This IP address has been reported a total of
35
times from
32 distinct
sources.
120.48.54.219 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-07T09:45:35.953286+01:00 rpi5 sshd[1439512]: Failed password for root from 120.48.54.219 por ...
show more2026-07-07T09:45:35.953286+01:00 rpi5 sshd[1439512]: Failed password for root from 120.48.54.219 port 40022 ssh2
2026-07-07T09:45:39.557809+01:00 rpi5 sshd[1439519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.219 user=root
2026-07-07T09:45:41.913523+01:00 rpi5 sshd[1439519]: Failed password for root from 120.48.54.219 port 42358 ssh2
...
show less
2026-07-07T01:40:28.694865+00:00 edge-chf-tpe01.int.pdx.net.uk sshd[4177657]: Invalid user user from ...
show more2026-07-07T01:40:28.694865+00:00 edge-chf-tpe01.int.pdx.net.uk sshd[4177657]: Invalid user user from 120.48.54.219 port 33958
2026-07-07T01:40:30.122510+00:00 edge-chf-tpe01.int.pdx.net.uk sshd[4177735]: Invalid user user from 120.48.54.219 port 33968
2026-07-07T01:40:31.329454+00:00 edge-chf-tpe01.int.pdx.net.uk sshd[4177908]: Invalid user user from 120.48.54.219 port 33978
...
show less
Jul 6 22:12:25 instance1 sshd[2094691]: Connection closed by authenticating user root 120.48.54.219 ...
show moreJul 6 22:12:25 instance1 sshd[2094691]: Connection closed by authenticating user root 120.48.54.219 port 39286 [preauth]
...
show less
2026-07-06T16:09:57.176361+02:00 svr10 sshd[1524370]: Connection closed by authenticating user root ...
show more2026-07-06T16:09:57.176361+02:00 svr10 sshd[1524370]: Connection closed by authenticating user root 120.48.54.219 port 33228 [preauth]
2026-07-06T16:12:00.030287+02:00 svr10 sshd[1524753]: Connection closed by authenticating user root 120.48.54.219 port 40148 [preauth]
2026-07-06T16:12:01.263779+02:00 svr10 sshd[1524761]: Connection closed by authenticating user root 120.48.54.219 port 40150 [preauth]
...
show less
2026-07-06T12:40:46.331453+00:00 [host] sshd[688917]: User root from 120.48.54.219 not allowed becau ...
show more2026-07-06T12:40:46.331453+00:00 [host] sshd[688917]: User root from 120.48.54.219 not allowed because not listed in AllowUsers
2026-07-06T12:44:52.107601+00:00 [host] sshd[688974]: User root from 120.48.54.219 not allowed because not listed in AllowUsers
2026-07-06T12:53:09.069407+00:00 [host] sshd[689026]: User root from 120.48.54.219 not allowed because not listed in AllowUsers
show less
SSH Brute force: 89 attempts were recorded from 120.48.54.219
2026-07-06T11:32:33+02:00 Connection c ...
show moreSSH Brute force: 89 attempts were recorded from 120.48.54.219
2026-07-06T11:32:33+02:00 Connection closed by authenticating user root 120.48.54.219 port 43756 [preauth]
2026-07-06T11:32:36+02:00 Connection closed by authenticating user root 120.48.54.219 port 38814 [preauth]
2026-07-06T11:32:37+02:00 Connection closed by authenticating user root 120.48.54.219 port 38816 [preauth]
2026-07-06T11:32:38+02:00 Connection closed by authenticating user root 120.48.54.219 port 38826 [preauth]
2026-07-06T11:32:39+02:00 Connection closed by authenticating user root 120.48.54.219 port 38834 [preauth]
2026-07-06T11:32:42+02:00 Connection closed by authenticating user root 120.48.54.219 port 38838 [preauth]
2026-07-06T11:32:43+02:00 Connection closed by authenticating user root 120.48.54.219 port 38854 [preauth]
2026-07-06T11:32:48+02:00 Connection closed by authenticating user root 120.48.54.219 por
show less
Brute-Force
SSH
Showing 1 to
15
of 35 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩