Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 120.48.38.78:
This IP address has been reported a total of
164
times from
121 distinct
sources.
120.48.38.78 was first reported on
, and the most recent report was
.
In the last 60 days, the only reporter location was:
India
with 1
report.
The most common categories in these recent reports were:
Brute-Force
1
time;
SSH
1
time;
Hacking
1
time.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
Jun 21 16:57:38 dev sshd[957646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ...
show moreJun 21 16:57:38 dev sshd[957646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.38.78 user=root
Jun 21 16:57:40 dev sshd[957646]: Failed password for root from 120.48.38.78 port 48754 ssh2
...
show less
SSH brute-force detected: 48 failed login attempts in the last 1 hour.
Brute-Force
SSH
Anonymous
2026-06-09T09:02:14.101339 localhost.localdomain sshd-session[4178033]: Failed password for root fro ...
show more2026-06-09T09:02:14.101339 localhost.localdomain sshd-session[4178033]: Failed password for root from 120.48.38.78 port 50280 ssh2
2026-06-09T09:02:14.488915 localhost.localdomain sshd-session[4178033]: Connection closed by authenticating user root 120.48.38.78 port 50280 [preauth]
...
show less
SSH credential brute-force observed by honeypot.
Source IP: 120.48.38.78
Targeted device: NAS
First ...
show moreSSH credential brute-force observed by honeypot.
Source IP: 120.48.38.78
Targeted device: NAS
First seen: 09 Jun 2026 02:47:16 UTC
Last seen: 09 Jun 2026 02:47:16 UTC
Attempts: 1
Client: SSH-2.0-Go
Sample credentials: root:?------fuck------
show less
2026-06-09T04:22:47.672273+09:00 no2 sshd[2713079]: Connection closed by authenticating user root 12 ...
show more2026-06-09T04:22:47.672273+09:00 no2 sshd[2713079]: Connection closed by authenticating user root 120.48.38.78 port 50636 [preauth]
...
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-08T02:40:28Z and 2026-06-0 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-08T02:40:28Z and 2026-06-08T02:46:24Z
show less