101.20.237.48
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- China Unicom Hebei province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Shijiazhuang, Hebei
Abuse Reports
Total reports
19 from
11 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇨🇦 Sakusen |
RDP (TCP/3389): 44 connections
|
Port Scan | |
| 🇨🇦 smick |
Brute-force attack.
|
Brute-Force | |
| 🇩🇪 BULLSEYE |
Automated security detection: RDP brute-force activity blocked by IPBan. Source: IPBan/RDP. Events=1, observations=5.
|
Brute-Force | |
| 🇩🇪 Freenex1911 |
2026-11-08T14:27:57Z - RDP login from 101.20.237.48 failed multiple times.
|
Brute-Force | |
| 🇧🇷 aosafeshield |
AOSafe Shield: Windows logon (RDP/SMB) brute force, 2 failed logins. Repeat offender (ban #2).
|
Brute-Force | |
| 🇨🇦 Sakusen |
RDP (TCP/3389): 64 connections
|
Port Scan | |
| 🇩🇪 dominikdomex |
Windows logon brute-force (RDP) (IPBan)
|
Brute-Force | |
| 🇺🇸 Tecmaya |
RDP brute-force: 20 failed login attempts in the last 24 hours.
|
Brute-Force Port Scan | |
| 🇩🇪 Freenex1911 |
2026-11-07T13:06:30Z - RDP login from 101.20.237.48 failed multiple times.
|
Brute-Force | |
| 🇩🇪 BULLSEYE |
Automated security detection: RDP brute-force activity blocked by IPBan. Source: IPBan/RDP. Events=1, observations=5.
|
Brute-Force | |
| 🇸🇪 Juha Jurvanen |
Blocked by Scantide Guard on Network. Rule: 5 related observations from 101.20.237.48 within 240 minutes..
|
Brute-Force | |
| 🇨🇦 Sakusen |
RDP (TCP/3389): 6 connections
|
Port Scan | |
| Anonymous |
RDP brute force attack.
|
Port Scan Brute-Force | |
| 🇦🇹 CTK |
RDP Brute-Force (Grieskirchen RZ2)
|
Brute-Force | |
| 🇨🇭 trading1617.internet-box.ch |
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown