This IP address has been reported a total of
8
times from
7 distinct
sources.
120.204.132.12 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 5
reports;
France
with 2
reports;
Indonesia
with 1
report.
The most common categories in these recent reports were:
Port Scan
6
times;
Brute-Force
2
times;
Hacking
2
times;
SSH
1
time;
Web App Attack
1
time;
Other
1
time.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
TCP portscan or auth bruteforce on ports: 2376 27017 9090 ssh :
Firewall: Within 2026-10-09 08:47:32 ...
show moreTCP portscan or auth bruteforce on ports: 2376 27017 9090 ssh :
Firewall: Within 2026-10-09 08:47:32 - 2026-10-10 05:32:07 CEST(+0200) identified: port scan from 120.204.132.12/32 on uncommon port/s: 22(ssh),27017(tcp:27017),9090(tcp:9090),2376(tcp:2376) (4 trials)
Fail2ban: Within 2026-10-09 08:47:32 - 2026-10-10 05:32:07 CEST(+0200) banned: 8 times by fail2ban[firewall]; 8 times by fail2ban[recidive]
show less
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET WEB_SERVER Poss ...
show moreThis IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET WEB_SERVER Possible CVE-2014-6271 Attempt in HTTP Cookie).
show less
Cloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnera ...
show moreCloudmax IPS Block - Suspicious activity. Possible port scanning, service reconnaissance, or vulnerability probing
show less
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show moreUFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=120.204.132.12; proto=TCP; source_port=11220; target_port=2375
show less
Honeypot Finding: active Redis command abuse captured on TCP/6379; 2 high-risk command event(s). Com ...
show moreHoneypot Finding: active Redis command abuse captured on TCP/6379; 2 high-risk command event(s). Commands: CONFIG GET dir.
show less
Hacking
Anonymous
2026-10-09T09:12:10.975860+02:00 vps kernel: [7900709.994279] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ...
show more2026-10-09T09:12:10.975860+02:00 vps kernel: [7900709.994279] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=120.204.132.12 DST=54.37.14.118 LEN=40 TOS=0x00 PREC=0x00 TTL=235 ID=16525 PROTO=TCP SPT=11220 DPT=2375 WINDOW=1024 RES=0x00 SYN URGP=0
...
show less
Port Scan
Brute-Force
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
