This IP address has been reported a total of
139
times from
97 distinct
sources.
120.48.6.172 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-16T23:51:49.083686+00:00 server sshd[289536]: Invalid user ftp_user from 120.48.6.172 port 3 ...
show more2026-09-16T23:51:49.083686+00:00 server sshd[289536]: Invalid user ftp_user from 120.48.6.172 port 37426
2026-09-16T23:52:17.607231+00:00 server sshd[289540]: Invalid user www from 120.48.6.172 port 51498
...
show less
2026-09-17T01:35:17.267904+02:00 cu94u8qp sshd-session[113637]: Invalid user alumno from 120.48.6.17 ...
show more2026-09-17T01:35:17.267904+02:00 cu94u8qp sshd-session[113637]: Invalid user alumno from 120.48.6.172 port 41516
2026-09-17T01:35:17.425268+02:00 cu94u8qp sshd-session[113637]: Disconnected from invalid user alumno 120.48.6.172 port 41516 [preauth]
2026-09-17T01:44:32.264046+02:00 cu94u8qp sshd-session[113807]: Disconnected from authenticating user root 120.48.6.172 port 42722 [preauth]
2026-09-17T01:49:46.569788+02:00 cu94u8qp sshd-session[113920]: Disconnected from authenticating user root 120.48.6.172 port 33340 [preauth]
2026-09-17T01:51:14.010304+02:00 cu94u8qp sshd-session[113954]: Invalid user ftp_user from 120.48.6.172 port 47554
...
show less
SSH honeypot: automated brute-force login attempts against a decoy server. Source seen attacking a p ...
show moreSSH honeypot: automated brute-force login attempts against a decoy server. Source seen attacking a public sensor.
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
Log Entry: 2026-09-16T19:45:12877+00:00 abuse sshd[3295028]: Invalid user admin from 120.48.6.172 p ...
show moreLog Entry: 2026-09-16T19:45:12877+00:00 abuse sshd[3295028]: Invalid user admin from 120.48.6.172 port 54416
Log Entry: 2026-09-16T20:03:36253+00:00 abuse sshd[3324625]: Invalid user web from 120.48.6.172 port 48106
Log Entry: 2026-09-16T20:12:26998+00:00 abuse sshd[3336612]: Invalid user dspace from 120.48.6.172 port 44514
Log Entry: ...
show less
2026-09-16T21:38:45.566454+02:00 hz-dedi-sx134-fsn sshd-session[1303005]: Invalid user admin from 12 ...
show more2026-09-16T21:38:45.566454+02:00 hz-dedi-sx134-fsn sshd-session[1303005]: Invalid user admin from 120.48.6.172 port 33704
2026-09-16T22:07:35.901161+02:00 hz-dedi-sx134-fsn sshd-session[1326205]: Invalid user server from 120.48.6.172 port 58068
2026-09-16T22:10:17.603764+02:00 hz-dedi-sx134-fsn sshd-session[1328313]: Invalid user gameserver from 120.48.6.172 port 41688
...
show less
2026-09-16T09:54:05.096293+00:00 de-fra2-rpki1 sshd[312780]: Invalid user schueler from 120.48.6.172 ...
show more2026-09-16T09:54:05.096293+00:00 de-fra2-rpki1 sshd[312780]: Invalid user schueler from 120.48.6.172 port 58008
2026-09-16T09:57:43.731933+00:00 de-fra2-rpki1 sshd[312802]: Invalid user newuser from 120.48.6.172 port 39156
2026-09-16T10:01:35.229419+00:00 de-fra2-rpki1 sshd[312813]: Invalid user testserver from 120.48.6.172 port 59690
...
show less
Brute-Force
SSH
Anonymous
2026-09-16T09:48:42.664654+00:00 grey.alien.net.au sshd-session[71806]: Invalid user teste from 120. ...
show more2026-09-16T09:48:42.664654+00:00 grey.alien.net.au sshd-session[71806]: Invalid user teste from 120.48.6.172 port 43062
2026-09-16T09:55:49.597249+00:00 grey.alien.net.au sshd-session[71815]: Invalid user android from 120.48.6.172 port 34372
...
show less
2026-09-16T10:29:08.795870+02:00 mail.donarev419.com sshd[2770683]: Invalid user webdev from 120.48. ...
show more2026-09-16T10:29:08.795870+02:00 mail.donarev419.com sshd[2770683]: Invalid user webdev from 120.48.6.172 port 34050
...
show less