Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 120.48.90.166:
This IP address has been reported a total of
5,374
times from
1,167 distinct
sources.
120.48.90.166 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 741
reports;
United States of America
with 330
reports;
France
with 278
reports.
The most common categories in these recent reports were:
Brute-Force
2521
times;
SSH
2451
times;
Hacking
128
times;
Port Scan
124
times;
Web App Attack
58
times;
Other
68
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Brute force SSH attempts using libssh 0.9.6 across 3 sessions. Creds tried: 345gs5662d34/345gs5662d3 ...
show moreBrute force SSH attempts using libssh 0.9.6 across 3 sessions. Creds tried: 345gs5662d34/345gs5662d34, root/3245gs5662d34, root/digital123. Attack chain: removed .ssh dir, injected RSA pubkey AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXx into authorized_keys for persistence, manipulated file attrs via chattr -ia on .ssh dir to prevent deletion, attempted lockr -ia cmd (likely typo) for further lockdown. Attack establishes persistence and anti-forensics to prevent remediation. Cred patterns suggest dictionary/credential stuffing from breach. Automated tooling detected. If successful, enables backdoor access and lateral movement.
show less
2026-09-10T01:38:49.613950+00:00 ZT1 sshd[73255]: Failed password for root from 120.48.90.166 port 5 ...
show more2026-09-10T01:38:49.613950+00:00 ZT1 sshd[73255]: Failed password for root from 120.48.90.166 port 52640 ssh2
2026-09-10T01:44:56.528259+00:00 ZT1 sshd[102603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.90.166 user=root
2026-09-10T01:44:58.449377+00:00 ZT1 sshd[102603]: Failed password for root from 120.48.90.166 port 54830 ssh2
...
show less
2026-09-10T01:14:02.179847+00:00 web01 sshd[1738012]: Failed password for invalid user user from 120 ...
show more2026-09-10T01:14:02.179847+00:00 web01 sshd[1738012]: Failed password for invalid user user from 120.48.90.166 port 41978 ssh2
2026-09-10T01:14:07.549769+00:00 web01 sshd[1738023]: Invalid user user from 120.48.90.166 port 47106
2026-09-10T01:14:08.503810+00:00 web01 sshd[1738023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.90.166
2026-09-10T01:14:10.059015+00:00 web01 sshd[1738023]: Failed password for invalid user user from 120.48.90.166 port 47106 ssh2
2026-09-10T01:18:18.362882+00:00 web01 sshd[1738066]: Invalid user user from 120.48.90.166 port 56510
...
show less
2026-09-10T01:24:54.063802+02:00 jadzia sshd-session[761553]: User root from 120.48.90.166 not allow ...
show more2026-09-10T01:24:54.063802+02:00 jadzia sshd-session[761553]: User root from 120.48.90.166 not allowed because not listed in AllowUsers
2026-09-10T01:24:54.343353+02:00 jadzia sshd-session[761553]: Disconnected from invalid user root 120.48.90.166 port 48478 [preauth]
2026-09-10T01:33:48.672291+02:00 jadzia sshd-session[762080]: Invalid user admin from 120.48.90.166 port 51798
2026-09-10T01:33:48.960208+02:00 jadzia sshd-session[762080]: Disconnected from invalid user admin 120.48.90.166 port 51798 [preauth]
2026-09-10T01:35:24.064808+02:00 jadzia sshd-session[762217]: Invalid user junin from 120.48.90.166 port 45994
...
show less
2026-09-09T23:30:03.767462+00:00 web01 sshd[1736601]: pam_unix(sshd:auth): authentication failure; l ...
show more2026-09-09T23:30:03.767462+00:00 web01 sshd[1736601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.90.166
2026-09-09T23:30:06.660459+00:00 web01 sshd[1736601]: Failed password for invalid user user from 120.48.90.166 port 43110 ssh2
2026-09-09T23:34:12.173240+00:00 web01 sshd[1736656]: Invalid user user from 120.48.90.166 port 43942
2026-09-09T23:34:12.473814+00:00 web01 sshd[1736656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.90.166
2026-09-09T23:34:14.215522+00:00 web01 sshd[1736656]: Failed password for invalid user user from 120.48.90.166 port 43942 ssh2
...
show less
Fail2Ban host=fra-02-dsh-proxy jail=sshd failures=5. Login abuse observed. sample=2026-09-10T00:14:0 ...
show moreFail2Ban host=fra-02-dsh-proxy jail=sshd failures=5. Login abuse observed. sample=2026-09-10T00:14:01.736367+02:00 fra-02-dsh-proxy sshd-session[3600757]: Invalid user runcloud from 120.48.90.166 port 52214 2026-09-10T00:14:01.941487+02:00 fra-02-dsh-proxy sshd-session[3600757]: Disconnected from invalid user runcloud 120.48.90.166 port 52214 [preauth] 2026-09-10T00:16:39.376138+02:00 fra-02-dsh-proxy sshd-session[3600933]: Invalid user Test from 120.48.90.166 port 51134 2026-09-10T00:16:39.545420+02:00 fra-02-dsh-proxy sshd-session[3600933]: Disconnected from invalid user Te
show less
