This IP address has been reported a total of
54
times from
49 distinct
sources.
120.48.94.250 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-04T21:26:04.524221Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.48.94.250:4094 ...
show more2026-07-04T21:26:04.524221Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.48.94.250:40944 (158.69.22.11:2222) [session: 6b8fa325f814]
2026-07-04T21:26:06.016605Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.48.94.250:40948 (158.69.22.11:2222) [session: 1eb13b4cd781]
...
show less
2026-07-04T11:36:04.064214 upload sshd-session[2026448]: Failed password for root from 120.48.94.250 ...
show more2026-07-04T11:36:04.064214 upload sshd-session[2026448]: Failed password for root from 120.48.94.250 port 60340 ssh2
2026-07-04T11:36:05.592173 upload sshd-session[2026452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.94.250 user=root
2026-07-04T11:36:07.822347 upload sshd-session[2026452]: Failed password for root from 120.48.94.250 port 60350 ssh2
...
show less
[mirai-detector honeypot] Inbound attack against our honeypot on tcp/2222 (ssh).
Commands captured:
...
show more[mirai-detector honeypot] Inbound attack against our honeypot on tcp/2222 (ssh).
Commands captured:
$ SSH-2.0-Go
show less
2026-07-03T00:19:59.665271+03:00 vm3-firstvds.weissbart.me sshd[427820]: Failed password for root fr ...
show more2026-07-03T00:19:59.665271+03:00 vm3-firstvds.weissbart.me sshd[427820]: Failed password for root from 120.48.94.250 port 33042 ssh2
2026-07-03T00:20:04.773448+03:00 vm3-firstvds.weissbart.me sshd[427830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.94.250 user=root
2026-07-03T00:20:07.151995+03:00 vm3-firstvds.weissbart.me sshd[427830]: Failed password for root from 120.48.94.250 port 33058 ssh2
...
show less
2026-07-02T22:11:27.680751+02:00 ovh-proxmox sshd[1761892]: Failed password for root from 120.48.94. ...
show more2026-07-02T22:11:27.680751+02:00 ovh-proxmox sshd[1761892]: Failed password for root from 120.48.94.250 port 42892 ssh2
2026-07-02T22:11:31.808868+02:00 ovh-proxmox sshd[1761914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.94.250 user=root
2026-07-02T22:11:33.544407+02:00 ovh-proxmox sshd[1761914]: Failed password for root from 120.48.94.250 port 36978 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 54 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩