Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 120.48.45.34
This IP address has been reported a total of
99
times from
76 distinct
sources.
120.48.45.34 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 28
reports;
United States of America
with 18
reports;
France
with 9
reports.
The most common categories in these recent reports were:
SSH
88
times;
Brute-Force
87
times;
Port Scan
11
times;
Hacking
5
times;
Exploited Host
2
times;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-22T17:10:02.368163-07:00 ftp-green sshd[904167]: Disconnected from authenticating user root ...
show more2026-09-22T17:10:02.368163-07:00 ftp-green sshd[904167]: Disconnected from authenticating user root 120.48.45.34 port 59604 [preauth]
2026-09-22T17:14:44.798481-07:00 ftp-green sshd[904349]: Connection closed by 120.48.45.34 port 36388 [preauth]
2026-09-22T17:17:57.745135-07:00 ftp-green sshd[904856]: Connection closed by 120.48.45.34 port 48338 [preauth]
2026-09-22T17:21:51.541619-07:00 ftp-green sshd[904937]: Connection closed by 120.48.45.34 port 46714 [preauth]
2026-09-22T17:28:19.889190-07:00 ftp-green sshd[905059]: Connection closed by 120.48.45.34 port 48888 [preauth]
...
show less
Fail2Ban automatic report:
SSH brute-force:
Sep 22 19:25:54 serw sshd[1376983]: Disconnected from au ...
show moreFail2Ban automatic report:
SSH brute-force:
Sep 22 19:25:54 serw sshd[1376983]: Disconnected from authenticating user root 120.48.45.34 port 43892 [preauth]
Sep 22 19:35:14 serw sshd[1377111]: Connection closed by 120.48.45.34 port 38304 [preauth]
Sep 22 19:36:56 serw sshd[1377122]: Invalid user jessica from 120.48.45.34 port 33266
show less
Honeypot Finding: repeated TCP service probing on TCP/22 (SSH); 19 application-level events across 1 ...
show moreHoneypot Finding: repeated TCP service probing on TCP/22 (SSH); 19 application-level events across 19 source port(s). Sensor(s): Cowrie.
show less
[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact,ndpi_unidirectional_traffic,tcp_no_da ...
show more[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact,ndpi_unidirectional_traffic,tcp_no_data_exchanged
show less
2026-09-22T13:48:22.042150+02:00 rahona.network sshd[1454601]: Failed password for invalid user user ...
show more2026-09-22T13:48:22.042150+02:00 rahona.network sshd[1454601]: Failed password for invalid user user from 120.48.45.34 port 57582 ssh2
2026-09-22T13:51:53.285232+02:00 rahona.network sshd[1454678]: Invalid user kaist from 120.48.45.34 port 34494
2026-09-22T13:51:53.287471+02:00 rahona.network sshd[1454678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.45.34
2026-09-22T13:51:55.207813+02:00 rahona.network sshd[1454678]: Failed password for invalid user kaist from 120.48.45.34 port 34494 ssh2
show less
2026-09-22T00:49:55.675822-05:00 nas.marchenko.net sshd-session[696513]: pam_unix(sshd:auth): authen ...
show more2026-09-22T00:49:55.675822-05:00 nas.marchenko.net sshd-session[696513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.45.34 user=root
2026-09-22T00:49:57.824968-05:00 nas.marchenko.net sshd-session[696513]: Failed password for invalid user root from 120.48.45.34 port 49370 ssh2
2026-09-22T00:56:51.312900-05:00 nas.marchenko.net sshd-session[698408]: Invalid user oneadmin from 120.48.45.34 port 51060
...
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: vmuser, Pass: [REDACTED]
