This IP address has been reported a total of
395
times from
233 distinct
sources.
120.48.52.177 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 10002 [1] TCP
Reported by DisPaisy ...
show moreHoneypot [fra-de-honeypot]: Empty payload (likely service probe); 10002 [1] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Attempted SSH brute force using Go-based SSH client. Single credential pair tested: root/------fuck- ...
show moreAttempted SSH brute force using Go-based SSH client. Single credential pair tested: root/------fuck------. One successful command execution: uname -s -m (system fingerprinting to identify OS and architecture). No malware payloads, downloads, persistence mechanisms, lateral movement, or port forwarding observed. Attack duration approximately 8 seconds across 2 sessions. Minimal reconnaissance activity only.
show less
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-06-12T08:31:47Z and 2026-06-1 ...
show moreCowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-06-12T08:31:47Z and 2026-06-12T08:31:50Z
show less
Jun 11 09:25:07 pvr sshd[817455]: Failed password for root from 120.48.52.177 port 40946 ssh2
Jun 11 ...
show moreJun 11 09:25:07 pvr sshd[817455]: Failed password for root from 120.48.52.177 port 40946 ssh2
Jun 11 09:25:13 pvr sshd[817462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.52.177 user=root
Jun 11 09:25:16 pvr sshd[817462]: Failed password for root from 120.48.52.177 port 42050 ssh2
...
show less