AbuseIPDB » 120.48.72.37
120.48.72.37
This IP was reported 8 times. Confidence of
Abuse
is 54% : ?
ISP
Beijing Baidu Netcom Science and Technology Co., Ltd.
Usage Type
Data Center/Web Hosting/Transit
ASN
AS38365
Domain Name
baidu.com
Country
🇨🇳
China
City
Beijing, Beijing
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 120.48.72.37 :
This IP address has been reported a total of
8
times from
8 distinct
sources.
120.48.72.37 was first reported on
July 14th 2026 , and the most recent report was
6 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
geeek
2026-07-15 10:47:38
(6 hours ago)
Port scanning: 2222 TCP Blocked
Port Scan
🇩🇪
ghostwarriors
2026-07-15 09:50:29
(7 hours ago)
Unauthorized connection attempt detected, SSH Brute-Force
Brute-Force
Port Scan
SSH
🇩🇪
arc21
2026-07-15 04:36:01
(12 hours ago)
2026-07-15T06:35:47.929096+02:00 root7623 sshd-session[2271059]: Failed password for root from 120.4 ...
show more
2026-07-15T06:35:47.929096+02:00 root7623 sshd-session[2271059]: Failed password for root from 120.48.72.37 port 34638 ssh2
2026-07-15T06:35:53.316130+02:00 root7623 sshd-session[2271075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.72.37 user=root
2026-07-15T06:35:55.133115+02:00 root7623 sshd-session[2271075]: Failed password for root from 120.48.72.37 port 59298 ssh2
2026-07-15T06:35:58.117338+02:00 root7623 sshd-session[2271135]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.72.37 user=root
2026-07-15T06:36:00.421093+02:00 root7623 sshd-session[2271135]: Failed password for root from 120.48.72.37 port 40752 ssh2
...
show less
Brute-Force
SSH
🇬🇧
Stuart Reid
2026-07-15 00:46:57
(16 hours ago)
...
SSH
🇺🇸
brycemaxheimer
2026-07-14 19:00:03
(21 hours ago)
Cowrie SSH honeypot: 2 events in 10m window 2026-07-14T18:50:00+00:00. Users tried: root. Commands: ...
show more
Cowrie SSH honeypot: 2 events in 10m window 2026-07-14T18:50:00+00:00. Users tried: root. Commands: uname -s -m
show less
Hacking
Brute-Force
SSH
🇩🇪
NetWatch
2026-07-14 18:29:52
(22 hours ago)
The IP 120.48.72.37 tried multiple SSH_BRUTE_FORCE logins
Brute-Force
🇩🇪
Blexyel
2026-07-14 10:21:21
(1 day ago)
2026-07-14T12:21:06.093779+02:00 smol sshd-session[267789]: Failed password for root from 120.48.72. ...
show more
2026-07-14T12:21:06.093779+02:00 smol sshd-session[267789]: Failed password for root from 120.48.72.37 port 54522 ssh2
2026-07-14T12:21:11.018112+02:00 smol sshd-session[268196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.72.37 user=root
2026-07-14T12:21:13.585660+02:00 smol sshd-session[268196]: Failed password for root from 120.48.72.37 port 40626 ssh2
2026-07-14T12:21:18.099187+02:00 smol sshd-session[268307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.72.37 user=root
2026-07-14T12:21:20.656664+02:00 smol sshd-session[268307]: Failed password for root from 120.48.72.37 port 47888 ssh2
...
show less
Brute-Force
SSH
🇫🇷
Hessfr
2026-07-14 07:07:36
(1 day ago)
2026-07-14T07:07:24.593877+00:00 hms35143 sshd[1748989]: Failed password for root from 120.48.72.37 ...
show more
2026-07-14T07:07:24.593877+00:00 hms35143 sshd[1748989]: Failed password for root from 120.48.72.37 port 50966 ssh2
2026-07-14T07:07:28.536252+00:00 hms35143 sshd[1748991]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.72.37 user=root
2026-07-14T07:07:30.332287+00:00 hms35143 sshd[1748991]: Failed password for root from 120.48.72.37 port 54520 ssh2
2026-07-14T07:07:34.176577+00:00 hms35143 sshd[1748993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.72.37 user=root
2026-07-14T07:07:35.796811+00:00 hms35143 sshd[1748993]: Failed password for root from 120.48.72.37 port 50518 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: