JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.48.30.181

120.48.30.181 was found in our database!

This IP was reported 1,413 times. Confidence of Abuse is 100%: ?

100%

ISP	Beijing Baidu Netcom Science and Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS38365
Domain Name	baidu.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.48.30.181

Whois 120.48.30.181

IP Abuse Reports for 120.48.30.181:

This IP address has been reported a total of 1,413 times from 551 distinct sources. 120.48.30.181 was first reported on May 4th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇰🇷 hanb.jp	2026-06-19 08:19:04 (2 days ago)	Jun 19 08:18:57 v4bgp sshd[923255]: Failed password for root from 120.48.30.181 port 41434 ssh2 Jun ... show more Jun 19 08:18:57 v4bgp sshd[923255]: Failed password for root from 120.48.30.181 port 41434 ssh2 Jun 19 08:19:01 v4bgp sshd[923257]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.30.181 user=root Jun 19 08:19:03 v4bgp sshd[923257]: Failed password for root from 120.48.30.181 port 50576 ssh2 ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-06-19 05:50:31 (2 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇮🇹 alph44	2026-06-19 02:58:44 (2 days ago)	SSH brute force attack detected: 5 failed attempts	Brute-Force
🇬🇧 PeravixGroup	2026-06-19 01:25:47 (2 days ago)	Honeypot detection: SSH brute-force authentication attempt on port 22. Severity: MEDIUM. Aaran.cloud	SSH Brute-Force
🇺🇸 RAP	2026-06-18 23:19:40 (2 days ago)	2026-06-18 23:19:40 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇦🇹 urnilxfgbez	2026-06-18 22:45:00 (2 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇩🇪 ipcop.net	2026-06-18 20:50:51 (2 days ago)	2026-06-18T22:50:41.604751+02:00 rt-cs-287463.rt.pbx-host.com sshd-session[1778008]: Connection clos ... show more 2026-06-18T22:50:41.604751+02:00 rt-cs-287463.rt.pbx-host.com sshd-session[1778008]: Connection closed by authenticating user root 120.48.30.181 port 37190 [preauth] 2026-06-18T22:50:42.901042+02:00 rt-cs-287463.rt.pbx-host.com sshd-session[1778300]: Connection closed by authenticating user root 120.48.30.181 port 57596 [preauth] 2026-06-18T22:50:44.770511+02:00 rt-cs-287463.rt.pbx-host.com sshd-session[1778304]: Connection closed by authenticating user root 120.48.30.181 port 58538 [preauth] 2026-06-18T22:50:46.041088+02:00 rt-cs-287463.rt.pbx-host.com sshd-session[1778314]: Connection closed by authenticating user root 120.48.30.181 port 59968 [preauth] 2026-06-18T22:50:50.383663+02:00 rt-cs-287463.rt.pbx-host.com sshd-session[1778318]: Connection closed by authenticating user root 120.48.30.181 port 60910 [preauth] show less	Brute-Force
🇺🇸 Floofie	2026-06-18 20:38:56 (2 days ago)	2026-06-18T16:38:38.231636-04:00 site sshd-session[23338]: User root from 120.48.30.181 not allowed ... show more 2026-06-18T16:38:38.231636-04:00 site sshd-session[23338]: User root from 120.48.30.181 not allowed because not listed in AllowUsers 2026-06-18T16:38:52.128972-04:00 site sshd-session[23340]: User root from 120.48.30.181 not allowed because not listed in AllowUsers 2026-06-18T16:38:55.582611-04:00 site sshd-session[23342]: User root from 120.48.30.181 not allowed because not listed in AllowUsers ... show less	SSH
🇺🇸 66691337	2026-06-18 17:44:42 (2 days ago)	2026-06-18T17:24:49.594Z ACCEPT host=120.48.30.181 port=41308 fd=4 n=1/4096 2026-06-18T17:24:49.594Z ... show more 2026-06-18T17:24:49.594Z ACCEPT host=120.48.30.181 port=41308 fd=4 n=1/4096 2026-06-18T17:24:49.594Z ACCEPT host=120.48.30.181 port=41308 fd=4 n=1/4096 2026-06-18T17:27:20.137Z ACCEPT host=120.48.30.181 port=58108 fd=5 n=2/4096 2026-06-18T17:27:20.137Z ACCEPT host=120.48.30.181 port=58108 fd=5 n=2/4096 2026-06-18T17:29:40.651Z ACCEPT host=120.48.30.181 port=39722 fd=4 n=2/4096 2026-06-18T17:29:40.651Z ACCEPT host=120.48.30.181 port=39722 fd=4 n=2/4096 2026-06-18T17:44:40.869Z ACCEPT host=120.48.30.181 port=34286 fd=5 n=2/4096 2026-06-18T17:44:40.869Z ACCEPT host=120.48.30.181 port=34286 fd=5 n=2/4096 ... show less	Brute-Force SSH
🇨🇦 Tanados	2026-06-18 14:51:23 (3 days ago)	Blocked by UFW [22/tcp] Source port: 54304 TTL: 41 Packet length: 60 TOS: 0x00 This report was gene ... show more Blocked by UFW [22/tcp] Source port: 54304 TTL: 41 Packet length: 60 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH
🇩🇪 ipcop.net	2026-06-18 09:34:30 (3 days ago)	2026-06-18T11:34:21.449452+02:00 rt-cs-999999.rt.pbx-host.com sshd-session[1620975]: Connection clos ... show more 2026-06-18T11:34:21.449452+02:00 rt-cs-999999.rt.pbx-host.com sshd-session[1620975]: Connection closed by authenticating user root 120.48.30.181 port 33848 [preauth] 2026-06-18T11:34:22.834846+02:00 rt-cs-999999.rt.pbx-host.com sshd-session[1620979]: Connection closed by authenticating user root 120.48.30.181 port 34590 [preauth] 2026-06-18T11:34:26.588526+02:00 rt-cs-999999.rt.pbx-host.com sshd-session[1620988]: Connection closed by authenticating user root 120.48.30.181 port 35592 [preauth] 2026-06-18T11:34:28.584350+02:00 rt-cs-999999.rt.pbx-host.com sshd-session[1621002]: Connection closed by authenticating user root 120.48.30.181 port 38540 [preauth] 2026-06-18T11:34:29.697731+02:00 rt-cs-999999.rt.pbx-host.com sshd-session[1621008]: Connection closed by authenticating user root 120.48.30.181 port 40048 [preauth] show less	Brute-Force
🇯🇵 rafale2k	2026-06-18 07:41:38 (3 days ago)	SSH Brute Force	Brute-Force SSH
🇩🇪 formality	2026-06-18 06:57:37 (3 days ago)	Invalid user user from 120.48.30.181 port 49096	Brute-Force SSH
🇫🇷 EDSL	2026-06-18 05:36:21 (3 days ago)	[SRV-VPN1] Blocked by SysWarden Firewall (SSH Attack)	Brute-Force SSH Port Scan
🇩🇪 fynndows.de	2026-06-18 03:50:36 (3 days ago)	2026-06-18T03:50:34.022771+00:00 fynn-epyc3 sshd-session[1944978]: pam_unix(sshd:auth): authenticati ... show more 2026-06-18T03:50:34.022771+00:00 fynn-epyc3 sshd-session[1944978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.30.181 user=root 2026-06-18T03:50:36.085989+00:00 fynn-epyc3 sshd-session[1944978]: Failed password for root from 120.48.30.181 port 48998 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 1413 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.94.25.243

🇳🇱 176.65.139.247

🇨🇳 116.62.242.59

🇬🇧 104.28.40.147

🇺🇦 91.222.39.254

🇳🇱 91.92.40.12

🇺🇸 66.132.172.123

🇰🇷 47.80.27.199

🇳🇱 185.242.226.92

🇪🇨 157.100.69.92

🇬🇧 2a06:4880:4000::4b

🇰🇷 210.95.176.243

🇨🇳 182.92.217.225

🇳🇱 176.65.139.251

🇨🇳 101.96.198.153

🇩🇪 94.26.106.27

🇱🇹 81.30.98.158

🇩🇪 2.26.51.2

🇭🇰 199.45.154.191

🇰🇷 106.251.244.178