Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 120.48.53.136:
This IP address has been reported a total of
19
times from
19 distinct
sources.
120.48.53.136 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 6
reports;
France
with 3
reports;
Japan
with 3
reports.
The most common categories in these recent reports were:
SSH
16
times;
Brute-Force
16
times;
Port Scan
3
times;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-04T19:53:36.973418-05:00 debian-hel1 sshd-session[131464]: Failed password for invalid user ...
show more2026-09-04T19:53:36.973418-05:00 debian-hel1 sshd-session[131464]: Failed password for invalid user ftpuser from 120.48.53.136 port 41826 ssh2
2026-09-04T19:55:52.088882-05:00 debian-hel1 sshd-session[131489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.53.136 user=root
2026-09-04T19:55:54.179989-05:00 debian-hel1 sshd-session[131489]: Failed password for root from 120.48.53.136 port 41880 ssh2
...
show less
2026-09-05T07:48:10.890191+08:00 *hostname* sshd-session[3359028]: Invalid user ubuntu from 120.48.5 ...
show more2026-09-05T07:48:10.890191+08:00 *hostname* sshd-session[3359028]: Invalid user ubuntu from 120.48.53.136 port 43788
2026-09-05T07:51:22.816802+08:00 *hostname* sshd-session[3359144]: Connection from 120.48.53.136 port 38114 on 115.231.27.164 port 22 rdomain ""
2026-09-05T07:51:24.643539+08:00 *hostname* sshd-session[3359144]: Invalid user ubuntu from 120.48.53.136 port 38114
2026-09-05T07:52:29.799740+08:00 *hostname* sshd-session[3359183]: Connection from 120.48.53.136 port 52158 on 115.231.27.164 port 22 rdomain ""
2026-09-05T07:52:30.298051+08:00 *hostname* sshd-session[3359183]: Invalid user helena from 120.48.53.136 port 52158
show less
2026-09-05T01:03:21.073517+02:00 cow sshd-session[3760513]: pam_unix(sshd:auth): authentication fail ...
show more2026-09-05T01:03:21.073517+02:00 cow sshd-session[3760513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.53.136
2026-09-05T01:03:22.450460+02:00 cow sshd-session[3760513]: Failed password for invalid user supervisor from 120.48.53.136 port 50122 ssh2
2026-09-05T01:04:00.642572+02:00 cow sshd-session[3760837]: Invalid user testftp from 120.48.53.136 port 51764
2026-09-05T01:04:00.646437+02:00 cow sshd-session[3760837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.53.136
2026-09-05T01:04:02.467108+02:00 cow sshd-session[3760837]: Failed password for invalid user testftp from 120.48.53.136 port 51764 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-09-04T18:34:59.067572-03:00 vmi1230637 sshd[340394]: Invalid user rancher from 120.48.53.136 po ...
show more2026-09-04T18:34:59.067572-03:00 vmi1230637 sshd[340394]: Invalid user rancher from 120.48.53.136 port 49406
...
show less
2026-09-04T22:11:15.466815+02:00 fangorn sshd[2639288]: Failed password for invalid user john from 1 ...
show more2026-09-04T22:11:15.466815+02:00 fangorn sshd[2639288]: Failed password for invalid user john from 120.48.53.136 port 51188 ssh2
2026-09-04T22:33:10.143751+02:00 fangorn sshd[2641770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.53.136 user=root
2026-09-04T22:33:11.979872+02:00 fangorn sshd[2641770]: Failed password for root from 120.48.53.136 port 54606 ssh2
...
show less
Sep 2 07:34:17 Ubuntu-2204-jammy-amd64-base sshd[1380366]: Connection closed by 120.48.53.136 port ...
show moreSep 2 07:34:17 Ubuntu-2204-jammy-amd64-base sshd[1380366]: Connection closed by 120.48.53.136 port 58608 [preauth]
...
show less
2026-09-01T06:23:06.339335[redacted] sshd[1788911]: Connection closed by 120.48.53.136 port 58604 [p ...
show more2026-09-01T06:23:06.339335[redacted] sshd[1788911]: Connection closed by 120.48.53.136 port 58604 [preauth]
show less
Failed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 7/100 (info) ...
show moreFailed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 7/100 (info) | Phase: reconnaissance (pre-auth probing / scanning)
Failed auth: 0 (0 bad password, 0 invalid user) | 0 success | 11 total SSH log events | seen on 1 sensor(s)
Origin: China (CN) | AS38365 Beijing Baidu Netcom Science and Technology Co., Ltd. | 120.48.53.0/24
First seen: 2026-08-30 09:18:24 UTC | Last seen: 2026-08-30 09:37:55 UTC
Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot.
show less
