120.48.21.70

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
96% Critical
25 reports
17 reporters · latest 44 minutes ago
ISP
Beijing Baidu Netcom Science and Technology Co., Ltd.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS38365
Domain Name
baidu.com
Country
🇨🇳 China
City
Beijing, Beijing
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
25 from 17 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 7 🇳🇱 Netherlands 5 🇺🇸 United States of America 5
Most common categories Brute-Force 21 Hacking 4 Web App Attack 1 Exploited Host 1 Email Spam 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 TurboTechieSystems
Brute-Force
🇩🇪 eebh.hu
Nov 10 17:33:04 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=120.48.21.70, lip=194.36.88.23, session=<H1f9oe5f9tB4MBVG> ...
Brute-Force
Anonymous
7x Dovecot auth failed (on 6 different adresses)
Brute-Force
🇸🇪 triplecode
Reported from hMailServer
Hacking
🇩🇪 eebh.hu
Nov 9 21:22:24 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=120.48.21.70, lip=194.36.88.23, session=<xARJuN1fsM54MBVG> ...
Brute-Force
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-09 UTC.
Brute-Force
🇺🇸 TurboTechieSystems
Brute-Force
🇮🇹 Progetto1
Mail - Multiple failed login attempts
Brute-Force Exploited Host
🇺🇸 TurboTechieSystems
Brute-Force
Anonymous
automatically banned
Brute-Force Email Spam
🇳🇱 maxxsense
(pop3d) Failed POP3 login from 120.48.21.70 (CN/China/-)
Brute-Force
🇩🇪 eebh.hu
Nov 9 11:13:41 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 0 secs): user=<[email protected]>, rip=120.48.21.70, lip=194.36.88.23, session=<mC5cN9Vftqp4MBVG> ...
Brute-Force
🇺🇸 TurboTechieSystems
Brute-Force
🇹🇷 Jova
Repeated failed POP logins to a mail account (credential guessing).
Brute-Force
🇳🇱 wlt-blocker
Attempts to login to mail server with wrong username and/or password
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 193.47.62.69
🇧🇷 167.249.129.139
🇮🇳 103.176.16.35
🇹🇬 102.64.223.135
🇩🇪 85.155.14.246
🇨🇳 43.139.238.192
🇹🇭 27.254.190.148
🇺🇸 3.89.124.56
🇦🇷 190.16.149.50
🇲🇽 187.190.35.163
🇺🇸 172.174.152.79
🇷🇺 89.179.68.21
🇺🇸 50.6.111.141
🇺🇸 47.159.122.167
🇻🇪 190.89.30.99
🇳🇱 109.160.32.166
🇺🇸 98.93.209.120
🇳🇱 77.239.124.40
🇳🇱 45.148.10.230
🇨🇳 27.42.189.216
feedback