JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.48.53.156

120.48.53.156 was found in our database!

This IP was reported 85 times. Confidence of Abuse is 100%: ?

100%

ISP	Beijing Baidu Netcom Science and Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS38365
Domain Name	baidu.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.48.53.156

Whois 120.48.53.156

IP Abuse Reports for 120.48.53.156:

This IP address has been reported a total of 85 times from 70 distinct sources. 120.48.53.156 was first reported on May 15th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-06-03 23:06:49 (7 hours ago)	SSH Brute Force (3 attempts). Evidence: sshd-session[1409529]: Connection closed by authenticating u ... show more SSH Brute Force (3 attempts). Evidence: sshd-session[1409529]: Connection closed by authenticating user root 120.48.53.156 port 54850 [preauth];sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.53.156 user=root show less	Brute-Force SSH
🇦🇺 greenhost.com.au	2026-06-03 21:00:05 (9 hours ago)	Automated report: 364 attacks in 24h targeting privacymate via FAIL2BAN-736, SSH. SSH/invalid_user: ... show more Automated report: 364 attacks in 24h targeting privacymate via FAIL2BAN-736, SSH. SSH/invalid_user: 278 on privacymate; SSH/brute_force: 85 on privacymate; FAIL2BAN-736/banned: 1 on privacymate show less	Brute-Force SSH
🇮🇹 NonOggiCaroMio	2026-06-03 16:50:06 (13 hours ago)	Arruso ca si: crowdsecurity/ssh-bf	Brute-Force
🇬🇧 PeravixGroup	2026-06-03 16:21:46 (14 hours ago)	Honeypot detection: SSH brute-force authentication attempt on port 22. Severity: MEDIUM. Aaran.cloud	SSH Brute-Force
Anonymous	2026-06-02 20:09:03 (1 day ago)	SSH brute force attempt. User: root, Pass: [REDACTED]	Brute-Force SSH
🇬🇧 oolivero45	2026-06-02 18:14:10 (1 day ago)	Jun 2 19:14:02 nervous-edison8 sshd[1965587]: Failed password for root from 120.48.53.156 port 5657 ... show more Jun 2 19:14:02 nervous-edison8 sshd[1965587]: Failed password for root from 120.48.53.156 port 56577 ssh2 Jun 2 19:14:03 nervous-edison8 sshd[1965595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.53.156 user=root Jun 2 19:14:06 nervous-edison8 sshd[1965595]: Failed password for root from 120.48.53.156 port 58043 ssh2 Jun 2 19:14:08 nervous-edison8 sshd[1965597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.53.156 user=root Jun 2 19:14:09 nervous-edison8 sshd[1965597]: Failed password for root from 120.48.53.156 port 58502 ssh2 ... show less	Brute-Force SSH
🇰🇷 2048	2026-06-02 10:32:22 (1 day ago)	2026-06-02T19:32:21.139108+09:00 no5 sshd[1217878]: Connection closed by authenticating user root 12 ... show more 2026-06-02T19:32:21.139108+09:00 no5 sshd[1217878]: Connection closed by authenticating user root 120.48.53.156 port 46961 [preauth] ... show less	Brute-Force SSH
🇳🇱 AS213449.net	2026-06-02 05:56:22 (2 days ago)	06/02/2026-07:56:22.758243 src=120.48.53.156 dst=5.175.170.33:22 proto=6 msg=ET SCAN Potential SSH S ... show more 06/02/2026-07:56:22.758243 src=120.48.53.156 dst=5.175.170.33:22 proto=6 msg=ET SCAN Potential SSH Scan show less	Brute-Force SSH
🇺🇸 donarev419	2026-06-02 03:38:27 (2 days ago)	Port scan detected on port 33 (connection without data transfer)	Port Scan
🇺🇸 COMPLEX	2026-06-02 01:32:32 (2 days ago)	Banned by Multi Agent · node …391q · attempts=5 · SSH brute-force / scan	Brute-Force SSH
🇳🇱 applemooz	2026-06-02 00:48:45 (2 days ago)	Jun 2 02:48:14 ns41 sshd[462617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Jun 2 02:48:14 ns41 sshd[462617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.53.156 user=root Jun 2 02:48:17 ns41 sshd[462617]: Failed password for root from 120.48.53.156 port 44005 ssh2 Jun 2 02:48:30 ns41 sshd[462619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.53.156 user=root Jun 2 02:48:33 ns41 sshd[462619]: Failed password for root from 120.48.53.156 port 45434 ssh2 Jun 2 02:48:45 ns41 sshd[462624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.53.156 user=root ... show less	Brute-Force SSH
🇦🇺 dyln	2026-06-01 23:56:26 (2 days ago)	Dyls honeypot brute-force: SSH (5 total hits)	Brute-Force SSH
🇩🇪 Axel	2026-06-01 22:27:37 (2 days ago)	[2026-06-01 22:27:37 UTC] Honeypot Alt SSH connection attempt \| AXFRA HONEYPOT	SSH
🇩🇪 zUnlegit	2026-06-01 16:39:38 (2 days ago)	2026-06-01T18:39:14.223732+02:00 root260 sshd-session[1189921]: Failed password for root from 120.48 ... show more 2026-06-01T18:39:14.223732+02:00 root260 sshd-session[1189921]: Failed password for root from 120.48.53.156 port 45456 ssh2 2026-06-01T18:39:27.985852+02:00 root260 sshd-session[1191700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.53.156 user=root 2026-06-01T18:39:29.927452+02:00 root260 sshd-session[1191700]: Failed password for root from 120.48.53.156 port 45896 ssh2 2026-06-01T18:39:35.300778+02:00 root260 sshd-session[1195303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.53.156 user=root 2026-06-01T18:39:37.800460+02:00 root260 sshd-session[1195303]: Failed password for root from 120.48.53.156 port 47574 ssh2 ... show less	Brute-Force SSH
🇺🇸 donarev419	2026-06-01 04:32:07 (3 days ago)	Port scan detected on port 10000 (connection without data transfer)	Port Scan

Showing 1 to 15 of 85 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇾 202.59.9.235

🇺🇸 47.251.86.188

🇭🇳 200.115.96.129

🇹🇼 198.235.24.75

🇺🇸 172.190.89.127

🇧🇷 138.255.157.153

🇮🇪 128.251.36.118

🇷🇴 92.118.39.236

🇫🇷 91.231.89.175

🇵🇱 87.251.64.156

🇨🇦 85.217.149.7

🇨🇦 85.217.149.2

🇺🇸 40.126.29.5

🇬🇧 35.179.160.10

🇷🇺 212.3.142.157

🇺🇸 172.253.196.81

🇺🇸 162.216.149.230

🇨🇳 123.145.16.245

🇨🇳 119.52.36.214

🇺🇸 64.62.156.152