Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-11-10T09:03:37.217594Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 69.48.228.142:35544 (158.69.22.11:2222) [session: c77ff9f63d63]
2026-11-10T09:03:39.702801Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 69.48.228.142:35554 (1 ...
show more2026-11-10T09:03:37.217594Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 69.48.228.142:35544 (158.69.22.11:2222) [session: c77ff9f63d63]
2026-11-10T09:03:39.702801Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 69.48.228.142:35554 (158.69.22.11:2222) [session: c319f8e395e8]
...
show less
This IP address carried out 16 port scanning attempts on 09-11-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
This IP address carried out 12 SSH credential attack (attempts) on 09-11-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
2026-11-10T02:47:20.489068Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 69.48.228.142:56792 (158.69.22.11:2222) [session: 646084bebe77]
2026-11-10T02:47:22.982075Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 69.48.228.142:60044 (1 ...
show more2026-11-10T02:47:20.489068Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 69.48.228.142:56792 (158.69.22.11:2222) [session: 646084bebe77]
2026-11-10T02:47:22.982075Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 69.48.228.142:60044 (158.69.22.11:2222) [session: 1ebcdd71fafd]
...
show less
2026-11-09T09:10:18.141693Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 69.48.228.142:33486 (158.69.22.11:2222) [session: 6be9ca009cd6]
2026-11-09T09:10:20.680657Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 69.48.228.142:33496 (1 ...
show more2026-11-09T09:10:18.141693Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 69.48.228.142:33486 (158.69.22.11:2222) [session: 6be9ca009cd6]
2026-11-09T09:10:20.680657Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 69.48.228.142:33496 (158.69.22.11:2222) [session: a36d03b42c75]
...
show less
2026-11-07T00:25:46.878153+01:00 diana sshd-session[248728]: Failed password for root from 69.48.228.142 port 35774 ssh2
2026-11-07T00:25:48.634140+01:00 diana sshd-session[248771]: Invalid user alpine from 69.48.228.142 port 35786
2026-11-07T00:25:4 ...
show more2026-11-07T00:25:46.878153+01:00 diana sshd-session[248728]: Failed password for root from 69.48.228.142 port 35774 ssh2
2026-11-07T00:25:48.634140+01:00 diana sshd-session[248771]: Invalid user alpine from 69.48.228.142 port 35786
2026-11-07T00:25:48.826429+01:00 diana sshd-session[248771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.48.228.142
2026-11-07T00:25:49.894517+01:00 diana sshd-session[248771]: Failed password for invalid user alpine from 69.48.228.142 port 35786 ssh2
2026-11-07T00:25:52.922847+01:00 diana sshd-session[248771]: Failed password for invalid user alpine from 69.48.228.142 port 35786 ssh2
...
show less
2026-11-06T16:42:02.225131 main.justuptowngames.com proftpd[3310531]: session[3310531] 0.0.0.0 (69.48.228.142[69.48.228.142]): USER root (Login failed): Incorrect password
2026-11-06T16:42:02.862434 main.justuptowngames.com proftpd[3310531]: session[ ...
show more2026-11-06T16:42:02.225131 main.justuptowngames.com proftpd[3310531]: session[3310531] 0.0.0.0 (69.48.228.142[69.48.228.142]): USER root (Login failed): Incorrect password
2026-11-06T16:42:02.862434 main.justuptowngames.com proftpd[3310531]: session[3310531] 0.0.0.0 (69.48.228.142[69.48.228.142]): USER root (Login failed): Incorrect password
2026-11-06T16:42:04.975208 main.justuptowngames.com proftpd[3310582]: session[3310582] 0.0.0.0 (69.48.228.142[69.48.228.142]): USER alpine: no such user found from 69.48.228.142 [69.48.228.142] to ::ffff:63.141.255.191:2222
2026-11-06T16:42:05.227266 main.justuptowngames.com proftpd[3310582]: session[3310582] 0.0.0.0 (69.48.228.142[69.48.228.142]): USER alpine: no such user found from 69.48.228.142 [69.48.228.142] to ::ffff:63.141.255.191:2222
2026-11-06T16:42:07.312650 main.justuptowngames.com proftpd[3310613]: session[3310613] 0.0.0.0 (69.48.228.142[69.48.228.142]): USER admin: no such user found from 69.48.228.142 [69.48.228.142] to ::ffff:63.14
...
show less
2026-11-07T04:59:56.099563+09:00 host1771041947 sshd[3889550]: Invalid user alpine from 69.48.228.142 port 57878
2026-11-07T04:59:56.805830+09:00 host1771041947 sshd[3889554]: Invalid user admin from 69.48.228.142 port 57892
...
2026-11-06T11:17:56.131470-08:00 us-west sshd[20065]: Failed password for root from 69.48.228.142 port 46394 ssh2
2026-11-06T11:17:58.170811-08:00 us-west sshd[20067]: Invalid user alpine from 69.48.228.142 port 46408
2026-11-06T11:17:58.432830-08:00 ...
show more2026-11-06T11:17:56.131470-08:00 us-west sshd[20065]: Failed password for root from 69.48.228.142 port 46394 ssh2
2026-11-06T11:17:58.170811-08:00 us-west sshd[20067]: Invalid user alpine from 69.48.228.142 port 46408
2026-11-06T11:17:58.432830-08:00 us-west sshd[20067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.48.228.142
2026-11-06T11:18:00.405482-08:00 us-west sshd[20067]: Failed password for invalid user alpine from 69.48.228.142 port 46408 ssh2
2026-11-06T11:18:03.976340-08:00 us-west sshd[20067]: Failed password for invalid user alpine from 69.48.228.142 port 46408 ssh2
...
show less
2026-11-06T14:21:00.683965+01:00 mail.vr9.pro sshd[197434]: Invalid user alpine from 69.48.228.142 port 46520
2026-11-06T14:21:02.026496+01:00 mail.vr9.pro sshd[197824]: Invalid user admin from 69.48.228.142 port 46534
2026-11-06T14:21:03.453721+01:0 ...
show more2026-11-06T14:21:00.683965+01:00 mail.vr9.pro sshd[197434]: Invalid user alpine from 69.48.228.142 port 46520
2026-11-06T14:21:02.026496+01:00 mail.vr9.pro sshd[197824]: Invalid user admin from 69.48.228.142 port 46534
2026-11-06T14:21:03.453721+01:00 mail.vr9.pro sshd[197829]: Invalid user deploy from 69.48.228.142 port 46542
...
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown