Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 120.46.203.220:
This IP address has been reported a total of
32
times from
30 distinct
sources.
120.46.203.220 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
France
with 13
reports;
Canada
with 5
reports;
United States of America
with 5
reports.
The most common categories in these recent reports were:
Brute-Force
29
times;
SSH
26
times;
Port Scan
6
times;
Hacking
1
time;
Exploited Host
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-07T08:27:34.216734+02:00 pbs-ovh sshd-session[3426764]: refused connect from ecs-120-46-203- ...
show more2026-09-07T08:27:34.216734+02:00 pbs-ovh sshd-session[3426764]: refused connect from ecs-120-46-203-220.compute.hwclouds-dns.com (120.46.203.220) 2026-09-07T08:27:35.329739+02:00 pbs-ovh sshd-session[3426824]: refused connect from ecs-120-46-203-220.compute.hwclouds-dns.com (120.46.203.220) 2026-09-07T08:27:40.422251+02:00 pbs-ovh sshd-session[3426865]: refused connect from ecs-120-46-203-220.compute.hwclouds-dns.com (120.46.203.220)
show less
Failed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 19/100 (low) ...
show moreFailed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 19/100 (low) | Phase: reconnaissance (pre-auth probing / scanning)
Failed auth: 0 (0 bad password, 0 invalid user) | 0 success | 15 total SSH log events | seen on 2 sensor(s)
Origin: China (CN) | AS55990 Huawei Cloud Service data center | datacenter | 120.46.203.0/24
First seen: 2026-09-06 17:20:10 UTC | Last seen: 2026-09-07 05:52:33 UTC
Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot.
show less
Brute-Force
SSH
Anonymous
2026-09-07T07:24:28.429419 localhost.localdomain sshd-session[1958517]: Connection closed by 120.46. ...
show more2026-09-07T07:24:28.429419 localhost.localdomain sshd-session[1958517]: Connection closed by 120.46.203.220 port 43230 [preauth]
2026-09-07T07:24:29.408161 localhost.localdomain sshd-session[1958520]: banner exchange: Connection from 120.46.203.220 port 47822: invalid format
...
show less
2026-09-07T04:28:52.856421Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.46.203.220:439 ...
show more2026-09-07T04:28:52.856421Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.46.203.220:43968 (158.69.22.11:2222) [session: 98a36e62f786]
2026-09-07T04:28:54.100585Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.46.203.220:48462 (158.69.22.11:2222) [session: 67e0a0125d49]
...
show less
2026-09-07T02:51:55.089138Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.46.203.220:370 ...
show more2026-09-07T02:51:55.089138Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.46.203.220:37020 (158.69.22.11:2222) [session: 46c1b7a37389]
2026-09-07T02:51:56.324442Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.46.203.220:41000 (158.69.22.11:2222) [session: a910e8501371]
...
show less
The IP 120.46.203.220 tried multiple SSH_BRUTE_FORCE logins
Brute-Force
Anonymous
2026-09-07T03:59:21.587168 prodgateway sshd-session[65209]: Failed password for root from 120.46.203 ...
show more2026-09-07T03:59:21.587168 prodgateway sshd-session[65209]: Failed password for root from 120.46.203.220 port 59106 ssh2
2026-09-07T03:59:33.608819 prodgateway sshd-session[65217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.46.203.220 user=root
2026-09-07T03:59:35.948355 prodgateway sshd-session[65217]: Failed password for root from 120.46.203.220 port 35674 ssh2
...
show less
2026-09-07T00:03:20.630584+00:00 prod-westeu sshd[3489987]: Failed password for invalid user r00t fr ...
show more2026-09-07T00:03:20.630584+00:00 prod-westeu sshd[3489987]: Failed password for invalid user r00t from 120.46.203.220 port 40324 ssh2
2026-09-07T00:03:27.835695+00:00 prod-westeu sshd[3490039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.46.203.220 user=root
2026-09-07T00:03:29.529342+00:00 prod-westeu sshd[3490039]: Failed password for root from 120.46.203.220 port 33282 ssh2
...
show less
