JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.48.110.204

120.48.110.204 was found in our database!

This IP was reported 352 times. Confidence of Abuse is 100%: ?

100%

ISP	Beijing Baidu Netcom Science and Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS38365
Domain Name	baidu.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.48.110.204

Whois 120.48.110.204

IP Abuse Reports for 120.48.110.204:

This IP address has been reported a total of 352 times from 209 distinct sources. 120.48.110.204 was first reported on March 14th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 bogdanv	2026-06-24 15:09:34 (6 hours ago)	$f2bV_matches	Brute-Force SSH
🇨🇦 senkodev	2026-06-24 06:16:49 (15 hours ago)	2026-06-24T06:16:49.118572Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.48.110.204:422 ... show more 2026-06-24T06:16:49.118572Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.48.110.204:42272 (158.69.22.11:2222) [session: ec5c7fe5fdf7] 2026-06-24T06:16:49.587451Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 120.48.110.204:43118 (158.69.22.11:2222) [session: 79a3585c0dee] ... show less	Brute-Force SSH
🇫🇷 COMAITE	2026-06-23 21:31:33 (1 day ago)	Honeypot login success	Brute-Force
🇳🇱 Alboweb B.V.	2026-06-23 14:11:11 (1 day ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇩🇪 LoNET	2026-06-23 09:37:58 (1 day ago)	Report 2493321 with IP 3448912 for SSH brute-force attack by source 3535546 via ssh-honeypot/0.2.1+h ... show more Report 2493321 with IP 3448912 for SSH brute-force attack by source 3535546 via ssh-honeypot/0.2.1+http show less	Brute-Force SSH
🇮🇹 alph44	2026-06-23 02:10:34 (1 day ago)	SSH brute force attack detected: 5 failed attempts	Brute-Force
🇺🇸 shadowlab	2026-06-23 02:08:00 (1 day ago)	2026-06-22T19:07:44.816890-07:00 shadownetworks.org sshd[1154053]: Failed password for root from 120 ... show more 2026-06-22T19:07:44.816890-07:00 shadownetworks.org sshd[1154053]: Failed password for root from 120.48.110.204 port 52440 ssh2 2026-06-22T19:07:51.571230-07:00 shadownetworks.org sshd[1154151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.110.204 user=root 2026-06-22T19:07:53.254195-07:00 shadownetworks.org sshd[1154151]: Failed password for root from 120.48.110.204 port 55180 ssh2 2026-06-22T19:07:58.426775-07:00 shadownetworks.org sshd[1154227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.110.204 user=root 2026-06-22T19:08:00.402078-07:00 shadownetworks.org sshd[1154227]: Failed password for root from 120.48.110.204 port 59868 ssh2 ... show less	Brute-Force SSH
🇩🇪 vanlueckn	2026-06-22 02:01:49 (2 days ago)	2026-06-22T04:01:43.200414+02:00 nfs-server sshd-session[218543]: Connection closed by authenticatin ... show more 2026-06-22T04:01:43.200414+02:00 nfs-server sshd-session[218543]: Connection closed by authenticating user root 120.48.110.204 port 58612 [preauth] 2026-06-22T04:01:46.683798+02:00 nfs-server sshd-session[218546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.110.204 user=root 2026-06-22T04:01:48.680227+02:00 nfs-server sshd-session[218546]: Failed password for root from 120.48.110.204 port 60638 ssh2 ... show less	Brute-Force SSH
🇫🇷 kleine babykatze	2026-06-21 16:38:28 (3 days ago)	2026-06-21T18:38:19.198102+02:00 vmd172806 sshd[319165]: Failed password for root from 120.48.110.20 ... show more 2026-06-21T18:38:19.198102+02:00 vmd172806 sshd[319165]: Failed password for root from 120.48.110.204 port 37918 ssh2 2026-06-21T18:38:24.618544+02:00 vmd172806 sshd[319271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.110.204 user=root 2026-06-21T18:38:26.884501+02:00 vmd172806 sshd[319271]: Failed password for root from 120.48.110.204 port 43450 ssh2 ... show less	Brute-Force SSH FTP Brute-Force
🇺🇸 Maya Bsir	2026-06-21 11:59:32 (3 days ago)	2026-06-21T11:59:20.367815+00:00 vps-usa sshd[836650]: Failed password for root from 120.48.110.204 ... show more 2026-06-21T11:59:20.367815+00:00 vps-usa sshd[836650]: Failed password for root from 120.48.110.204 port 45542 ssh2 2026-06-21T11:59:24.560511+00:00 vps-usa sshd[836652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.110.204 user=root 2026-06-21T11:59:26.382176+00:00 vps-usa sshd[836652]: Failed password for root from 120.48.110.204 port 48648 ssh2 2026-06-21T11:59:30.422856+00:00 vps-usa sshd[836654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.110.204 user=root 2026-06-21T11:59:32.068847+00:00 vps-usa sshd[836654]: Failed password for root from 120.48.110.204 port 51834 ssh2 ... show less	Brute-Force SSH
🇩🇪 Justin F. \| AS204464	2026-06-21 06:58:42 (3 days ago)	Honeypot [nx-infrastructure]: Empty payload (likely service probe); 20022 [1] TCP Reported by: Justi ... show more Honeypot [nx-infrastructure]: Empty payload (likely service probe); 20022 [1] TCP Reported by: Justin F. show less	Port Scan
🇩🇪 LRob.fr	2026-06-20 22:45:01 (3 days ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇺🇸 amit177	2026-06-20 09:59:28 (4 days ago)		Brute-Force SSH
🇩🇪 dispaisyenterprises	2026-06-20 03:33:59 (4 days ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 2222 [1] TCP Reported by DisPaisy ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 2222 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇳🇱 knock	2026-06-19 23:32:54 (4 days ago)	Knock-Knock honeypot brute-force: SSH (47 total hits)	Brute-Force SSH

Showing 1 to 15 of 352 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a09:bac5:6d72:e3c::16b:135

🇳🇱 176.65.139.254

🇺🇸 172.234.25.150

🇨🇳 111.35.36.48

🇱🇹 62.60.130.219

🇸🇬 4.194.23.79

🇲🇽 201.165.139.35

🇹🇼 198.235.24.124

🇹🇷 188.59.182.213

🇧🇷 186.227.69.36

🇫🇷 185.182.186.243

🇧🇷 179.189.77.69

🇸🇬 152.32.218.244

🇨🇦 64.188.120.136

🇺🇸 44.163.228.26

🇺🇸 44.10.135.215

🇺🇸 38.162.141.186

🇧🇪 35.240.119.165

🇬🇧 35.203.210.142

🇪🇸 196.196.150.5