This IP address has been reported a total of
22
times from
20 distinct
sources.
120.48.84.131 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
This IP address carried out 7 port scanning attempts on 05-07-2026. For more information or to repor ...
show moreThis IP address carried out 7 port scanning attempts on 05-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
(sshd) Failed SSH login from 120.48.84.131 (CN/China/-): 1 in the last 3600 secs; Ports: *; Directio ...
show more(sshd) Failed SSH login from 120.48.84.131 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: 0; Trigger: LF_TRIGGER; Logs: 2026-07-06T01:50:15.811181+00:00 francesko sshd[361010]: Invalid user oa from 120.48.84.131 port 33194
show less
2026-07-06T05:17:14.327650+03:30 vm940970 sshd[207313]: Invalid user oa from 120.48.84.131 port 4460 ...
show more2026-07-06T05:17:14.327650+03:30 vm940970 sshd[207313]: Invalid user oa from 120.48.84.131 port 44600
...
show less
Jul 5 21:43:08 fell sshd[295086]: Invalid user admin from 120.48.84.131 port 52626
Jul 5 21:58:10 ...
show moreJul 5 21:43:08 fell sshd[295086]: Invalid user admin from 120.48.84.131 port 52626
Jul 5 21:58:10 fell sshd[295151]: User root from 120.48.84.131 not allowed because not listed in AllowUsers
Jul 5 22:25:32 fell sshd[295435]: Invalid user centos from 120.48.84.131 port 48664
...
show less
[mirai-detector honeypot] Inbound attack against our honeypot on tcp/2222 (ssh).
Family fingerprint: ...
show more[mirai-detector honeypot] Inbound attack against our honeypot on tcp/2222 (ssh).
Family fingerprint: ssh-bruteforce
Commands captured:
$ SSH-2.0-libssh_0.9.6
show less
2026-07-05T18:15:28.919845+02:00 admin sshd[2437677]: Invalid user test from 120.48.84.131 port 4376 ...
show more2026-07-05T18:15:28.919845+02:00 admin sshd[2437677]: Invalid user test from 120.48.84.131 port 43768
2026-07-05T18:15:28.921911+02:00 admin sshd[2437677]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.84.131
2026-07-05T18:15:31.300513+02:00 admin sshd[2437677]: Failed password for invalid user test from 120.48.84.131 port 43768 ssh2
2026-07-05T18:16:14.711967+02:00 admin sshd[2437706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.84.131 user=root
2026-07-05T18:16:16.738999+02:00 admin sshd[2437706]: Failed password for root from 120.48.84.131 port 43118 ssh2
...
show less
120.48.84.131 (CN/China/-), 5 distributed sshd attacks on account [REDACTED] in the last 3600 secs; ...
show more120.48.84.131 (CN/China/-), 5 distributed sshd attacks on account [REDACTED] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jul 5 00:16:21 sshd[460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.165.27.83 user=[USERNAME]
show less