JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.48.54.198

120.48.54.198 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 100%: ?

100%

ISP	Beijing Baidu Netcom Science and Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS38365
Domain Name	baidu.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.48.54.198

Whois 120.48.54.198

IP Abuse Reports for 120.48.54.198:

This IP address has been reported a total of 23 times from 22 distinct sources. 120.48.54.198 was first reported on June 21st 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇬 MazenHost	2026-06-24 10:04:20 (5 hours ago)	1782295459 - 06/24/2026 13:04:19 Host: 120.48.54.198/120.48.54.198 Port: 2000 TCP Blocked ...	Port Scan
🇨🇭 blinx	2026-06-24 08:54:14 (6 hours ago)	2026-06-24T10:54:13.779773+02:00 blinx-rpi4 endlessh[359]: 2026-06-24T08:54:13.779Z CLOSE host=::fff ... show more 2026-06-24T10:54:13.779773+02:00 blinx-rpi4 endlessh[359]: 2026-06-24T08:54:13.779Z CLOSE host=::ffff:120.48.54.198 port=33600 fd=4 time=20.020 bytes=30 ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-06-24 08:50:19 (7 hours ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇩🇪 guldkage	2026-06-24 08:01:15 (7 hours ago)	Unauthorized connection attempt detected from IP address 120.48.54.198 to port 22 (ger-03) [v]	Brute-Force Exploited Host
🇪🇸 matatunos	2026-06-24 07:00:13 (8 hours ago)	Honeypot favala.es: 1 intentos de login SSH por fuerza bruta; 1 comandos ejecutados tras acceder en ... show more Honeypot favala.es: 1 intentos de login SSH por fuerza bruta; 1 comandos ejecutados tras acceder en 24h. Reporte automático. show less	Brute-Force SSH Hacking
🇩🇪 NetWatch	2026-06-24 06:33:11 (9 hours ago)	The IP 120.48.54.198 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇳🇱 sh97	2026-06-23 23:22:16 (16 hours ago)	NL05-RN-AMS.vps.992969.xyz: SSH Brute Force from 120.48.54.198 at 2026-06-24 04:52:16 IST	Brute-Force SSH
🇩🇪 guldkage	2026-06-23 22:43:43 (17 hours ago)	Unauthorized connection attempt detected from IP address 120.48.54.198 to port 22 (ger-02) [SSH]	Exploited Host
🇩🇪 nohacefaltapapel-et.net	2026-06-23 15:24:09 (1 day ago)	2026-06-23T17:24:01.135507milloweb sshd[26661]: Failed password for root from 120.48.54.198 port 429 ... show more 2026-06-23T17:24:01.135507milloweb sshd[26661]: Failed password for root from 120.48.54.198 port 42954 ssh2 2026-06-23T17:24:06.352934milloweb sshd[26721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.198 user=root 2026-06-23T17:24:08.713228milloweb sshd[26721]: Failed password for root from 120.48.54.198 port 58904 ssh2 ... show less	Brute-Force SSH
🇧🇪 sid3windr	2026-06-23 12:32:44 (1 day ago)	SSH port scan (Tarpitted for 16m10s, wasted 1.67kB)	Port Scan SSH
🇺🇸 MU-star.net	2026-06-23 09:37:29 (1 day ago)	2026-06-23T18:37:17.108413 mustar-kr-miso sshd[821575]: Failed password for root from 120.48.54.198 ... show more 2026-06-23T18:37:17.108413 mustar-kr-miso sshd[821575]: Failed password for root from 120.48.54.198 port 47178 ssh2 2026-06-23T18:37:21.100907 mustar-kr-miso sshd[821578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.198 user=root 2026-06-23T18:37:23.629529 mustar-kr-miso sshd[821578]: Failed password for root from 120.48.54.198 port 47194 ssh2 2026-06-23T18:37:27.484490 mustar-kr-miso sshd[821581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.198 user=root 2026-06-23T18:37:29.170047 mustar-kr-miso sshd[821581]: Failed password for root from 120.48.54.198 port 49172 ssh2 ... show less	Hacking Brute-Force SSH
🇺🇸 ShadowWhisperer	2026-06-23 05:48:00 (1 day ago)	SSH credential attempt. (credential denied)	Brute-Force SSH
🇫🇷 Raphaël	2026-06-23 05:20:29 (1 day ago)	2026-06-23T07:20:09.641119+02:00 rpi4 sshd[20949]: Failed password for root from 120.48.54.198 port ... show more 2026-06-23T07:20:09.641119+02:00 rpi4 sshd[20949]: Failed password for root from 120.48.54.198 port 46124 ssh2 2026-06-23T07:20:16.539850+02:00 rpi4 sshd[20953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.198 user=root 2026-06-23T07:20:18.153130+02:00 rpi4 sshd[20953]: Failed password for root from 120.48.54.198 port 43614 ssh2 2026-06-23T07:20:26.232685+02:00 rpi4 sshd[20957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.198 user=root 2026-06-23T07:20:28.747787+02:00 rpi4 sshd[20957]: Failed password for root from 120.48.54.198 port 43626 ssh2 ... show less	Brute-Force SSH
🇨🇦 updown.io	2026-06-23 05:20:21 (1 day ago)	2026-06-23T05:20:06.568717+00:00 bhs.updn.io sshd[549262]: Failed password for root from 120.48.54.1 ... show more 2026-06-23T05:20:06.568717+00:00 bhs.updn.io sshd[549262]: Failed password for root from 120.48.54.198 port 53756 ssh2 2026-06-23T05:20:11.134335+00:00 bhs.updn.io sshd[549270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.198 user=root 2026-06-23T05:20:13.057642+00:00 bhs.updn.io sshd[549270]: Failed password for root from 120.48.54.198 port 34824 ssh2 2026-06-23T05:20:18.253993+00:00 bhs.updn.io sshd[549278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.198 user=root 2026-06-23T05:20:20.473148+00:00 bhs.updn.io sshd[549278]: Failed password for root from 120.48.54.198 port 36380 ssh2 ... show less	Brute-Force SSH
🇩🇪 Axel	2026-06-22 20:18:25 (1 day ago)	[2026-06-22 20:18:25 UTC] Honeypot SSH connection attempt \| AXFRA HONEYPOT	SSH

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇪 216.234.219.165

🇺🇸 194.187.179.144

🇰🇪 102.210.148.41

🇧🇬 78.128.114.86

🇺🇸 74.249.192.21

🇺🇸 47.251.249.41

🇸🇬 43.160.215.203

🇨🇳 220.205.123.19

🇷🇺 212.3.155.8

🇨🇦 198.50.197.28

🇺🇸 104.23.190.162

🇧🇩 103.86.198.253

🇧🇬 91.92.199.36

🇺🇸 147.182.246.240

🇬🇧 123.58.207.81

🇨🇳 121.227.31.13

🇺🇸 91.230.168.96

🇫🇷 91.121.218.38

🇺🇸 72.167.49.132

🇳🇱 45.198.224.18