JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.48.87.166

120.48.87.166 was found in our database!

This IP was reported 1,164 times. Confidence of Abuse is 100%: ?

100%

ISP	Beijing Baidu Netcom Science and Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS38365
Domain Name	baidu.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.48.87.166

Whois 120.48.87.166

IP Abuse Reports for 120.48.87.166:

This IP address has been reported a total of 1,164 times from 509 distinct sources. 120.48.87.166 was first reported on March 29th 2026, and the most recent report was 20 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 maiconburn	2026-06-05 16:51:29 (20 hours ago)	InnerWarden auto-block: Repeat offender: 120.48.87.166 blocked 4x — extended block (7 days) (confide ... show more InnerWarden auto-block: Repeat offender: 120.48.87.166 blocked 4x — extended block (7 days) (confidence 98%) show less	Hacking
🇩🇪 ghostwarriors	2026-06-03 06:52:12 (3 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇪🇪 Selckie	2026-06-02 17:16:45 (3 days ago)	fail2ban: SSH Brute-Force	SSH Brute-Force
🇨🇳 Indexyz	2026-06-02 08:16:15 (4 days ago)	2026-05-23T07:16:22.017016+08:00 hostname sshd-session[1042286]: Invalid user arch from 120.48.87. ... show more 2026-05-23T07:16:22.017016+08:00 hostname sshd-session[1042286]: Invalid user arch from 120.48.87.166 port 52380 2026-05-23T07:21:53.401741+08:00 hostname sshd-session[1042806]: Connection from 120.48.87.166 port 33918 on 10.89.160.7 port 22 rdomain "" 2026-05-23T07:21:53.637872+08:00 hostname sshd-session[1042806]: Invalid user haproxy from 120.48.87.166 port 33918 2026-05-23T07:21:53.401741+08:00 hostname sshd-session[1042806]: Connection from 120.48.87.166 port 33918 on 10.89.160.7 port 22 rdomain "" 2026-05-23T07:21:53.637872+08:00 hostname sshd-session[1042806]: Invalid user haproxy from 120.48.87.166 port 33918 show less	Brute-Force SSH
🇨🇳 さいとうあすか	2026-05-31 21:43:21 (5 days ago)	2026-06-01T05:43:18.533472+08:00 pbs sshd[2446385]: pam_unix(sshd:auth): authentication failure; log ... show more 2026-06-01T05:43:18.533472+08:00 pbs sshd[2446385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.87.166 user=root 2026-06-01T05:43:20.060702+08:00 pbs sshd[2446385]: Failed password for root from 120.48.87.166 port 49886 ssh2 ... show less	Brute-Force SSH
🇬🇧 maiconburn	2026-05-31 16:50:02 (5 days ago)	InnerWarden auto-block: Repeat offender: 120.48.87.166 blocked 4x — extended block (7 days) (confide ... show more InnerWarden auto-block: Repeat offender: 120.48.87.166 blocked 4x — extended block (7 days) (confidence 98%) show less	Hacking
🇩🇪 ghostwarriors	2026-05-30 07:22:09 (1 week ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇬🇧 maiconburn	2026-05-29 16:49:35 (1 week ago)	InnerWarden auto-block: Repeat offender: 120.48.87.166 blocked 4x — extended block (7 days) (confide ... show more InnerWarden auto-block: Repeat offender: 120.48.87.166 blocked 4x — extended block (7 days) (confidence 98%) show less	Hacking
🇬🇧 maiconburn	2026-05-27 16:48:31 (1 week ago)	InnerWarden auto-block: Repeat offender: 120.48.87.166 blocked 4x — extended block (7 days) (confide ... show more InnerWarden auto-block: Repeat offender: 120.48.87.166 blocked 4x — extended block (7 days) (confidence 98%) show less	Hacking
🇮🇳 92kmees	2026-05-27 11:53:45 (1 week ago)	Fail2Ban ban from SSH jail	Brute-Force SSH
🇺🇸 NeverBehave	2026-05-27 03:08:10 (1 week ago)	[fail2ban] service sshd jail	Brute-Force SSH
🇬🇧 maiconburn	2026-05-25 16:47:23 (1 week ago)	InnerWarden auto-block: Repeat offender: 120.48.87.166 blocked 4x — extended block (7 days) (confide ... show more InnerWarden auto-block: Repeat offender: 120.48.87.166 blocked 4x — extended block (7 days) (confidence 98%) show less	Hacking
🇺🇸 onemightyarc	2026-05-25 16:25:09 (1 week ago)	2026-05-25T09:11:49.947826-07:00 server.vexstria.pro sshd[3415613]: Failed password for invalid user ... show more 2026-05-25T09:11:49.947826-07:00 server.vexstria.pro sshd[3415613]: Failed password for invalid user jing from 120.48.87.166 port 38076 ssh2 2026-05-25T09:25:07.156825-07:00 server.vexstria.pro sshd[3679318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.87.166 user=root 2026-05-25T09:25:09.532103-07:00 server.vexstria.pro sshd[3679318]: Failed password for root from 120.48.87.166 port 48670 ssh2 ... show less	Brute-Force SSH Port Scan FTP Brute-Force
Anonymous	2026-05-25 16:11:16 (1 week ago)	IP banned by Fail2Ban	Brute-Force SSH
🇩🇪 [email protected]	2026-05-25 15:31:06 (1 week ago)	2026-05-25T17:29:03.638465+02:00 87hcet sshd[2323441]: Connection closed by 120.48.87.166 port 53226 ... show more 2026-05-25T17:29:03.638465+02:00 87hcet sshd[2323441]: Connection closed by 120.48.87.166 port 53226 [preauth] 2026-05-25T17:31:05.501694+02:00 87hcet sshd[2324367]: Invalid user sim from 120.48.87.166 port 60088 2026-05-25T17:31:05.660722+02:00 87hcet sshd[2324367]: Disconnected from invalid user sim 120.48.87.166 port 60088 [preauth] ... show less	Brute-Force SSH

Showing 1 to 15 of 1164 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 143.110.177.177

🇻🇳 115.76.212.182

🇸🇬 101.32.240.31

🇮🇳 66.116.206.87

🇬🇧 35.203.211.215

🇦🇷 190.226.198.230

🇸🇬 168.144.45.211

🇦🇷 167.250.118.3

🇬🇧 104.248.161.154

🇷🇺 90.150.172.17

🇺🇸 64.62.197.48

🇮🇷 5.123.225.41

🇻🇳 183.91.186.36

🇺🇸 169.197.88.115

🇺🇸 129.153.86.229

🇵🇰 110.38.250.11

🇨🇳 106.75.185.126

🇪🇸 46.253.45.10

🇰🇷 1.250.67.114

🇺🇸 2a10:3c0:4:2:1:33:0:5