This IP address has been reported a total of
353
times from
212 distinct
sources.
120.48.54.98 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-07T02:32:55.282243+00:00 edge-mini sshd[401396]: Failed password for root from 120.48.54.98 ...
show more2026-06-07T02:32:55.282243+00:00 edge-mini sshd[401396]: Failed password for root from 120.48.54.98 port 50006 ssh2
2026-06-07T02:33:09.269560+00:00 edge-mini sshd[401399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.98 user=root
2026-06-07T02:33:11.237996+00:00 edge-mini sshd[401399]: Failed password for root from 120.48.54.98 port 47058 ssh2
...
show less
Jun 6 21:28:43 f2b auth.info sshd[16027]: Failed password for root from 120.48.54.98 port 33030 ssh ...
show moreJun 6 21:28:43 f2b auth.info sshd[16027]: Failed password for root from 120.48.54.98 port 33030 ssh2
Jun 6 21:29:00 f2b auth.info sshd[16029]: Failed password for root from 120.48.54.98 port 45330 ssh2
Jun 6 21:29:17 f2b auth.info sshd[16032]: Failed password for root from 120.48.54.98 port 56412 ssh2
...
show less
2026-06-07T04:52:08.352774+08:00 VM-8-9-debian sshd[1162378]: Failed password for root from 120.48.5 ...
show more2026-06-07T04:52:08.352774+08:00 VM-8-9-debian sshd[1162378]: Failed password for root from 120.48.54.98 port 55410 ssh2
2026-06-07T04:52:11.036141+08:00 VM-8-9-debian sshd[1162380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.98 user=root
2026-06-07T04:52:12.811152+08:00 VM-8-9-debian sshd[1162380]: Failed password for root from 120.48.54.98 port 59052 ssh2
...
show less
2026-06-06T22:29:01.953746+02:00 care.dolphin-it.de sshd-session[2416172]: Connection closed by auth ...
show more2026-06-06T22:29:01.953746+02:00 care.dolphin-it.de sshd-session[2416172]: Connection closed by authenticating user root 120.48.54.98 port 53382 [preauth]
2026-06-06T22:29:05.089513+02:00 care.dolphin-it.de sshd-session[2416186]: Connection closed by authenticating user root 120.48.54.98 port 59768 [preauth]
2026-06-06T22:29:06.018849+02:00 care.dolphin-it.de sshd-session[2416195]: Connection closed by authenticating user root 120.48.54.98 port 35372 [preauth]
2026-06-06T22:29:23.445860+02:00 care.dolphin-it.de sshd-session[2416197]: Connection closed by authenticating user root 120.48.54.98 port 36158 [preauth]
2026-06-06T22:29:27.006756+02:00 care.dolphin-it.de sshd-session[2416246]: Connection closed by authenticating user root 120.48.54.98 port 51034 [preauth]
show less
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2026-06-06T12:47:18Z and 2026-06-0 ...
show moreCowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2026-06-06T12:47:18Z and 2026-06-06T12:47:49Z
show less
Brute-Force
SSH
Showing 1 to
15
of 353 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩