JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.48.63.54

120.48.63.54 was found in our database!

This IP was reported 134 times. Confidence of Abuse is 100%: ?

100%

ISP	Beijing Baidu Netcom Science and Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS38365
Domain Name	baidu.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.48.63.54

Whois 120.48.63.54

IP Abuse Reports for 120.48.63.54:

This IP address has been reported a total of 134 times from 67 distinct sources. 120.48.63.54 was first reported on March 9th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob.fr	2026-06-04 01:15:08 (7 hours ago)	FTP brute-force attack detected by Fail2Ban in plesk-proftpd jail	FTP Brute-Force
🇩🇪 DocNetzwerk	2026-06-03 22:10:42 (10 hours ago)	120.48.63.54 (CN/China/-), 5 distributed ftpd attacks on account [redacted]	FTP Brute-Force Brute-Force
🇦🇹 AustrianSimon	2026-06-03 21:35:25 (11 hours ago)	03 Jun 2026 21:35:24UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) includin ... show more 03 Jun 2026 21:35:24UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 120.48.63.54 show less	Brute-Force
🇳🇱 EGP Abuse Dept	2026-06-03 11:27:06 (21 hours ago)	Unauthorized connection to FTP port 21	Port Scan Hacking
🇨🇦 polycoda	2026-06-03 11:26:23 (21 hours ago)	AutoBlock: 📡 Port Scan (Non Decay-Based)	Port Scan
🇩🇪 linuxman1	2026-06-02 13:24:28 (1 day ago)	(ftpd) Failed FTP login from 120.48.63.54 (CN/China/-): 5 in the last 33600 secs; Ports: 20,21; Dire ... show more (ftpd) Failed FTP login from 120.48.63.54 (CN/China/-): 5 in the last 33600 secs; Ports: 20,21; Direction: in; Trigger: LF_FTPD; Logs: Jun 2 11:22:04 hostingremote proftpd[1365541]: 0.0.0.0 (120.48.63.54[120.48.63.54]) - USER admin: no such user found from 120.48.63.54 [120.48.63.54] to 88.99.147.18:21 Jun 2 12:47:02 hostingremote proftpd[1411725]: 0.0.0.0 (120.48.63.54[120.48.63.54]) - USER akttrading (Login failed): Incorrect password Jun 2 15:38:15 hostingremote proftpd[1532433]: 0.0.0.0 (120.48.63.54[120.48.63.54]) - USER akttrading (Login failed): Incorrect password Jun 2 18:29:15 hostingremote proftpd[1781475]: 0.0.0.0 (120.48.63.54[120.48.63.54]) - USER akttrading (Login failed): Incorrect password Jun 2 19:54:25 hostingremote proftpd[1833440]: 0.0.0.0 (120.48.63.54[120.48.63.54]) - USER akttrading (Login failed): Incorrect password show less	Port Scan
🇩🇪 linuxman1	2026-06-01 08:43:45 (3 days ago)	120.48.63.54 (CN/China/-), 5 distributed ftpd attacks on account [akttrading] in the last 33600 secs ... show more 120.48.63.54 (CN/China/-), 5 distributed ftpd attacks on account [akttrading] in the last 33600 secs; Ports: 20,21; Direction: in; Trigger: LF_DISTATTACK; Logs: Jun 1 13:47:34 hostingremote proftpd[451951]: 0.0.0.0 (120.48.63.54[120.48.63.54]) - USER akttrading (Login failed): Incorrect password Jun 1 14:42:33 hostingremote proftpd[482912]: 0.0.0.0 (34.138.135.178[34.138.135.178]) - USER akttrading (Login failed): Incorrect password Jun 1 14:02:59 hostingremote proftpd[460310]: 0.0.0.0 (34.138.135.178[34.138.135.178]) - USER akttrading (Login failed): Incorrect password Jun 1 15:13:40 hostingremote proftpd[499491]: 0.0.0.0 (120.48.63.54[120.48.63.54]) - USER akttrading (Login failed): Incorrect password Jun 1 13:24:05 hostingremote proftpd[437651]: 0.0.0.0 (34.138.135.178[34.138.135.178]) - USER akttrading (Login failed): Incorrect password IP Addresses Blocked: show less	Port Scan
🇩🇪 linuxman1	2026-06-01 04:16:09 (3 days ago)	120.48.63.54 (-), 5 distributed ftpd attacks on account [akttrading] in the last 33600 secs; Ports: ... show more 120.48.63.54 (-), 5 distributed ftpd attacks on account [akttrading] in the last 33600 secs; Ports: 20,21; Direction: in; Trigger: LF_DISTATTACK; Logs: Jun 1 07:26:44 hostingremote proftpd[263442]: 0.0.0.0 (34.138.135.178[34.138.135.178]) - USER akttrading (Login failed): Incorrect password Jun 1 10:46:03 hostingremote proftpd[360475]: 0.0.0.0 (34.138.135.178[34.138.135.178]) - USER akttrading (Login failed): Incorrect password Jun 1 07:52:16 hostingremote proftpd[275919]: 0.0.0.0 (120.48.63.54[120.48.63.54]) - USER akttrading (Login failed): Incorrect password Jun 1 06:45:43 hostingremote proftpd[245778]: 0.0.0.0 (34.138.135.178[34.138.135.178]) - USER akttrading (Login failed): Incorrect password Jun 1 08:06:51 hostingremote proftpd[282451]: 0.0.0.0 (34.138.135.178[34.138.135.178]) - USER akttrading (Login failed): Incorrect password IP Addresses Blocked: 34.138.135.178 (178.135.138.34.bc.googleusercontent.com) show less	Port Scan
🇩🇪 linuxman1	2026-05-31 21:33:12 (3 days ago)	120.48.63.54 (-), 5 distributed ftpd attacks on account [akttrading] in the last 33600 secs; Ports: ... show more 120.48.63.54 (-), 5 distributed ftpd attacks on account [akttrading] in the last 33600 secs; Ports: 20,21; Direction: in; Trigger: LF_DISTATTACK; Logs: Jun 1 04:03:07 hostingremote proftpd[156254]: 0.0.0.0 (34.138.135.178[34.138.135.178]) - USER akttrading (Login failed): Incorrect password Jun 1 03:31:40 hostingremote proftpd[4193336]: 0.0.0.0 (120.48.63.54[120.48.63.54]) - USER akttrading (Login failed): Incorrect password Jun 1 02:04:30 hostingremote proftpd[4148031]: 0.0.0.0 (120.48.63.54[120.48.63.54]) - USER akttrading (Login failed): Incorrect password Jun 1 03:22:21 hostingremote proftpd[4188482]: 0.0.0.0 (34.138.135.178[34.138.135.178]) - USER akttrading (Login failed): Incorrect password Jun 1 00:37:24 hostingremote proftpd[4104929]: 0.0.0.0 (120.48.63.54[120.48.63.54]) - USER akttrading (Login failed): Incorrect password IP Addresses Blocked: 34.138.135.178 (178.135.138.34.bc.googleusercontent.com) show less	Port Scan
🇺🇸 NXTwoThou	2026-05-30 21:32:56 (4 days ago)	FTP	FTP Brute-Force
🇩🇪 LRob.fr	2026-05-29 10:45:06 (5 days ago)	FTP brute-force attack detected by Fail2Ban in plesk-proftpd jail	FTP Brute-Force
🇩🇪 LRob.fr	2026-05-28 08:30:09 (1 week ago)	FTP brute-force attack detected by Fail2Ban in plesk-proftpd jail	FTP Brute-Force
Anonymous	2026-05-27 03:28:40 (1 week ago)	2026-05-27 05:03:37,535 fail2ban.actions [3799592]: NOTICE [sshd] Ban 120.48.63.54 2026-05-2 ... show more 2026-05-27 05:03:37,535 fail2ban.actions [3799592]: NOTICE [sshd] Ban 120.48.63.54 2026-05-27 05:28:39,899 fail2ban.actions [3799592]: NOTICE [sshd] Ban 120.48.63.54 ... show less	Brute-Force Exploited Host
🇩🇪 london2038.com	2026-05-27 02:22:57 (1 week ago)	Connection atttempts against closed TCP ports May 27 04:22:55 BLOCK SRC=120.48.63.54 LEN=60 TOS=0x00 ... show more Connection atttempts against closed TCP ports May 27 04:22:55 BLOCK SRC=120.48.63.54 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=32273 DF PROTO=TCP SPT=41266 DPT=20022 WINDOW=65535 RES=0x00 SYN May 27 04:22:56 BLOCK SRC=120.48.63.54 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=32274 DF PROTO=TCP SPT=41266 DPT=20022 WINDOW=65535 RES=0x00 SYN May 27 04:22:57 BLOCK SRC=120.48.63.54 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=32275 DF PROTO=TCP SPT=41266 DPT=20022 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇭🇺 jani.hu	2026-05-24 19:44:40 (1 week ago)	Hit on SSH honeypot at 2026-05-24 19:44:40 from 120.48.63.54 as user root with password proxied	Brute-Force SSH

Showing 1 to 15 of 134 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.224

🇻🇳 157.66.48.9

🇻🇳 118.70.182.193

🇷🇺 109.167.249.94

🇳🇬 102.88.137.145

🇱🇺 64.89.160.178

🇯🇵 218.219.193.151

🇳🇱 176.65.148.2

🇮🇳 164.100.212.64

🇺🇸 162.216.149.179

🇮🇳 122.185.237.142

🇵🇰 119.157.76.94

🇮🇳 103.186.132.188

🇬🇪 91.151.137.42

🇺🇸 66.132.186.250

🇳🇱 45.198.224.22

🇮🇷 37.148.5.246

🇷🇴 2.57.121.112

🇮🇳 223.185.12.225

🇵🇰 202.63.207.43