JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 101.96.202.48

101.96.202.48 was found in our database!

This IP was reported 765 times. Confidence of Abuse is 100%: ?

100%

ISP	Beijing Volcano Engine Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS137718
Domain Name	bytedance.com
Country	🇨🇳 China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 101.96.202.48

Whois 101.96.202.48

IP Abuse Reports for 101.96.202.48:

This IP address has been reported a total of 765 times from 330 distinct sources. 101.96.202.48 was first reported on May 5th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 MU-star.net	2026-05-13 12:15:00 (3 weeks ago)	Invalid user sipv from 101.96.202.48 port 59438	Port Scan Brute-Force SSH
🇩🇪 MU-star.net	2026-05-13 12:15:00 (3 weeks ago)	Invalid user sipv from 101.96.202.48 port 59438	Port Scan Brute-Force SSH
🇮🇹 alph44	2026-05-13 10:04:45 (3 weeks ago)	SSH brute force attack detected: 7 failed attempts	Brute-Force
🇺🇸 bigscoots.com	2026-05-13 09:18:58 (3 weeks ago)	101.96.202.48 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ... show more 101.96.202.48 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 13 04:13:52 14098 sshd[18127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.56.66.71 user=root May 13 04:13:54 14098 sshd[18127]: Failed password for root from 72.56.66.71 port 38540 ssh2 May 13 04:18:45 14098 sshd[18499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.10.124 user=root May 13 04:15:44 14098 sshd[18281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.96.202.48 user=root May 13 04:15:46 14098 sshd[18281]: Failed password for root from 101.96.202.48 port 56038 ssh2 IP Addresses Blocked: 72.56.66.71 (NL/The Netherlands/-) 54.37.10.124 (GB/United Kingdom/vps-1e3810b9.vps.ovh.net) show less	Brute-Force SSH
🇸🇪 paradoxnetworks	2026-05-13 04:36:20 (3 weeks ago)	2026-05-13T04:32:32.886311+00:00 rc01 sshd-session[3218171]: Invalid user vpnuser from 101.96.202.48 ... show more 2026-05-13T04:32:32.886311+00:00 rc01 sshd-session[3218171]: Invalid user vpnuser from 101.96.202.48 port 42786 2026-05-13T04:33:50.353449+00:00 rc01 sshd-session[3218197]: Invalid user jerry from 101.96.202.48 port 39262 2026-05-13T04:36:19.725555+00:00 rc01 sshd-session[3218276]: Invalid user raul from 101.96.202.48 port 42172 ... show less	Brute-Force SSH
🇨🇭 TrainerGamer	2026-05-13 04:32:10 (3 weeks ago)	May 12 21:29:26 LU-VPS01 sshd[1810]: Failed password for root from 101.96.202.48 port 38420 ssh2 May ... show more May 12 21:29:26 LU-VPS01 sshd[1810]: Failed password for root from 101.96.202.48 port 38420 ssh2 May 12 21:30:50 LU-VPS01 sshd[1858]: Failed password for root from 101.96.202.48 port 48266 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-13 04:31:12 (3 weeks ago)	(sshd) Failed SSH login from 101.96.202.48 (CN/-/-): 5 in the last 3600 secs; Ports: ; Direction: 1 ... show more (sshd) Failed SSH login from 101.96.202.48 (CN/-/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: May 12 23:17:40 15237 sshd[5685]: Invalid user user from 101.96.202.48 port 39922 May 12 23:17:42 15237 sshd[5685]: Failed password for invalid user user from 101.96.202.48 port 39922 ssh2 May 12 23:29:25 15237 sshd[6630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.96.202.48 user=root May 12 23:29:27 15237 sshd[6630]: Failed password for root from 101.96.202.48 port 39426 ssh2 May 12 23:30:51 15237 sshd[6752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.96.202.48 user=root show less	Brute-Force SSH
🇨🇭 TrainerGamer	2026-05-13 02:13:23 (3 weeks ago)	Invalid user user from 101.96.202.48 port 40456	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-13 02:08:50 (3 weeks ago)	101.96.202.48 (CN/-/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: * ... show more 101.96.202.48 (CN/-/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 12 20:36:09 14014 sshd[26948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.156.109.167 user=root May 12 21:08:23 14014 sshd[29392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.96.202.48 user=root May 12 21:08:25 14014 sshd[29392]: Failed password for root from 101.96.202.48 port 33328 ssh2 May 12 20:33:41 14014 sshd[26715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.156.109.167 user=root May 12 20:33:43 14014 sshd[26715]: Failed password for root from 188.156.109.167 port 38530 ssh2 IP Addresses Blocked: 188.156.109.167 (HU/-/BC9C6DA7.catv.pool.telekom.hu) show less	Brute-Force SSH
🇸🇪 donarev419	2026-05-13 01:13:38 (3 weeks ago)	Connection to port 7038 with data transfer. Data preview: SSH-2.0-libssh_0.12.0	Port Scan Hacking
🇬🇧 [email protected]	2026-05-13 00:30:44 (3 weeks ago)	...	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-05-12 23:55:16 (3 weeks ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/101.96.202.48	SSH
🇺🇸 bigscoots.com	2026-05-12 22:53:43 (3 weeks ago)	101.96.202.48 (CN/-/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: * ... show more 101.96.202.48 (CN/-/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 12 17:50:19 15488 sshd[26038]: Failed password for root from 159.223.33.252 port 60136 ssh2 May 12 17:45:28 15488 sshd[25673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.224.51 user=root May 12 17:53:26 15488 sshd[26265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.96.202.48 user=root May 12 17:53:27 15488 sshd[26265]: Failed password for root from 101.96.202.48 port 35972 ssh2 May 12 17:50:17 15488 sshd[26038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.33.252 user=root IP Addresses Blocked: 159.223.33.252 (SG/-/-) 165.154.224.51 (HK/-/-) show less	Brute-Force SSH
🇺🇸 sh97	2026-05-12 19:59:22 (3 weeks ago)	dedirock-8034437: SSH Brute Force from 101.96.202.48 at 2026-05-12 23:59:22 +04	Brute-Force SSH
🇵🇱 webadmin	2026-05-12 19:07:20 (3 weeks ago)		Brute-Force SSH

Showing 616 to 630 of 765 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a0e:97c0:3e3:2b3::1

🇭🇰 165.154.43.179

🇦🇹 152.53.0.56

🇭🇰 152.32.171.73

🇸🇬 143.198.217.151

🇩🇪 91.217.249.31

🇭🇰 20.187.65.213

🇺🇸 20.168.6.210

🇺🇸 2a13:9500:16b:be61::1

🇺🇸 216.218.206.89

🇺🇸 205.210.31.101

🇮🇳 203.145.143.163

🇹🇼 198.235.24.118

🇦🇷 186.56.11.2

🇸🇬 129.226.213.238

🇺🇸 66.175.213.4

🇮🇳 64.227.131.240

🇹🇭 45.194.70.250

🇧🇪 35.195.242.12

🇧🇪 34.53.245.36