JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.48.76.190

120.48.76.190 was found in our database!

This IP was reported 5,137 times. Confidence of Abuse is 100%: ?

100%

ISP	Beijing Baidu Netcom Science and Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS38365
Domain Name	baidu.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.48.76.190

Whois 120.48.76.190

IP Abuse Reports for 120.48.76.190:

This IP address has been reported a total of 5,137 times from 1,127 distinct sources. 120.48.76.190 was first reported on September 13th 2025, and the most recent report was 4 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 acidburn	2025-09-15 00:00:26 (8 months ago)	SSH brute forcing, multiple failed attempts	Brute-Force SSH
🇺🇸 PP-VTNK	2025-09-14 22:41:17 (8 months ago)	2025-09-15T01:41:16.488986+03:00 vatnik sshd[2596]: Connection closed by 120.48.76.190 port 38480 [p ... show more 2025-09-15T01:41:16.488986+03:00 vatnik sshd[2596]: Connection closed by 120.48.76.190 port 38480 [preauth] ... show less	Hacking Brute-Force SSH
🇩🇪 NetWatch	2025-09-14 22:40:18 (8 months ago)	The IP 120.48.76.190 tried multiple SSH logins	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-09-14 22:29:27 (8 months ago)	ThreatBook Intelligence: IDC more details on http://threatbook.io/ip/120.48.76.190	SSH
🇳🇱 majo-it.nl	2025-09-14 21:21:59 (8 months ago)	Sep 14 21:21:57 fail2ban sshd[1822931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Sep 14 21:21:57 fail2ban sshd[1822931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.76.190 Sep 14 21:21:59 fail2ban sshd[1822931]: Failed password for invalid user core from 120.48.76.190 port 56190 ssh2 ... show less	Brute-Force SSH
🇩🇪 HoneyPotFRI	2025-09-14 20:31:25 (8 months ago)	Sep 14 22:31:21 debian sshd[491916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Sep 14 22:31:21 debian sshd[491916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.76.190 user=root Sep 14 22:31:23 debian sshd[491916]: Failed passwo ... show less	Brute-Force SSH
🇳🇱 Alboweb B.V.	2025-09-14 20:11:47 (8 months ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇩🇪 1000grad.com	2025-09-14 18:48:34 (8 months ago)	Sep 14 20:46:25 jira sshd[2095685]: Connection closed by 120.48.76.190 port 42448 [preauth] Sep 14 2 ... show more Sep 14 20:46:25 jira sshd[2095685]: Connection closed by 120.48.76.190 port 42448 [preauth] Sep 14 20:48:22 jira sshd[2095710]: Connection from 120.48.76.190 port 46282 on 138.201.123.138 port 22 rdomain "" Sep 14 20:48:24 jira sshd[2095710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.76.190 user=root Sep 14 20:48:26 jira sshd[2095710]: Failed password for root from 120.48.76.190 port 46282 ssh2 Sep 14 20:48:34 jira sshd[2095710]: Disconnected from authenticating user root 120.48.76.190 port 46282 [preauth] ... show less	Brute-Force SSH
🇩🇪 1000grad.com	2025-09-14 18:32:31 (8 months ago)	Sep 14 20:28:09 jira sshd[2095266]: Connection from 120.48.76.190 port 55668 on 138.201.123.138 port ... show more Sep 14 20:28:09 jira sshd[2095266]: Connection from 120.48.76.190 port 55668 on 138.201.123.138 port 22 rdomain "" Sep 14 20:28:12 jira sshd[2095266]: Connection closed by 120.48.76.190 port 55668 [preauth] Sep 14 20:32:24 jira sshd[2095361]: Connection from 120.48.76.190 port 47746 on 138.201.123.138 port 22 rdomain "" Sep 14 20:32:27 jira sshd[2095361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.76.190 user=root Sep 14 20:32:30 jira sshd[2095361]: Failed password for root from 120.48.76.190 port 47746 ssh2 ... show less	Brute-Force SSH
🇩🇪 club77	2025-09-14 17:15:31 (8 months ago)	2025-09-15T01:14:42.472122+08:00 raindance.club77.org sshd[2779866]: Invalid user deployer from 120. ... show more 2025-09-15T01:14:42.472122+08:00 raindance.club77.org sshd[2779866]: Invalid user deployer from 120.48.76.190 port 57092 2025-09-15T01:14:42.474174+08:00 raindance.club77.org sshd[2779866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.76.190 2025-09-15T01:14:45.154806+08:00 raindance.club77.org sshd[2779866]: Failed password for invalid user deployer from 120.48.76.190 port 57092 ssh2 2025-09-15T01:15:28.047820+08:00 raindance.club77.org sshd[2782443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.76.190 user=root 2025-09-15T01:15:30.376673+08:00 raindance.club77.org sshd[2782443]: Failed password for root from 120.48.76.190 port 35194 ssh2 ... show less	Brute-Force SSH
🇺🇸 psh-ack	2025-09-14 12:04:57 (8 months ago)	Honeypot detection: SSH attack on port 22. Details: SSH banner exchange Recent activity: SSH on port ... show more Honeypot detection: SSH attack on port 22. Details: SSH banner exchange Recent activity: SSH on port 22 - SSH banner exchange show less	Brute-Force
🇳🇱 bontekoe.technology	2025-09-14 07:24:56 (8 months ago)	120.48.76.190 banned on rtr - Threshold reached: 5 failures	SSH
Anonymous	2025-09-14 06:58:32 (8 months ago)	Sep 14 02:49:34 global2 sshd[56435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Sep 14 02:49:34 global2 sshd[56435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.76.190 Sep 14 02:49:37 global2 sshd[56435]: Failed password for invalid user super from 120.48.76.190 port 60828 ssh2 Sep 14 02:58:29 global2 sshd[56516]: Invalid user titu from 120.48.76.190 port 53808 Sep 14 02:58:29 global2 sshd[56516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.76.190 Sep 14 02:58:31 global2 sshd[56516]: Failed password for invalid user titu from 120.48.76.190 port 53808 ssh2 ... show less	Brute-Force SSH
🇫🇷 Murazaki	2025-09-14 06:47:46 (8 months ago)	2025-09-14T08:47:23.331182+02:00 Shiva sshd[1435053]: pam_unix(sshd:auth): authentication failure; l ... show more 2025-09-14T08:47:23.331182+02:00 Shiva sshd[1435053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.76.190 2025-09-14T08:47:23.333794+02:00 Shiva sshd[1435053]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.76.190 user=manager 2025-09-14T08:47:45.235896+02:00 Shiva sshd[1435053]: Failed password for invalid user manager from 120.48.76.190 port 41466 ssh2 ... show less	Brute-Force SSH
🇳🇱 bontekoe.technology	2025-09-14 06:11:48 (8 months ago)	120.48.76.190 banned on rtr - Threshold reached: 3 failures	SSH

Showing 5101 to 5115 of 5137 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 198.23.249.85

🇺🇸 146.88.240.113

🇩🇪 213.209.159.235

🇭🇰 165.154.23.36

🇬🇧 89.213.48.78

🇬🇧 89.37.172.137

🇨🇳 58.213.154.217

🇧🇪 34.14.116.242

🇹🇭 202.29.225.206

🇺🇸 162.216.150.39

🇺🇸 147.185.132.253

🇺🇸 147.185.132.252

🇭🇰 119.246.15.94

🇻🇳 103.159.54.61

🇨🇦 85.217.149.18

🇺🇸 47.254.50.53

🇲🇾 47.250.181.248

🇸🇬 47.84.200.194

🇹🇷 37.75.9.83

🇬🇧 35.203.211.51