JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

37.148.23.120

Neutral Activity

Abuse Confidence Score

0% Low Risk

78 reports

64 reporters · latest 8 months ago

ISP: SHATEL DSL Network
Usage Type: Fixed Line ISP
ASN: AS34369
Hostname(s): 37-148-23-120.rasana.net
Domain Name: shatel.ir
Country: 🇮🇷 Iran (Islamic Republic of)
City: Tehran, Tehran

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

37.148.23.120 has been reported 78 times. The most recent report is from 8 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

78 from 64 distinct reporters

First reported

December 1st 2025

Most recent report

8 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 xveil	2026-02-19 11:59:22 UTC · (8 months ago)	2026-02-19T18:59:20.533815 mail-honeypot postfix/submission/smtpd[31149]: warning: unknown[37.148.23.120]: SASL LOGIN authentication failed: authentication failure ...	Brute-Force
🇯🇵 zwh	2025-12-31 18:06:12 UTC · (10 months ago)	SSH Brute-Force	Brute-Force SSH
Anonymous	2025-12-31 16:31:04 UTC · (10 months ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇺🇸 MPL	2025-12-31 09:10:14 UTC · (10 months ago)	tcp/443 (4 or more attempts)	Port Scan
🇺🇸 technojoe99	2025-12-31 09:02:49 UTC · (10 months ago)	Vulnerable HTTP/1.0 from 37.148.23.120. POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1.	Bad Web Bot
🇹🇭 Sawasdee	2025-12-31 06:27:05 UTC · (10 months ago)	SSH break in attempt ...	SSH
🇫🇷 Kraften	2025-12-31 04:56:46 UTC · (10 months ago)	Tentative Web App attack ...	Web App Attack
🇩🇪 ps-center	2025-12-31 01:38:48 UTC · (10 months ago)	MYH-W: TCP-Scanner. Port: 22	Port Scan
🇧🇪 sauron-le-noir	2025-12-31 01:35:25 UTC · (10 months ago)	scan port : 23 from Iran at Wed Dec 31 02:39:28 2025	Port Scan
🇨🇳 ThreatBook.io	2025-12-30 22:30:04 UTC · (10 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/37.148.23.120	SSH
🇺🇸 shaunc	2025-12-30 21:43:52 UTC · (10 months ago)	Dec 30 15:43:48 mailman sshd[21928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.148.23.120 Dec 30 15:43:50 mailman sshd[21928]: Failed password for invalid user admin from 37.148.23.120 port 36986 ssh2 ... show more Dec 30 15:43:48 mailman sshd[21928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.148.23.120 Dec 30 15:43:50 mailman sshd[21928]: Failed password for invalid user admin from 37.148.23.120 port 36986 ssh2 Dec 30 15:43:51 mailman sshd[21928]: Connection closed by 37.148.23.120 port 36986 [preauth] show less	Brute-Force SSH
🇫🇷 Tanados	2025-12-30 20:27:24 UTC · (10 months ago)	Blocked by UFW [22/tcp] Source port: 45130 TTL: 47 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan SSH
🇬🇧 redfox	2025-12-30 19:37:36 UTC · (10 months ago)	2025-12-30T20:37:26.605452+01:00 vps643776 sshd[1608707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.148.23.120 2025-12-30T20:37:28.333106+01:00 vps643776 sshd[1608707]: Failed password for invalid user ... show more 2025-12-30T20:37:26.605452+01:00 vps643776 sshd[1608707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.148.23.120 2025-12-30T20:37:28.333106+01:00 vps643776 sshd[1608707]: Failed password for invalid user a from 37.148.23.120 port 46446 ssh2 2025-12-30T20:37:32.157872+01:00 vps643776 sshd[1608711]: Invalid user nil from 37.148.23.120 port 58572 2025-12-30T20:37:33.081960+01:00 vps643776 sshd[1608711]: Failed none for invalid user nil from 37.148.23.120 port 58572 ssh2 2025-12-30T20:37:36.338044+01:00 vps643776 sshd[1608713]: Invalid user admin from 37.148.23.120 port 35878 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-12-30 19:30:04 UTC · (10 months ago)	(sshd) Failed SSH login from 37.148.23.120 (IR/Iran/37-148-23-120.rasana.net): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Dec 30 13:29:31 14465 sshd[14080]: Did not receive identification string from 37.148.23.120 port 3 ... show more (sshd) Failed SSH login from 37.148.23.120 (IR/Iran/37-148-23-120.rasana.net): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Dec 30 13:29:31 14465 sshd[14080]: Did not receive identification string from 37.148.23.120 port 38918 Dec 30 13:29:40 14465 sshd[14081]: Invalid user a from 37.148.23.120 port 40930 Dec 30 13:29:44 14465 sshd[14081]: Failed password for invalid user a from 37.148.23.120 port 40930 ssh2 Dec 30 13:29:49 14465 sshd[14091]: Invalid user nil from 37.148.23.120 port 35000 Dec 30 13:29:56 14465 sshd[14093]: Invalid user admin from 37.148.23.120 port 43808 show less	Brute-Force SSH
Anonymous	2025-12-30 19:29:59 UTC · (10 months ago)	$f2bV_matches	Brute-Force SSH

Showing 1 to 15 of 78 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 142.93.2.166

🇻🇳 103.98.152.120

🇸🇦 95.219.203.215

🇬🇧 91.237.124.252

🇨🇳 222.163.34.153

🇧🇬 79.124.58.70

🇵🇰 59.103.220.206

🇳🇱 45.148.10.157

🇧🇪 35.210.45.130

🇧🇪 35.206.141.162

🇸🇪 2a06:bc80:0:1000::16

🇩🇪 212.30.36.31

🇫🇮 147.185.133.100

🇷🇴 92.118.39.14

🇷🇴 80.94.92.128

🇨🇦 72.39.1.95

🇺🇸 24.91.190.84

🇺🇸 23.27.252.1

🇦🇷 179.51.247.108

🇺🇸 137.184.230.10