Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 120.48.8.101:
This IP address has been reported a total of
669
times from
358 distinct
sources.
120.48.8.101 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 107
reports;
United States of America
with 101
reports;
France
with 87
reports.
The most common categories in these recent reports were:
SSH
481
times;
Brute-Force
474
times;
Port Scan
118
times;
Hacking
47
times;
Web App Attack
15
times;
Other
25
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-13T02:31:53.629636+02:00 blackview sshd-session[1707974]: Invalid user user from 120.48.8.10 ...
show more2026-09-13T02:31:53.629636+02:00 blackview sshd-session[1707974]: Invalid user user from 120.48.8.101 port 36800
2026-09-13T02:31:55.016780+02:00 blackview sshd-session[1708043]: Invalid user user from 120.48.8.101 port 41002
...
show less
(sshd) Failed SSH login from 120.48.8.101 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction ...
show more(sshd) Failed SSH login from 120.48.8.101 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: 0; Trigger: LF_TRIGGER; Logs: 2026-09-13T00:03:58.377866+00:00 crichton sshd[183440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.8.101 user=root
show less
Honeypot trap triggered: unsolicited TCP connection(s) to unused port(s) 2222 on a host running no s ...
show moreHoneypot trap triggered: unsolicited TCP connection(s) to unused port(s) 2222 on a host running no such service. There is no legitimate reason to connect to these ports.
Observed 1 connection(s) from 2026-09-12T23:27:07Z to 2026-09-12T23:27:07Z UTC.
2026-09-12T23:27:07Z tcp/2222 connect, no payload (bare TCP probe)
Connection was blocked automatically at the firewall. Reported by an automated honeypot.
show less
2026-09-12T23:09:37.220193+00:00 [SERVER] sshd-session[585125]: Connection closed by authenticating ...
show more2026-09-12T23:09:37.220193+00:00 [SERVER] sshd-session[585125]: Connection closed by authenticating user [USER] 120.48.8.101 port 57648 [preauth]
2026-09-12T23:09:44.969365+00:00 [SERVER] sshd-session[585153]: Connection closed by authenticating user [USER] 120.48.8.101 port 49336 [preauth]
2026-09-12T23:09:52.586456+00:00 [SERVER] sshd-session[585156]: Connection closed by authenticating user [USER] 120.48.8.101 port 58848 [preauth]
show less
2026-09-12T18:23:01.013389+03:00 vm-vdsok.guru sshd-session[562654]: Failed password for root from 1 ...
show more2026-09-12T18:23:01.013389+03:00 vm-vdsok.guru sshd-session[562654]: Failed password for root from 120.48.8.101 port 56222 ssh2
2026-09-12T18:23:05.677324+03:00 vm-vdsok.guru sshd-session[562670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.8.101 user=root
2026-09-12T18:23:07.796120+03:00 vm-vdsok.guru sshd-session[562670]: Failed password for root from 120.48.8.101 port 55594 ssh2
...
show less
2026-09-12T10:16:32.958310-03:00 racknerd-e206e60 sshd[146636]: Failed password for root from 120.48 ...
show more2026-09-12T10:16:32.958310-03:00 racknerd-e206e60 sshd[146636]: Failed password for root from 120.48.8.101 port 49182 ssh2
2026-09-12T10:24:43.182882-03:00 racknerd-e206e60 sshd[146656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.8.101 user=root
2026-09-12T10:24:45.285038-03:00 racknerd-e206e60 sshd[146656]: Failed password for root from 120.48.8.101 port 53078 ssh2
...
show less
