authenticating user root 120.48.36.229 port 47342 [preauth]
2026-05-10T23:29:15+02:00 Connection closed by authenticating user root 120.48.36.229 port 7890 [preauth]
2026-05-10T23:29:29+02:00 Connection closed by authenticating user root 120.48.36.229 port 19588 [preauth]
2026-05-10T23:29:37+02:00 Connection closed by authenticating user root 120.48.36.229 port 34252 [preauth]
2026-05-10T23:29:46+02:00 Connection closed by authenticating user root 120.48.36.229 port
show less
2026-05-10T16:35:45.951918milloweb sshd[27536]: Failed password for root from 120.48.36.229 port 637 ...
show more2026-05-10T16:35:45.951918milloweb sshd[27536]: Failed password for root from 120.48.36.229 port 63712 ssh2
2026-05-10T16:36:22.313600milloweb sshd[27640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.36.229 user=root
2026-05-10T16:36:24.025592milloweb sshd[27640]: Failed password for root from 120.48.36.229 port 36894 ssh2
...
show less
z393: SSH Brute Force from 120.48.36.229 at 2026-05-10 00:37:03 +04
Brute-Force
SSH
Anonymous
May 9 15:15:54 community sshd[2362479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreMay 9 15:15:54 community sshd[2362479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.36.229 user=root
May 9 15:15:56 community sshd[2362479]: Failed password for root from 120.48.36.229 port 11270 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 230 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩