JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.48.54.130

120.48.54.130 was found in our database!

This IP was reported 1,035 times. Confidence of Abuse is 100%: ?

100%

ISP	Beijing Baidu Netcom Science and Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS38365
Domain Name	baidu.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.48.54.130

Whois 120.48.54.130

IP Abuse Reports for 120.48.54.130:

This IP address has been reported a total of 1,035 times from 508 distinct sources. 120.48.54.130 was first reported on April 1st 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 DiLenaTech	2026-04-02 06:26:15 (2 months ago)	2026-04-02T07:21:40.263364voip.dilenatech.com sshd[29529]: Failed password for root from 120.48.54.1 ... show more 2026-04-02T07:21:40.263364voip.dilenatech.com sshd[29529]: Failed password for root from 120.48.54.130 port 38482 ssh2 2026-04-02T07:26:12.636208voip.dilenatech.com sshd[30477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.130 user=root 2026-04-02T07:26:14.691447voip.dilenatech.com sshd[30477]: Failed password for root from 120.48.54.130 port 38674 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-04-02 06:06:54 (2 months ago)	SSH brute force attempt. User: root, Pass: [REDACTED]	Brute-Force SSH
🇵🇱 webadmin	2026-04-02 05:08:49 (2 months ago)	2026-04-02T06:04:13.051892+01:00 tytan sshd-session[350711]: pam_unix(sshd:auth): authentication fai ... show more 2026-04-02T06:04:13.051892+01:00 tytan sshd-session[350711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.130 user=root 2026-04-02T06:04:14.876602+01:00 tytan sshd-session[350711]: Failed password for root from 120.48.54.130 port 40814 ssh2 2026-04-02T06:04:15.532149+01:00 tytan sshd-session[350711]: Disconnected from authenticating user root 120.48.54.130 port 40814 [preauth] 2026-04-02T06:08:47.128250+01:00 tytan sshd-session[353615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.130 user=root 2026-04-02T06:08:49.049042+01:00 tytan sshd-session[353615]: Failed password for root from 120.48.54.130 port 47980 ssh2 ... show less	Brute-Force SSH
🇵🇱 webadmin	2026-04-02 04:46:11 (2 months ago)	2026-04-02T05:41:33.320444+01:00 tytan sshd-session[336340]: pam_unix(sshd:auth): authentication fai ... show more 2026-04-02T05:41:33.320444+01:00 tytan sshd-session[336340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.130 user=root 2026-04-02T05:41:35.154760+01:00 tytan sshd-session[336340]: Failed password for root from 120.48.54.130 port 47084 ssh2 2026-04-02T05:41:35.833053+01:00 tytan sshd-session[336340]: Disconnected from authenticating user root 120.48.54.130 port 47084 [preauth] 2026-04-02T05:46:08.790285+01:00 tytan sshd-session[338963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.130 user=root 2026-04-02T05:46:10.954883+01:00 tytan sshd-session[338963]: Failed password for root from 120.48.54.130 port 54692 ssh2 ... show less	Brute-Force SSH
🇯🇵 yandx.top	2026-04-02 04:41:58 (2 months ago)	2026-04-02T12:37:13.496275 jp3.cdn.420422709.xyz sshd[29457]: Failed password for root from 120.48.5 ... show more 2026-04-02T12:37:13.496275 jp3.cdn.420422709.xyz sshd[29457]: Failed password for root from 120.48.54.130 port 46412 ssh2 2026-04-02T12:41:54.800220 jp3.cdn.420422709.xyz sshd[29484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.130 user=root 2026-04-02T12:41:56.739237 jp3.cdn.420422709.xyz sshd[29484]: Failed password for root from 120.48.54.130 port 56710 ssh2 ... show less	Brute-Force SSH
🇨🇦 nickto	2026-04-02 04:35:58 (2 months ago)	Apr 2 00:35:55 Tower sshd-session[2453536]: Connection from 120.48.54.130 port 58386 on 192.168.10. ... show more Apr 2 00:35:55 Tower sshd-session[2453536]: Connection from 120.48.54.130 port 58386 on 192.168.10.220 port 22 rdomain "" Apr 2 00:35:57 Tower sshd-session[2453536]: Failed password for root from 120.48.54.130 port 58386 ssh2 Apr 2 00:35:57 Tower sshd-session[2453536]: Received disconnect from 120.48.54.130 port 58386:11: Bye Bye [preauth] Apr 2 00:35:57 Tower sshd-session[2453536]: Disconnected from authenticating user root 120.48.54.130 port 58386 [preauth] Apr 2 00:35:57 Tower sshd[3583]: srclimit_penalise: ipv4: new 120.48.54.130/32 deferred penalty of 5 seconds for penalty: failed authentication show less	Brute-Force SSH
🇬🇧 yvoictra	2026-04-02 02:53:38 (2 months ago)	Apr 2 04:53:36 medusa sshd[929152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Apr 2 04:53:36 medusa sshd[929152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.130 user=root Apr 2 04:53:38 medusa sshd[929152]: Failed password for root from 120.48.54.130 port 54812 ssh2 ... show less	Brute-Force SSH
🇯🇵 Hydrated8853	2026-04-02 01:44:00 (2 months ago)	2026-04-02T09:30:22.654080+08:00 r901613 sshd[3829737]: Failed password for root from 120.48.54.130 ... show more 2026-04-02T09:30:22.654080+08:00 r901613 sshd[3829737]: Failed password for root from 120.48.54.130 port 56896 ssh2 2026-04-02T09:35:00.001596+08:00 r901613 sshd[3829892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.130 user=root 2026-04-02T09:35:02.318233+08:00 r901613 sshd[3829892]: Failed password for root from 120.48.54.130 port 36782 ssh2 2026-04-02T09:43:57.658470+08:00 r901613 sshd[3830293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.130 user=root 2026-04-02T09:43:59.835471+08:00 r901613 sshd[3830293]: Failed password for root from 120.48.54.130 port 52406 ssh2 ... show less	Brute-Force SSH
🇩🇪 filip2cz	2026-04-02 01:37:30 (2 months ago)	Apr 2 03:32:57 system-status sshd[2093842]: Failed password for root from 120.48.54.130 port 40946 ... show more Apr 2 03:32:57 system-status sshd[2093842]: Failed password for root from 120.48.54.130 port 40946 ssh2 Apr 2 03:37:27 system-status sshd[2099214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.130 user=root Apr 2 03:37:29 system-status sshd[2099214]: Failed password for root from 120.48.54.130 port 42244 ssh2 ... show less	Brute-Force SSH
🇩🇪 NetWatch	2026-04-02 01:08:23 (2 months ago)	The IP 120.48.54.130 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇳🇱 majo-it.nl	2026-04-01 23:39:59 (2 months ago)	Apr 1 23:39:56 fail2ban sshd[3381760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Apr 1 23:39:56 fail2ban sshd[3381760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.130 user=root Apr 1 23:39:58 fail2ban sshd[3381760]: Failed password for root from 120.48.54.130 port 50324 ssh2 ... show less	Brute-Force SSH
🇨🇿 lp	2026-04-01 22:48:38 (2 months ago)	SSH Brute force: 9 attempts were recorded from 120.48.54.130 2026-04-01T23:57:17+02:00 Disconnected ... show more SSH Brute force: 9 attempts were recorded from 120.48.54.130 2026-04-01T23:57:17+02:00 Disconnected from authenticating user root 120.48.54.130 port 34362 [preauth] 2026-04-02T00:02:25+02:00 Disconnected from authenticating user root 120.48.54.130 port 50644 [preauth] 2026-04-02T00:06:58+02:00 Disconnected from authenticating user root 120.48.54.130 port 53336 [preauth] 2026-04-02T00:11:29+02:00 Disconnected from authenticating user root 120.48.54.130 port 39826 [preauth] 2026-04-02T00:16:04+02:00 Disconnected from authenticating user root 120.48.54.130 port 55286 [preauth] 2026-04-02T00:25:26+02:00 Disconnected from authenticating user root 120.48.54.130 port 49506 [preauth] 2026-04-02T00:34:31+02:00 Disconnected from authenticating user root 120.48.54.130 port 42614 [preauth] 2026-04-02T00:38:59+02:00 Disconnected from authenticating user root 120.48.54.130 port 46234 [preauth] 2026-04 show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-01 22:03:11 (2 months ago)	ThreatBook Intelligence: IDC,vpn_proxy more details on https://threatbook.io/ip/120.48.54.130	SSH
🇩🇪 Honeypot-EU-Fru	2026-04-01 21:59:00 (2 months ago)	Apr 1 23:58:58 [redacted] sshd[3253414]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show more Apr 1 23:58:58 [redacted] sshd[3253414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.130 user=root Apr 1 23:59:00 [redacted] sshd[3253414]: Failed password f ... show less	Brute-Force SSH
🇺🇸 kemonos.net	2026-04-01 20:23:40 (2 months ago)	2026-04-01T20:23:37.400166+00:00 vultr sshd[862133]: pam_unix(sshd:auth): authentication failure; lo ... show more 2026-04-01T20:23:37.400166+00:00 vultr sshd[862133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.130 user=root 2026-04-01T20:23:39.333808+00:00 vultr sshd[862133]: Failed password for root from 120.48.54.130 port 44268 ssh2 ... show less	Brute-Force SSH

Showing 1006 to 1020 of 1035 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2401:fa00:1a:200:b3ab:214:ad:9b4f

🇳🇱 195.178.110.31

🇮🇶 185.206.124.55

🇺🇸 62.197.145.51

🇨🇳 58.56.200.238

🇩🇪 2001:41d0:700:3157::

🇸🇬 206.189.158.131

🇸🇬 178.128.100.100

🇺🇸 162.216.150.30

🇺🇸 157.245.169.157

🇻🇳 116.118.44.131

🇳🇱 77.238.230.6

🇨🇦 34.19.252.159

🇸🇬 8.219.122.226

🇺🇦 178.158.207.122

🇺🇸 152.32.236.157

🇸🇬 149.88.106.168

🇺🇸 147.185.132.214

🇫🇮 135.181.60.164

🇺🇸 135.119.97.34