JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.48.54.225

120.48.54.225 was found in our database!

This IP was reported 260 times. Confidence of Abuse is 100%: ?

100%

ISP	Beijing Baidu Netcom Science and Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS38365
Domain Name	baidu.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.48.54.225

Whois 120.48.54.225

IP Abuse Reports for 120.48.54.225:

This IP address has been reported a total of 260 times from 182 distinct sources. 120.48.54.225 was first reported on June 3rd 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 6kilowatti	2026-06-20 09:50:38 (2 weeks ago)	2026-06-20T12:50:37.668065+03:00 6kw sshd[190206]: Failed password for root from 120.48.54.225 port ... show more 2026-06-20T12:50:37.668065+03:00 6kw sshd[190206]: Failed password for root from 120.48.54.225 port 35978 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-06-20 09:46:45 (2 weeks ago)	2026-06-20T11:46:38.572005+02:00 hosting15 sshd[2593041]: Failed password for root from 120.48.54.22 ... show more 2026-06-20T11:46:38.572005+02:00 hosting15 sshd[2593041]: Failed password for root from 120.48.54.225 port 49636 ssh2 2026-06-20T11:46:42.628672+02:00 hosting15 sshd[2593043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.225 user=root 2026-06-20T11:46:44.858031+02:00 hosting15 sshd[2593043]: Failed password for root from 120.48.54.225 port 56118 ssh2 ... show less	Brute-Force SSH
🇯🇵 sh97	2026-06-20 09:18:54 (2 weeks ago)	JP01-VM: SSH Brute Force from 120.48.54.225 at 2026-06-20 05:18:54 EDT	Brute-Force SSH
🇮🇹 opso.it	2026-06-20 08:41:22 (2 weeks ago)	Jun 20 10:41:11 OPSO sshd\[22156\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 e ... show more Jun 20 10:41:11 OPSO sshd\[22156\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.225 user=root Jun 20 10:41:13 OPSO sshd\[22156\]: Failed password for root from 120.48.54.225 port 52638 ssh2 Jun 20 10:41:15 OPSO sshd\[22158\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.225 user=root Jun 20 10:41:17 OPSO sshd\[22158\]: Failed password for root from 120.48.54.225 port 59002 ssh2 Jun 20 10:41:20 OPSO sshd\[22160\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.225 user=root show less	SSH
🇩🇪 ghostwarriors	2026-06-20 07:50:21 (2 weeks ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇮🇹 alph44	2026-06-20 06:18:15 (2 weeks ago)	SSH brute force attack detected: 5 failed attempts	Brute-Force
🇩🇪 LoNET	2026-06-20 05:23:37 (2 weeks ago)	Report 2483521 with IP 3489052 for SSH brute-force attack by source 3525746 via ssh-honeypot/0.2.1+h ... show more Report 2483521 with IP 3489052 for SSH brute-force attack by source 3525746 via ssh-honeypot/0.2.1+http show less	Brute-Force SSH
🇺🇸 amit177	2026-06-20 03:00:50 (2 weeks ago)		Brute-Force SSH
Anonymous	2026-06-20 02:01:55 (2 weeks ago)	Fail2Ban detection - brute-force attempt (jail: sshd)	Brute-Force
🇰🇷 SentinalX by uzumaru	2026-06-20 01:22:30 (2 weeks ago)	SSH brute-force detected: 5 failed login attempts in the last 1 hour.	Brute-Force SSH
🇺🇸 4ensic	2026-06-20 01:19:44 (2 weeks ago)	Jun 19 20:11:19 racknerd-a34c87 sshd[26750]: pam_unix(sshd:auth): authentication failure; logname= u ... show more Jun 19 20:11:19 racknerd-a34c87 sshd[26750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.225 user=root Jun 19 20:11:23 racknerd-a34c87 sshd[26756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.225 user=root Jun 19 20:11:27 racknerd-a34c87 sshd[26758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.225 user=root Jun 19 20:11:32 racknerd-a34c87 sshd[26762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.225 user=root Jun 19 20:11:37 racknerd-a34c87 sshd[26764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.225 user=root Jun 19 20:19:44 racknerd-a34c87 sshd[26893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.225 user=root ... show less	Brute-Force SSH
🇫🇷 GoXLd	2026-06-20 01:02:40 (2 weeks ago)	2026-06-20T03:02:37.537606+02:00 node1 sshd-session[3309716]: pam_unix(sshd:auth): authentication fa ... show more 2026-06-20T03:02:37.537606+02:00 node1 sshd-session[3309716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.225 user=root 2026-06-20T03:02:39.763092+02:00 node1 sshd-session[3309716]: Failed password for root from 120.48.54.225 port 41652 ssh2 ... show less	Brute-Force SSH
🇩🇪 D3vNu11	2026-06-19 23:16:23 (2 weeks ago)	Level: (LOW): Known Attacker via Cowrie IOC Country: China 2x -> Target Country: Finnland SSH	Hacking Brute-Force SSH
🇩🇪 ipcop.net	2026-06-19 21:06:51 (2 weeks ago)	2026-06-19T23:06:36.777935+02:00 gw-de21-01.guestgw.net sshd[504865]: Connection closed by authentic ... show more 2026-06-19T23:06:36.777935+02:00 gw-de21-01.guestgw.net sshd[504865]: Connection closed by authenticating user root 120.48.54.225 port 51698 [preauth] 2026-06-19T23:06:39.683394+02:00 gw-de21-01.guestgw.net sshd[504873]: Connection closed by authenticating user root 120.48.54.225 port 54490 [preauth] 2026-06-19T23:06:41.581191+02:00 gw-de21-01.guestgw.net sshd[504882]: Connection closed by authenticating user root 120.48.54.225 port 58138 [preauth] 2026-06-19T23:06:46.483071+02:00 gw-de21-01.guestgw.net sshd[504905]: Connection closed by authenticating user root 120.48.54.225 port 60752 [preauth] 2026-06-19T23:06:49.380283+02:00 gw-de21-01.guestgw.net sshd[504917]: Connection closed by authenticating user root 120.48.54.225 port 39054 [preauth] show less	Brute-Force
🇵🇱 sledzik1984	2026-06-19 21:06:26 (2 weeks ago)	2026-06-19T23:06:15.677125+02:00 cma sshd-session[379500]: Failed password for root from 120.48.54.2 ... show more 2026-06-19T23:06:15.677125+02:00 cma sshd-session[379500]: Failed password for root from 120.48.54.225 port 35722 ssh2 2026-06-19T23:06:17.798048+02:00 cma sshd-session[379503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.225 user=root 2026-06-19T23:06:19.899129+02:00 cma sshd-session[379503]: Failed password for root from 120.48.54.225 port 43698 ssh2 2026-06-19T23:06:23.990130+02:00 cma sshd-session[379509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.54.225 user=root 2026-06-19T23:06:26.216556+02:00 cma sshd-session[379509]: Failed password for root from 120.48.54.225 port 52626 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 260 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 203.83.45.41

🇦🇷 179.36.232.152

🇵🇰 111.92.130.6

🇺🇸 103.143.238.100

🇺🇸 66.132.172.236

🇨🇳 14.103.115.237

🇮🇪 205.185.193.37

🇰🇪 197.248.15.98

🇺🇸 172.214.209.153

🇺🇸 170.106.11.141

🇷🇺 128.0.140.191

🇻🇳 113.160.142.119

🇧🇬 78.128.114.118

🇺🇸 64.62.156.27

🇰🇷 20.214.136.39

🇺🇸 2607:f8b0:4004:c1f::127

🇿🇦 169.1.18.52

🇮🇩 103.167.156.20

🇨🇳 101.126.91.34

🇳🇱 91.92.40.5