12.48.236.20
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- AT&T Enterprises, LLC
- Usage Type
- Fixed Line ISP
- ASN
- AS7018
- Domain Name
- att.com
- Country
- 🇺🇸 United States of America
- City
- Aventura, Florida
Abuse Reports
Total reports
25 from
19 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 22.
|
Port Scan Hacking | |
| 🇦🇺 bucker00 |
Blocked by OPNsense; 6 hits, proto=tcp, ports=22,2222
|
Port Scan | |
| 🇹🇷 savasboluk |
Auto-blocked by Seczar SecureOps — High-Risk Port Probe (admin-managed entries) — SSH (6 events in 5min) at 2026-10-27 05:16
|
Hacking | |
| Anonymous |
denied traffic to a non-approved destination port. destination port 2222.
|
Port Scan | |
| 🇨🇿 lp |
SSH Brute force: 1 attempts were recorded from 12.48.236.20
2026-08-24T22:51:58+02:00 Invalid user wqmarlduiqkmgs from 12.48.236.20 port 41010
|
Brute-Force SSH | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 12.48.236.20
|
Port Scan Brute-Force SSH | |
| 🇨🇿 lp |
SSH Brute force: 1 attempts were recorded from 12.48.236.20
2026-08-12T04:01:34+02:00 Invalid user wqmarlduiqkmgs from 12.48.236.20 port 49231
|
Brute-Force SSH | |
| Anonymous |
Blocked by firewall on hugin [22/tcp] | Rule: UFW | SPT: 44890 | TTL: 53 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan SSH | |
| 🇨🇿 lp |
SSH Brute force: 1 attempts were recorded from 12.48.236.20
2026-08-05T04:00:01+02:00 Invalid user wqmarlduiqkmgs from 12.48.236.20 port 58994
|
Brute-Force SSH | |
| 🇫🇷 ImMarvolo |
Unauthorized connection attempt detected neo-backup, SSH Brute-Force
|
Brute-Force SSH | |
| Anonymous |
denied traffic to a honeypot network. destination port 22.
|
Port Scan Hacking | |
| 🇺🇸 technojoe99 |
Invalid user wqmarlduiqkmgs from 12.48.236.20 port 45158
|
Brute-Force SSH | |
| 🇷🇴 gtheo99 |
12.48.236.20 (US/United States/-), 2 distributed sshd attacks on account [wqmarlduiqkmgs] in the last 900 secs
|
SSH Brute-Force Hacking | |
| 🇺🇸 RAP |
2026-07-16 20:45:00 UTC Unauthorized activity to TCP port 22. SSH
|
SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown