This IP address has been reported a total of
1,914
times from
676 distinct
sources.
120.48.7.234 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
🚨 CRITICAL: Real-time threat on Cowrie | unknown | Port 22 | PhantomGrid Real-time Defense
Brute-Force
SSH
Anonymous
Jan 26 03:04:01 f2b auth.info sshd[839928]: Failed password for root from 120.48.7.234 port 52670 ss ...
show moreJan 26 03:04:01 f2b auth.info sshd[839928]: Failed password for root from 120.48.7.234 port 52670 ssh2
Jan 26 03:04:02 f2b auth.info sshd[839930]: Failed password for root from 120.48.7.234 port 58520 ssh2
Jan 26 03:04:09 f2b auth.info sshd[839932]: Failed password for root from 120.48.7.234 port 60002 ssh2
...
show less
2026-01-26T03:43:40.628954+01:00 ns3006402 sshd[3478732]: Failed password for root from 120.48.7.234 ...
show more2026-01-26T03:43:40.628954+01:00 ns3006402 sshd[3478732]: Failed password for root from 120.48.7.234 port 32928 ssh2
2026-01-26T03:43:53.981857+01:00 ns3006402 sshd[3478760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.7.234 user=root
2026-01-26T03:43:55.952853+01:00 ns3006402 sshd[3478760]: Failed password for root from 120.48.7.234 port 37916 ssh2
...
show less
Jan 25 22:38:34 : Failed password for root from 120.48.7.234 port 37154 ssh2 Jan 25 22:38:36 : pam_u ...
show moreJan 25 22:38:34 : Failed password for root from 120.48.7.234 port 37154 ssh2 Jan 25 22:38:36 : pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.7.234 user=root Jan 25 22:38:39 : Failed password for root f
show less
2026-01-25T18:20:18.609067 ******* sshd[3573715]: Connection closed by authenticating user root 120. ...
show more2026-01-25T18:20:18.609067 ******* sshd[3573715]: Connection closed by authenticating user root 120.48.7.234 port 34224 [preauth]
2026-01-25T18:20:19.475779 ******* sshd[3573783]: Connection closed by authenticating user root 120.48.7.234 port 37368 [preauth]
2026-01-25T18:20:20.409394 ******* sshd[3573785]: Connection closed by authenticating user root 120.48.7.234 port 38092 [preauth]
show less
Jan 25 14:50:33 172-232-1-224 sshd[3277434]: Failed password for root from 120.48.7.234 port 60574 s ...
show moreJan 25 14:50:33 172-232-1-224 sshd[3277434]: Failed password for root from 120.48.7.234 port 60574 ssh2
Jan 25 14:50:42 172-232-1-224 sshd[3277439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.7.234 user=root
Jan 25 14:50:44 172-232-1-224 sshd[3277439]: Failed password for root from 120.48.7.234 port 53400 ssh2
Jan 25 14:51:02 172-232-1-224 sshd[3277444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.7.234 user=root
Jan 25 14:51:04 172-232-1-224 sshd[3277444]: Failed password for root from 120.48.7.234 port 51074 ssh2
...
show less
Brute-Force
SSH
Showing 1711 to
1725
of 1914 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩