JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

112.48.129.20

Neutral Activity

Abuse confidence score ?

0% Low Risk

418 reports

108 reporters · latest 3 years ago

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Fuzhou, Fujian

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

112.48.129.20 has been reported 418 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 112.48.129.20

Export CSV

This IP address has been reported a total of 418 times from 108 distinct sources. 112.48.129.20 was first reported on April 3rd 2022, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 www.tana.it	2023-01-19 06:39:54 (3 years ago)	SMTP auth dictionary attack	Brute-Force
🇺🇸 etu brutus	2023-01-18 01:45:14 (3 years ago)	112.48.129.20 has been banned for [spam] ...	Hacking Brute-Force
🇫🇷 adlp.org	2023-01-17 20:50:12 (3 years ago)	Jan 17 20:50:06 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;112.48.129.20;[UNAVA ... show more Jan 17 20:50:06 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;112.48.129.20;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill Jan 17 20:50:09 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;112.48.129.20;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill Jan 17 20:50:12 nginx-mua ==smtp/[email protected]== : TRAKEUR-Out;0;127.0.0.1;112.48.129.20;[UNAVAILABLE];[email protected];smtp;plain;1;@adlp.org$;KILL;2;Licence to kill ... show less	Brute-Force
🇨🇳 ThreatBook.io	2023-01-16 21:08:27 (3 years ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/112.48.129.20	Brute-Force
🇫🇷 security.rdmc.fr	2023-01-16 18:26:50 (3 years ago)	Automatic report - Banned IP Access	Web App Attack
🇨🇾 debaba	2023-01-16 03:56:17 (3 years ago)	2023-01-16T05:56:14.545530+02:00 sabine-t14 sshd[151278]: Failed password for root from 112.48.129.2 ... show more 2023-01-16T05:56:14.545530+02:00 sabine-t14 sshd[151278]: Failed password for root from 112.48.129.20 port 42212 ssh2 2023-01-16T05:56:16.817979+02:00 sabine-t14 sshd[151278]: Connection closed by authenticating user root 112.48.129.20 port 42212 [preauth] ... show less	Brute-Force SSH
🇺🇦 vbios.com	2023-01-15 19:30:15 (3 years ago)	MAIL Brute-force	Email Spam Brute-Force
🇫🇷 security.rdmc.fr	2023-01-15 17:17:37 (3 years ago)	Automatic report - Banned IP Access	Web App Attack
🇨🇦 nickto	2023-01-15 14:26:03 (3 years ago)	Jan 15 09:25:49 Tower sshd[40130]: Connection from 112.48.129.20 port 41054 on 192.168.10.220 port ... show more Jan 15 09:25:49 Tower sshd[40130]: Connection from 112.48.129.20 port 41054 on 192.168.10.220 port 22 rdomain "" Jan 15 09:26:00 Tower sshd[40130]: Invalid user Admin from 112.48.129.20 port 41054 Jan 15 09:26:00 Tower sshd[40130]: error: Could not get shadow information for NOUSER Jan 15 09:26:00 Tower sshd[40130]: Failed password for invalid user Admin from 112.48.129.20 port 41054 ssh2 Jan 15 09:26:01 Tower sshd[40130]: Connection closed by invalid user Admin 112.48.129.20 port 41054 [preauth] show less	Brute-Force SSH
🇺🇸 Dan Habot	2023-01-15 07:34:48 (3 years ago)	2023-01-15T02:38:49.813420-05:00 workstation sshd[1098146]: Invalid user Admin from 112.48.129.20 po ... show more 2023-01-15T02:38:49.813420-05:00 workstation sshd[1098146]: Invalid user Admin from 112.48.129.20 port 35072 ... show less	Brute-Force SSH
🇬🇧 Paul Smith	2023-01-13 21:38:54 (3 years ago)	Email Auth Brute force attack 1/1 in last day	Brute-Force
🇩🇪 Nyvil	2023-01-12 04:34:27 (3 years ago)	Invalid user Support from 112.48.129.20 port 45702	Brute-Force SSH
🇨🇳 ThreatBook.io	2023-01-11 21:08:43 (3 years ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/112.48.129.20	SSH
🇹🇭 thaizone.com	2023-01-11 15:29:48 (3 years ago)	Mail credential brute-force attack (SM3) #2	Email Spam Brute-Force
🇺🇸 Peregrine	2023-01-11 07:47:47 (3 years ago)	Jan 11 04:47:45 fisher sshd[17524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ... show more Jan 11 04:47:45 fisher sshd[17524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.48.129.20 Jan 11 04:47:47 fisher sshd[17524]: Failed password for invalid user DSL from 112.48.129.20 port 45660 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 418 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.217

🇮🇳 139.59.28.253

🇳🇱 109.160.32.105

🇩🇪 213.209.159.208

🇺🇸 206.189.194.219

🇳🇱 204.76.203.4

🇺🇸 162.141.123.71

🇺🇸 136.109.253.60

🇨🇳 111.22.163.209

🇨🇦 89.251.0.219

🇯🇵 43.167.207.58

🇺🇸 43.135.183.2

🇨🇳 124.161.224.81

🇹🇼 114.37.145.219

🇺🇸 69.42.211.52

🇱🇹 62.60.130.242

🇺🇸 216.25.89.89

🇳🇱 195.178.110.228

🇵🇰 180.149.212.247

🇮🇩 103.168.135.187