Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 120.48.39.143:
This IP address has been reported a total of
102
times from
74 distinct
sources.
120.48.39.143 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 32
reports;
United States of America
with 19
reports;
Brazil
with 5
reports.
The most common categories in these recent reports were:
Brute-Force
98
times;
SSH
96
times;
Hacking
3
times;
Port Scan
2
times;
Exploited Host
2
times;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-07T11:41:58.000610+02:00 dustin sshd-session[1752941]: Invalid user sammy from 120.48.39.143 ...
show more2026-09-07T11:41:58.000610+02:00 dustin sshd-session[1752941]: Invalid user sammy from 120.48.39.143 port 49812
2026-09-07T11:58:18.868209+02:00 dustin sshd-session[1758512]: Invalid user backend from 120.48.39.143 port 50508
2026-09-07T12:08:43.008401+02:00 dustin sshd-session[1761816]: Invalid user fox from 120.48.39.143 port 55424
...
show less
Multiple SSH login attempts from 120.48.39.143 targeting user(s): ftpuser,user2 | Server Managed by ...
show moreMultiple SSH login attempts from 120.48.39.143 targeting user(s): ftpuser,user2 | Server Managed by Focusnic
show less
SSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard ...
show moreSSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard). Read-only capture.
show less
2026-09-06T18:46:23.775881-06:00 Host-KLAX-C sshd[202786]: Invalid user ya from 120.48.39.143 port 4 ...
show more2026-09-06T18:46:23.775881-06:00 Host-KLAX-C sshd[202786]: Invalid user ya from 120.48.39.143 port 40758
...
show less
2026-09-07T06:13:37.850401+08:00 *hostname* sshd-session[3419547]: Invalid user webuser from 120.48. ...
show more2026-09-07T06:13:37.850401+08:00 *hostname* sshd-session[3419547]: Invalid user webuser from 120.48.39.143 port 38934
2026-09-07T06:15:15.212497+08:00 *hostname* sshd-session[3419618]: Connection from 120.48.39.143 port 40706 on 115.231.27.164 port 22 rdomain ""
2026-09-07T06:15:15.441216+08:00 *hostname* sshd-session[3419618]: Invalid user kodi from 120.48.39.143 port 40706
2026-09-07T06:16:41.519197+08:00 *hostname* sshd-session[3419680]: Connection from 120.48.39.143 port 55430 on 115.231.27.164 port 22 rdomain ""
2026-09-07T06:16:41.731319+08:00 *hostname* sshd-session[3419680]: Invalid user a from 120.48.39.143 port 55430
show less
Repeated abusive SSH authentication activity triggered a Fail2Ban ban. Reported at UTC: 2026-09-06T2 ...
show moreRepeated abusive SSH authentication activity triggered a Fail2Ban ban. Reported at UTC: 2026-09-06T21:05:14Z
show less
2026-09-06T20:11:43.725590+00:00 blocklabs-server sshd[464879]: Invalid user install from 120.48.39. ...
show more2026-09-06T20:11:43.725590+00:00 blocklabs-server sshd[464879]: Invalid user install from 120.48.39.143 port 48530
2026-09-06T20:16:51.241156+00:00 blocklabs-server sshd[465145]: Invalid user mehrdad from 120.48.39.143 port 55076
2026-09-06T20:18:19.916146+00:00 blocklabs-server sshd[465202]: Invalid user adminuser from 120.48.39.143 port 48844
...
show less
2026-09-06T19:02:09.185528+00:00 melon sshd[1850286]: Invalid user nginx from 120.48.39.143 port 339 ...
show more2026-09-06T19:02:09.185528+00:00 melon sshd[1850286]: Invalid user nginx from 120.48.39.143 port 33962
2026-09-06T19:05:09.667748+00:00 melon sshd[1853876]: Connection from 120.48.39.143 port 33060 on 65.108.201.187 port 22 rdomain ""
2026-09-06T19:05:10.632091+00:00 melon sshd[1853876]: User root from 120.48.39.143 not allowed because none of user's groups are listed in AllowGroups
2026-09-06T19:09:35.750165+00:00 melon sshd[1858980]: Connection from 120.48.39.143 port 50296 on 65.108.201.187 port 22 rdomain ""
2026-09-06T19:09:37.145519+00:00 melon sshd[1858980]: User root from 120.48.39.143 not allowed because none of user's groups are listed in AllowGroups
show less
