This IP address has been reported a total of
511
times from
113 distinct
sources.
120.195.54.53 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Unsolicited TCP connection from 120.195.54.53 to port 0 at 2026-06-24T17:06:01Z. Source IP completed ...
show moreUnsolicited TCP connection from 120.195.54.53 to port 0 at 2026-06-24T17:06:01Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
show less
Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. ...
show moreHoneypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud
show less
Brute-Force
Hacking
Anonymous
2026-06-20T13:11:46.598916+01:00 vps kernel: [43697657.391897] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ...
show more2026-06-20T13:11:46.598916+01:00 vps kernel: [43697657.391897] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=120.195.54.53 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x00 TTL=226 ID=61582 PROTO=TCP SPT=57323 DPT=6433 WINDOW=1024 RES=0x00 SYN URGP=0
...
show less
Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ...
show moreHoneypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud
show less
Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 1880 [1] TCP
Reported by DisPaisy ...
show moreHoneypot [fra-de-honeypot]: Empty payload (likely service probe); 1880 [1] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Honeypot [fra-de-honeypot]: HTTP/1.1 request on 32080
GET /
Accept: */*; 32080 [1] TCP
Reported by ...
show moreHoneypot [fra-de-honeypot]: HTTP/1.1 request on 32080
GET /
Accept: */*; 32080 [1] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ...
show moreHoneypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud
show less
Hacking
Exploited Host
Anonymous
Honeypot hit: Large payload (1457 bytes); 6510 [1] TCP
Reported by: https://github.com/sefinek/T-Pot ...
show moreHoneypot hit: Large payload (1457 bytes); 6510 [1] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less