JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.48.181.193

120.48.181.193

Neutral Activity

616 reports found in our database

0% Low Risk

Abuse confidence score ?

ISP

Beijing Baidu Netcom Science and Technology Co., Ltd.

Usage Type

Data Center/Web Hosting/Transit

ASN

AS38365

Domain Name

baidu.com

Country

🇨🇳 China

City

Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

120.48.181.193 has been reported 616 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 120.48.181.193:

This IP address has been reported a total of 616 times from 314 distinct sources. 120.48.181.193 was first reported on November 21st 2025, and the most recent report was 3 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 QSC-Sentinel	2026-05-20 17:34:40 (3 months ago)	Banned by fail2ban jail sshd on etlab-research	Brute-Force SSH
🇫🇷 SpaceHost-Server	2025-12-30 23:28:37 (8 months ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2025-12-29 23:28:11 (8 months ago)		Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2025-12-29 22:14:44 (8 months ago)	ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/120.48.181.193	SSH
🇩🇪 ipcop.net	2025-12-29 07:26:10 (8 months ago)	2025-12-29T08:22:53.190123+01:00 router02.wira-gmbh.de sshd[1399445]: Invalid user ftpuser from 120. ... show more 2025-12-29T08:22:53.190123+01:00 router02.wira-gmbh.de sshd[1399445]: Invalid user ftpuser from 120.48.181.193 port 37288 2025-12-29T08:22:53.370791+01:00 router02.wira-gmbh.de sshd[1399445]: Disconnected from invalid user ftpuser 120.48.181.193 port 37288 [preauth] 2025-12-29T08:25:15.729528+01:00 router02.wira-gmbh.de sshd[1400210]: Invalid user ubuntu from 120.48.181.193 port 50522 2025-12-29T08:25:15.924759+01:00 router02.wira-gmbh.de sshd[1400210]: Disconnected from invalid user ubuntu 120.48.181.193 port 50522 [preauth] 2025-12-29T08:26:08.363877+01:00 router02.wira-gmbh.de sshd[1400491]: Disconnected from authenticating user root 120.48.181.193 port 57068 [preauth] show less	Brute-Force
🇯🇵 bing	2025-12-29 07:22:22 (8 months ago)	2025-12-29T15:22:19.382853 vm20251001720 sshd[1496221]: pam_unix(sshd:auth): authentication failure; ... show more 2025-12-29T15:22:19.382853 vm20251001720 sshd[1496221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.181.193 2025-12-29T15:22:21.437680 vm20251001720 sshd[1496221]: Failed password for invalid user ftpuser from 120.48.181.193 port 59208 ssh2 ... show less	Brute-Force SSH
🇦🇹 webnestify	2025-12-29 07:21:31 (8 months ago)	2025-12-29T07:21:30.342402+00:00 wn-at sshd[940067]: Invalid user ftpuser from 120.48.181.193 port 5 ... show more 2025-12-29T07:21:30.342402+00:00 wn-at sshd[940067]: Invalid user ftpuser from 120.48.181.193 port 54750 ... show less	Brute-Force SSH
🇩🇪 Nerdscave Hosting	2025-12-29 05:27:25 (8 months ago)	2025-12-29T07:25:51.267493+02:00 fra-GW01 sshd[2359565]: Failed password for invalid user ubuntu fro ... show more 2025-12-29T07:25:51.267493+02:00 fra-GW01 sshd[2359565]: Failed password for invalid user ubuntu from 120.48.181.193 port 51002 ssh2 2025-12-29T07:27:22.015091+02:00 fra-GW01 sshd[2359818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.181.193 user=root 2025-12-29T07:27:24.095704+02:00 fra-GW01 sshd[2359818]: Failed password for root from 120.48.181.193 port 37312 ssh2 ... show less	Brute-Force SSH
🇩🇪 ipcop.net	2025-12-29 05:03:06 (8 months ago)	2025-12-29T05:52:16.615371+01:00 web1.wira-gmbh.de sshd[2178245]: Disconnected from authenticating u ... show more 2025-12-29T05:52:16.615371+01:00 web1.wira-gmbh.de sshd[2178245]: Disconnected from authenticating user root 120.48.181.193 port 46840 [preauth] 2025-12-29T05:55:30.707565+01:00 web1.wira-gmbh.de sshd[2180948]: Disconnected from authenticating user root 120.48.181.193 port 47374 [preauth] 2025-12-29T06:01:48.418749+01:00 web1.wira-gmbh.de sshd[2185715]: Connection closed by 120.48.181.193 port 60940 [preauth] 2025-12-29T06:02:12.549588+01:00 web1.wira-gmbh.de sshd[2186407]: Disconnected from authenticating user root 120.48.181.193 port 41480 [preauth] 2025-12-29T06:03:06.483010+01:00 web1.wira-gmbh.de sshd[2186984]: Invalid user ubuntu from 120.48.181.193 port 39042 show less	Brute-Force
🇧🇷 chronos	2025-12-29 04:50:43 (8 months ago)	Generic malicious activity detected: [HONEYPOT] Attempted SSH access... \| Proto: TCP \| Port: 2222 \| ... show more Generic malicious activity detected: [HONEYPOT] Attempted SSH access... \| Proto: TCP \| Port: 2222 \| Location: China, Beijing show less	Port Scan Hacking
Anonymous	2025-12-29 04:47:50 (8 months ago)	SSH login attempts with user root	Brute-Force
🇩🇪 wlt-blocker	2025-12-29 04:25:54 (8 months ago)	Attempts to access SSH server with wrong credentials	SSH
🇫🇮 6kilowatti	2025-12-29 04:10:43 (8 months ago)	2025-12-29T06:10:40.846123+02:00 6kw.fi sshd[188168]: pam_unix(sshd:auth): authentication failure; l ... show more 2025-12-29T06:10:40.846123+02:00 6kw.fi sshd[188168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.181.193 user=root 2025-12-29T06:10:42.622006+02:00 6kw.fi sshd[188168]: Failed password for root from 120.48.181.193 port 37662 ssh2 ... show less	Brute-Force SSH
🇧🇪 madeit	2025-12-29 02:02:11 (8 months ago)		Brute-Force SSH
🇫🇷 fallwest	2025-12-29 00:33:15 (8 months ago)	Dec 29 01:31:17 vmi768479 sshd[3012863]: Invalid user zjh from 120.48.181.193 port 53130 Dec 29 01:3 ... show more Dec 29 01:31:17 vmi768479 sshd[3012863]: Invalid user zjh from 120.48.181.193 port 53130 Dec 29 01:31:17 vmi768479 sshd[3012863]: Disconnected from invalid user zjh 120.48.181.193 port 53130 [preauth] Dec 29 01:33:15 vmi768479 sshd[3012923]: Disconnected from authenticating user root 120.48.181.193 port 58020 [preauth] ... show less	Brute-Force SSH

Showing 1 to 15 of 616 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2409:40e0:1:a40d:8000::

🇮🇳 2402:8100:2b57:6305::5d4a:901e

🇨🇱 201.220.126.199

🇧🇷 192.141.80.182

🇧🇷 191.242.236.216

🇨🇴 179.1.204.102

🇨🇳 115.190.212.50

🇻🇳 113.161.79.218

🇩🇪 93.152.221.26

🇫🇷 91.231.89.145

🇳🇱 91.92.42.89

🇷🇴 80.94.95.115

🇳🇱 45.148.10.151

🇳🇱 45.148.10.141

🇬🇧 35.203.210.200

🇮🇳 2409:40d1:404:1d0c:8000::

🇺🇸 216.150.16.165

🇨🇳 203.189.221.17

🇧🇷 189.37.72.233

🇲🇽 177.245.225.99