AbuseIPDB » 120.48.2.117

120.48.2.117 was found in our database!

This IP was reported 341 times. Confidence of Abuse is 100%: ?

100%

ISP	Beijing Baidu Netcom Science and Technology Co. Ltd.
Usage Type	Search Engine Spider
Domain Name	baidu.com
Country	China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 120.48.2.117

Whois 120.48.2.117

IP Abuse Reports for 120.48.2.117:

This IP address has been reported a total of 341 times from 173 distinct sources. 120.48.2.117 was first reported on May 30th 2022, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
Anonymous	14 Jul 2022	Jul 14 22:33:50 lana sshd[1474033]: Failed password for root from 120.48.2.117 port 53252 ssh2 ... show moreJul 14 22:33:50 lana sshd[1474033]: Failed password for root from 120.48.2.117 port 53252 ssh2 Jul 14 22:33:55 lana sshd[1474115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.2.117 user=root Jul 14 22:33:57 lana sshd[1474115]: Failed password for root from 120.48.2.117 port 53316 ssh2 Jul 14 22:34:07 lana sshd[1474217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.2.117 user=root Jul 14 22:34:10 lana sshd[1474217]: Failed password for root from 120.48.2.117 port 53382 ssh2 ... show less	Brute-Force SSH
ghostwarriors	12 Jul 2022	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
MU-star.net	09 Jul 2022	Invalid user manager from 120.48.2.117 port 42278	Port Scan Brute-Force SSH
MU-star.net	08 Jul 2022	Invalid user manager from 120.48.2.117 port 42278	Port Scan Brute-Force SSH
www.jonathannet.dk	08 Jul 2022	Jul 8 07:23:22 server1 sshd[783178]: Failed password for invalid user geoserver from 120.48.2.117 p ... show moreJul 8 07:23:22 server1 sshd[783178]: Failed password for invalid user geoserver from 120.48.2.117 port 46928 ssh2 Jul 8 07:29:04 server1 sshd[783516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.2.117 user=root Jul 8 07:29:07 server1 sshd[783516]: Failed password for root from 120.48.2.117 port 53878 ssh2 ... show less	SSH
Tom077	07 Jul 2022	Jul 8 05:42:41 server sshd[3811714]: Invalid user ubuntu from 120.48.2.117 port 43794 Jul 8 ... show moreJul 8 05:42:41 server sshd[3811714]: Invalid user ubuntu from 120.48.2.117 port 43794 Jul 8 05:42:41 server sshd[3811714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.2.117 Jul 8 05:42:43 server sshd[3811714]: Failed password for invalid user ubuntu from 120.48.2.117 port 43794 ssh2 show less	Port Scan Brute-Force SSH
actars	07 Jul 2022	Jul 8 10:11:52 localhost sshd[24027]: Invalid user test from 120.48.2.117 port 40900 Jul 8 1 ... show moreJul 8 10:11:52 localhost sshd[24027]: Invalid user test from 120.48.2.117 port 40900 Jul 8 10:11:52 localhost sshd[24027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.2.117 Jul 8 10:11:54 localhost sshd[24027]: Failed password for invalid user test from 120.48.2.117 port 40900 ssh2 Jul 8 10:11:52 localhost sshd[24027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.2.117 Jul 8 10:11:54 localhost sshd[24027]: Failed password for invalid user test from 120.48.2.117 port 40900 ssh2 ... show less	Brute-Force SSH
ZeroAttackVector	07 Jul 2022	hkg: 3 unauthorised SSH/Telnet login attempts between 2022-07-08T01:35:03Z and 2022-07-08T01:41:15Z	Brute-Force SSH
actars	07 Jul 2022	Jul 8 09:35:21 localhost sshd[23878]: Failed password for invalid user rg from 120.48.2.117 port 44 ... show moreJul 8 09:35:21 localhost sshd[23878]: Failed password for invalid user rg from 120.48.2.117 port 44258 ssh2 Jul 8 09:37:37 localhost sshd[23894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.2.117 user=backup Jul 8 09:37:39 localhost sshd[23894]: Failed password for backup from 120.48.2.117 port 35062 ssh2 Jul 8 09:39:01 localhost sshd[23901]: Invalid user teste from 120.48.2.117 port 52900 Jul 8 09:39:01 localhost sshd[23901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.2.117 Jul 8 09:39:03 localhost sshd[23901]: Failed password for invalid user teste from 120.48.2.117 port 52900 ssh2 ... show less	Brute-Force SSH
mishima0340.clear-net.jp	07 Jul 2022	Automatic report BANNED IP	Brute-Force SSH
bulletz	07 Jul 2022	Jul 8 03:35:11 vps sshd[12309]: Invalid user rg from 120.48.2.117 port 56484 Jul 8 03:35:11 ... show moreJul 8 03:35:11 vps sshd[12309]: Invalid user rg from 120.48.2.117 port 56484 Jul 8 03:35:11 vps sshd[12309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.2.117 Jul 8 03:35:13 vps sshd[12309]: Failed password for invalid user rg from 120.48.2.117 port 56484 ssh2 ... show less	Brute-Force SSH
Lat31320	07 Jul 2022	debx - SSH brute force	Brute-Force SSH
opaldotjs	07 Jul 2022	Automatic report; ssh brute force port 22	Brute-Force SSH
ghostwarriors	07 Jul 2022	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
vtibi	07 Jul 2022	Jul 7 21:30:09 myvps sshd[3993424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show moreJul 7 21:30:09 myvps sshd[3993424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.2.117 Jul 7 21:30:11 myvps sshd[3993424]: Failed password for invalid user aba from 120.48.2.117 port 45732 ssh2 Jul 7 21:31:33 myvps sshd[3994194]: Invalid user erp from 120.48.2.117 port 35608 Jul 7 21:31:33 myvps sshd[3994194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.2.117 Jul 7 21:31:35 myvps sshd[3994194]: Failed password for invalid user erp from 120.48.2.117 port 35608 ssh2 ... show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩