JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.48.170.9

120.48.170.9 was found in our database!

This IP was reported 418 times. Confidence of Abuse is 100%: ?

100%

ISP	Beijing Baidu Netcom Science and Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS38365
Domain Name	baidu.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.48.170.9

Whois 120.48.170.9

IP Abuse Reports for 120.48.170.9:

This IP address has been reported a total of 418 times from 233 distinct sources. 120.48.170.9 was first reported on April 19th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kathanp	2026-05-23 22:18:27 (1 week ago)	May 23 22:18:24 nova sshd[91060]: Invalid user user from 120.48.170.9 port 55262 May 23 22:18:25 nov ... show more May 23 22:18:24 nova sshd[91060]: Invalid user user from 120.48.170.9 port 55262 May 23 22:18:25 nova sshd[91062]: Invalid user user from 120.48.170.9 port 56192 May 23 22:18:27 nova sshd[91064]: Invalid user user from 120.48.170.9 port 57240 show less	Brute-Force SSH
🇫🇮 SamJUK	2026-05-23 16:44:22 (1 week ago)	2026-05-23T17:44:26.586699+01:00 sam-prod-production sshd[515045]: Failed password for root from 120 ... show more 2026-05-23T17:44:26.586699+01:00 sam-prod-production sshd[515045]: Failed password for root from 120.48.170.9 port 44640 ssh2 2026-05-23T17:44:27.956416+01:00 sam-prod-production sshd[515055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.170.9 user=root 2026-05-23T17:44:30.147901+01:00 sam-prod-production sshd[515055]: Failed password for root from 120.48.170.9 port 46794 ssh2 2026-05-23T17:44:33.539014+01:00 sam-prod-production sshd[515057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.170.9 user=root 2026-05-23T17:44:34.887580+01:00 sam-prod-production sshd[515057]: Failed password for root from 120.48.170.9 port 49872 ssh2 ... show less	Brute-Force SSH
🇧🇬 MazenHost	2026-05-23 16:18:57 (1 week ago)	May 23 19:18:41 BCRP sshd[4178292]: Failed password for root from 120.48.170.9 port 60040 ssh2 May 2 ... show more May 23 19:18:41 BCRP sshd[4178292]: Failed password for root from 120.48.170.9 port 60040 ssh2 May 23 19:18:46 BCRP sshd[4178470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.170.9 user=root May 23 19:18:48 BCRP sshd[4178470]: Failed password for root from 120.48.170.9 port 35166 ssh2 May 23 19:18:50 BCRP sshd[4178692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.170.9 user=root May 23 19:18:51 BCRP sshd[4178692]: Failed password for root from 120.48.170.9 port 40188 ssh2 May 23 19:18:54 BCRP sshd[4178870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.170.9 user=root May 23 19:18:57 BCRP sshd[4178870]: Failed password for root from 120.48.170.9 port 43498 ssh2 ... show less	Brute-Force SSH
🇧🇷 ICS Labs	2026-05-23 13:35:11 (1 week ago)	ICS Labs identified 120.48.170.9 as a malicious indicator from threat intelligence.	DDoS Attack Hacking Exploited Host
🇩🇪 LoNET	2026-05-23 09:53:01 (1 week ago)	Report 2395170 with IP 3367469 for SSH brute-force attack by source 3437395 via ssh-honeypot/0.2.1+h ... show more Report 2395170 with IP 3367469 for SSH brute-force attack by source 3437395 via ssh-honeypot/0.2.1+http show less	Brute-Force SSH
🇵🇱 webadmin	2026-05-23 03:41:35 (1 week ago)		Brute-Force SSH
🇰🇷 Woodie	2026-05-23 01:01:16 (1 week ago)	2026-05-22T21:01:02.070123-04:00 debian sshd[479636]: Failed password for root from 120.48.170.9 por ... show more 2026-05-22T21:01:02.070123-04:00 debian sshd[479636]: Failed password for root from 120.48.170.9 port 60256 ssh2 2026-05-22T21:01:06.966637-04:00 debian sshd[479720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.170.9 user=root 2026-05-22T21:01:08.826987-04:00 debian sshd[479720]: Failed password for root from 120.48.170.9 port 37138 ssh2 2026-05-22T21:01:12.658346-04:00 debian sshd[479808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.170.9 user=root 2026-05-22T21:01:15.012083-04:00 debian sshd[479808]: Failed password for root from 120.48.170.9 port 40696 ssh2 ... show less	Brute-Force SSH
🇩🇪 BadXray	2026-05-23 00:00:28 (1 week ago)	2026-05-22T23:54:20.110449+00:00 certa-prod-1 sshd[920679]: pam_unix(sshd:auth): authentication fail ... show more 2026-05-22T23:54:20.110449+00:00 certa-prod-1 sshd[920679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.170.9 user=root 2026-05-22T23:54:22.018186+00:00 certa-prod-1 sshd[920679]: Failed password for root from 120.48.170.9 port 41064 ssh2 2026-05-23T00:00:25.437189+00:00 certa-prod-1 sshd[921493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.170.9 user=root 2026-05-23T00:00:27.119184+00:00 certa-prod-1 sshd[921493]: Failed password for root from 120.48.170.9 port 55656 ssh2 ... show less	Brute-Force SSH
🇬🇧 PeravixGroup	2026-05-22 19:40:15 (1 week ago)	Honeypot detection: SSH brute-force authentication attempt on port 22. Severity: MEDIUM. Aaran.cloud	SSH Brute-Force
🇮🇱 spd.co.il	2026-05-22 19:02:41 (1 week ago)	Unauthorized access attempts on ports: 22	Brute-Force SSH
🇺🇸 Your_Top	2026-05-22 11:02:40 (1 week ago)	2026-05-22T04:02:33.908046-07:00 cm0app00.cyberstadium.com sshd[3746574]: Invalid user user from 120 ... show more 2026-05-22T04:02:33.908046-07:00 cm0app00.cyberstadium.com sshd[3746574]: Invalid user user from 120.48.170.9 port 59144 2026-05-22T04:02:36.430026-07:00 cm0app00.cyberstadium.com sshd[3746578]: Invalid user user from 120.48.170.9 port 60114 2026-05-22T04:02:37.430369-07:00 cm0app00.cyberstadium.com sshd[3746602]: Invalid user user from 120.48.170.9 port 33864 2026-05-22T04:02:38.383708-07:00 cm0app00.cyberstadium.com sshd[3746606]: Invalid user user from 120.48.170.9 port 34726 2026-05-22T04:02:39.734999-07:00 cm0app00.cyberstadium.com sshd[3746608]: Invalid user user from 120.48.170.9 port 35412 ... show less	Brute-Force SSH
🇬🇧 gbzret4d	2026-05-22 09:47:02 (1 week ago)	Honeypot [uk-production01]: Brute-force attack detected on 22/SSH • Credentials: root:ubuntu, root:d ... show more Honeypot [uk-production01]: Brute-force attack detected on 22/SSH • Credentials: root:ubuntu, root:debian, root:centos, root:linux • Number of login attempts: 4 • Client: SSH-2.0-Go • Uploaded files: sshd show less	Brute-Force SSH
🇺🇸 willard_networker	2026-05-22 09:40:51 (1 week ago)	Brute-force: 13 connection attempts within 24 hours starting at 2026-05-22T09:40:51.067837Z.	Brute-Force SSH
🇬🇧 redfox	2026-05-22 06:13:14 (1 week ago)	2026-05-22T08:13:06.142194+02:00 vps643776 sshd[1630695]: Failed password for root from 120.48.170.9 ... show more 2026-05-22T08:13:06.142194+02:00 vps643776 sshd[1630695]: Failed password for root from 120.48.170.9 port 50184 ssh2 2026-05-22T08:13:07.546644+02:00 vps643776 sshd[1630706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.170.9 user=root 2026-05-22T08:13:09.593822+02:00 vps643776 sshd[1630706]: Failed password for root from 120.48.170.9 port 52558 ssh2 2026-05-22T08:13:10.869471+02:00 vps643776 sshd[1630724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.170.9 user=root 2026-05-22T08:13:13.328135+02:00 vps643776 sshd[1630724]: Failed password for root from 120.48.170.9 port 54980 ssh2 ... show less	Brute-Force SSH
🇫🇮 Yachiyo Runami	2026-05-21 23:59:19 (1 week ago)	Port Scan on Honeypot \| Ports: 22/SSH \| Proto: TCP(1) \| Flags: all SYN \| TTL: 40 \| Len: 60B \| Win: 2 ... show more Port Scan on Honeypot \| Ports: 22/SSH \| Proto: TCP(1) \| Flags: all SYN \| TTL: 40 \| Len: 60B \| Win: 29200(1) \| F2B/ufw-honeypot@2026-05-21T23:59:19Z show less	Port Scan Hacking

Showing 61 to 75 of 418 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.226

🇺🇬 196.0.120.6

🇺🇸 173.255.160.136

🇺🇸 172.203.234.251

🇮🇳 157.119.46.162

🇪🇨 157.100.120.35

🇺🇸 152.32.208.73

🇹🇷 149.86.152.231

🇮🇳 106.76.74.48

🇧🇦 104.239.103.122

🇺🇸 93.152.208.14

🇮🇶 82.129.19.8

🇬🇧 82.14.178.205

🇻🇳 210.245.95.11

🇦🇷 179.40.112.10

🇳🇱 176.65.139.232

🇮🇶 169.224.125.122

🇮🇶 149.255.211.23

🇵🇾 143.202.209.23

🇵🇭 143.44.184.204