JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.48.21.92

120.48.21.92 was found in our database!

This IP was reported 78 times. Confidence of Abuse is 100%: ?

100%

ISP	Beijing Baidu Netcom Science and Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS38365
Domain Name	baidu.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.48.21.92

Whois 120.48.21.92

IP Abuse Reports for 120.48.21.92:

This IP address has been reported a total of 78 times from 66 distinct sources. 120.48.21.92 was first reported on July 31st 2026, and the most recent report was 52 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 helix	2026-09-18 06:11:58 (52 minutes ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇬🇧 Silly Development	2026-09-17 15:16:40 (15 hours ago)	2026-09-17T16:16:31.726044+01:00 ozo-b456b sshd[4110996]: Failed password for root from 120.48.21.92 ... show more 2026-09-17T16:16:31.726044+01:00 ozo-b456b sshd[4110996]: Failed password for root from 120.48.21.92 port 40690 ssh2 2026-09-17T16:16:37.257765+01:00 ozo-b456b sshd[4111019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.21.92 user=root 2026-09-17T16:16:39.816529+01:00 ozo-b456b sshd[4111019]: Failed password for root from 120.48.21.92 port 42346 ssh2 ... show less	Brute-Force SSH
🇩🇪 xavier-momain.eu	2026-09-17 02:26:54 (1 day ago)	CrowdSec ban — scenario: ssh:bruteforce	Brute-Force SSH
🇩🇪 NetWatch	2026-09-15 14:28:26 (2 days ago)	The IP 120.48.21.92 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇹🇷 neron	2026-09-14 06:55:37 (4 days ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇦🇹 kuppit	2026-09-13 04:20:34 (5 days ago)	Honeypot bot from CN: 19 SSH login attempts; 2 commands executed; first 2026-09-13 02:55:59, last 20 ... show more Honeypot bot from CN: 19 SSH login attempts; 2 commands executed; first 2026-09-13 02:55:59, last 2026-09-13 02:59:39 show less	Brute-Force SSH Hacking
🇫🇷 -SK-	2026-09-13 00:53:56 (5 days ago)	DUS - (f2b sshd massive attemts)	Brute-Force SSH
🇦🇺 dyln	2026-09-11 10:10:30 (6 days ago)	Dyls honeypot brute-force: SSH (1 total hits)	Brute-Force SSH
🇳🇱 EGP Abuse Dept	2026-09-11 08:36:18 (6 days ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH
🇩🇪 Xorog	2026-09-11 08:29:56 (6 days ago)	[Fri Sep 11 10:29:56 AM CEST 2026] [Automated Fail2Ban Report] Unauthorized attempt to connect via S ... show more [Fri Sep 11 10:29:56 AM CEST 2026] [Automated Fail2Ban Report] Unauthorized attempt to connect via SSH show less	Brute-Force SSH Port Scan Hacking
🇺🇸 jennij	2026-09-10 06:29:29 (1 week ago)	Fail2Ban sshd ban on Impala ...	Brute-Force SSH
🇫🇷 LRNP	2026-09-10 06:23:45 (1 week ago)	2026-09-10T06:23:32.151096+00:00 boron sshd[363041]: pam_unix(sshd:auth): authentication failure; lo ... show more 2026-09-10T06:23:32.151096+00:00 boron sshd[363041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.21.92 user=root 2026-09-10T06:23:34.888525+00:00 boron sshd[363041]: Failed password for root from 120.48.21.92 port 34140 ssh2 2026-09-10T06:23:36.909183+00:00 boron sshd[363041]: Connection closed by authenticating user root 120.48.21.92 port 34140 [preauth] ... show less	Brute-Force SSH
🇧🇬 MazenHost	2026-09-09 20:17:01 (1 week ago)	Sep 9 22:16:44 QBDevServerMS2025 sshd[2680066]: Failed password for root from 120.48.21.92 port 512 ... show more Sep 9 22:16:44 QBDevServerMS2025 sshd[2680066]: Failed password for root from 120.48.21.92 port 51236 ssh2 Sep 9 22:16:47 QBDevServerMS2025 sshd[2680081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.21.92 user=root Sep 9 22:16:49 QBDevServerMS2025 sshd[2680081]: Failed password for root from 120.48.21.92 port 60036 ssh2 Sep 9 22:16:53 QBDevServerMS2025 sshd[2680099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.21.92 user=root Sep 9 22:16:55 QBDevServerMS2025 sshd[2680099]: Failed password for root from 120.48.21.92 port 36920 ssh2 Sep 9 22:16:59 QBDevServerMS2025 sshd[2680109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.21.92 user=root Sep 9 22:17:01 QBDevServerMS2025 sshd[2680109]: Failed password for root from 120.48.21.92 port 41820 ssh2 ... show less	Brute-Force SSH
🇯🇵 Kinsei Engineering Inc.	2026-09-09 19:38:42 (1 week ago)	UFW:High-frequency access to non-released SSH or Telnet ports	SSH Port Scan
🇺🇸 RAP	2026-09-09 17:38:37 (1 week ago)	2026-09-09 17:38:37 UTC Unauthorized activity to TCP port 22. SSH	SSH

Showing 1 to 15 of 78 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.139.186.238

🇺🇸 195.184.76.67

🇮🇳 140.238.160.152

🇩🇪 139.59.147.177

🇨🇳 123.138.237.176

🇨🇳 123.13.93.60

🇺🇦 78.30.250.62

🇺🇸 68.189.117.116

🇩🇪 51.38.115.161

🇸🇬 172.86.81.140

🇮🇩 163.7.3.241

🇺🇸 162.216.150.18

🇵🇰 153.117.40.231

🇨🇳 119.51.247.36

🇺🇸 104.22.62.98

🇬🇧 89.37.172.138

🇷🇴 80.94.92.130

🇩🇪 69.5.169.154

🇨🇦 51.222.245.44

🇮🇳 51.162.178.199