JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.48.9.231

120.48.9.231 was found in our database!

This IP was reported 68 times. Confidence of Abuse is 100%: ?

100%

ISP	Beijing Baidu Netcom Science and Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS38365
Domain Name	baidu.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.48.9.231

Whois 120.48.9.231

IP Abuse Reports for 120.48.9.231:

This IP address has been reported a total of 68 times from 62 distinct sources. 120.48.9.231 was first reported on July 1st 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-06 17:54:13 (1 hour ago)	T: f2b ssh aggressive 3x	Brute-Force SSH
Anonymous	2026-07-06 17:53:59 (1 hour ago)	2026-07-07T01:34:59.452152+08:00 kltw-debian sshd[195738]: Invalid user admin from 120.48.9.231 port ... show more 2026-07-07T01:34:59.452152+08:00 kltw-debian sshd[195738]: Invalid user admin from 120.48.9.231 port 34500 2026-07-07T01:34:59.561350+08:00 kltw-debian sshd[195738]: Disconnected from invalid user admin 120.48.9.231 port 34500 [preauth] 2026-07-07T01:51:10.709640+08:00 kltw-debian sshd[195779]: Invalid user userftp from 120.48.9.231 port 34606 2026-07-07T01:51:10.831259+08:00 kltw-debian sshd[195779]: Disconnected from invalid user userftp 120.48.9.231 port 34606 [preauth] 2026-07-07T01:52:42.497534+08:00 kltw-debian sshd[195781]: Connection closed by 120.48.9.231 port 35126 [preauth] ... show less	Brute-Force SSH
🇳🇱 applemooz	2026-07-06 17:03:21 (2 hours ago)	Jul 6 18:59:20 ns41 sshd[3450876]: Invalid user ftpuser from 120.48.9.231 port 54818 Jul 6 18:59:2 ... show more Jul 6 18:59:20 ns41 sshd[3450876]: Invalid user ftpuser from 120.48.9.231 port 54818 Jul 6 18:59:20 ns41 sshd[3450876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.9.231 Jul 6 18:59:22 ns41 sshd[3450876]: Failed password for invalid user ftpuser from 120.48.9.231 port 54818 ssh2 Jul 6 19:03:19 ns41 sshd[3451478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.9.231 user=root Jul 6 19:03:21 ns41 sshd[3451478]: Failed password for root from 120.48.9.231 port 35494 ssh2 ... show less	Brute-Force SSH
🇺🇸 brantknudson.org	2026-07-06 12:04:29 (7 hours ago)	ssh login attempt(s)	SSH Brute-Force
🇩🇪 ipcop.net	2026-07-06 10:58:28 (8 hours ago)	2026-07-06T12:47:13.214085+02:00 rt-cs-302160.rt.pbx-host.com sshd-session[118235]: Disconnected fro ... show more 2026-07-06T12:47:13.214085+02:00 rt-cs-302160.rt.pbx-host.com sshd-session[118235]: Disconnected from authenticating user root 120.48.9.231 port 47732 [preauth] 2026-07-06T12:50:52.743647+02:00 rt-cs-302160.rt.pbx-host.com sshd-session[118863]: Disconnected from authenticating user root 120.48.9.231 port 60274 [preauth] 2026-07-06T12:53:39.535686+02:00 rt-cs-302160.rt.pbx-host.com sshd-session[119332]: Disconnected from authenticating user root 120.48.9.231 port 40692 [preauth] 2026-07-06T12:57:17.038232+02:00 rt-cs-302160.rt.pbx-host.com sshd-session[119953]: Disconnected from authenticating user root 120.48.9.231 port 48180 [preauth] 2026-07-06T12:58:27.380439+02:00 rt-cs-302160.rt.pbx-host.com sshd-session[120138]: Connection closed by 120.48.9.231 port 33396 [preauth] show less	Brute-Force
Anonymous	2026-07-06 08:29:28 (11 hours ago)	Jul 6 10:29:21 sshd-session[18190]: Invalid user deploy from 120.48.9.231 port 33510 Jul 6 10:29: ... show more Jul 6 10:29:21 sshd-session[18190]: Invalid user deploy from 120.48.9.231 port 33510 Jul 6 10:29:21 sshd-session[18190]: Received disconnect from 120.48.9.231 port 33510:11: Bye Bye [preauth] ... show less	Brute-Force SSH
🇲🇳 Public CSIRT/CC of Mongolia	2026-07-06 07:40:14 (12 hours ago)	Honeypot hit: Unauthorized connection attempt detected on 22/SSH	Hacking SSH Port Scan
🇪🇸 yvoictra	2026-07-06 05:58:16 (13 hours ago)	2026-07-06T07:58:16.465703+02:00 neo sshd-session[1509889]: Invalid user ansible from 120.48.9.231 p ... show more 2026-07-06T07:58:16.465703+02:00 neo sshd-session[1509889]: Invalid user ansible from 120.48.9.231 port 55460 ... show less	Brute-Force SSH
🇫🇮 MostHosted	2026-07-06 05:29:45 (14 hours ago)	$f2bV_matches	Brute-Force SSH
🇺🇸 bigwavedave	2026-07-06 03:26:37 (16 hours ago)	ssh	Brute-Force SSH
🇬🇧 redfox	2026-07-06 01:56:21 (17 hours ago)	2026-07-06T03:45:38.510866+02:00 vps643776 sshd[1211596]: Failed password for root from 120.48.9.231 ... show more 2026-07-06T03:45:38.510866+02:00 vps643776 sshd[1211596]: Failed password for root from 120.48.9.231 port 36904 ssh2 2026-07-06T03:55:29.421982+02:00 vps643776 sshd[1212287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.9.231 user=root 2026-07-06T03:55:31.706640+02:00 vps643776 sshd[1212287]: Failed password for root from 120.48.9.231 port 58464 ssh2 2026-07-06T03:56:18.299911+02:00 vps643776 sshd[1212357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.9.231 user=root 2026-07-06T03:56:20.308816+02:00 vps643776 sshd[1212357]: Failed password for root from 120.48.9.231 port 53770 ssh2 ... show less	Brute-Force SSH
🇩🇪 D3vNu11	2026-07-05 20:27:21 (23 hours ago)	Level: (LOW): Known Attacker via Cowrie IOC Country: China 1x -> Target Country: Germany SSH	Hacking Brute-Force SSH
🇺🇸 Deltron3030	2026-07-05 20:23:59 (23 hours ago)	SSH brute-force attempt from 120.48.9.231 blocked by Houston-Xeon-Dartnode.	Brute-Force SSH
🇸🇬 apnic.network	2026-07-05 20:04:08 (23 hours ago)	Invalid user ubuntu from 120.48.9.231 port 42618	Brute-Force SSH
Anonymous	2026-07-05 17:53:40 (1 day ago)	SSH brute force attempt. User: root, Pass: [REDACTED]	Brute-Force SSH

Showing 1 to 15 of 68 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.75.165.74

🇨🇷 206.203.59.77

🇧🇷 205.210.31.227

🇺🇸 165.22.134.78

🇮🇳 135.235.138.43

🇨🇦 85.217.149.71

🇱🇹 62.60.130.219

🇧🇪 34.78.29.97

🇨🇳 222.128.15.63

🇩🇪 185.65.202.199

🇺🇸 162.216.150.173

🇺🇸 147.185.132.211

🇧🇷 129.121.42.131

🇩🇪 104.207.58.82

🇩🇪 64.89.163.160

🇸🇬 47.128.58.99

🇨🇳 36.250.220.83

🇺🇸 198.98.54.35

🇺🇸 161.35.190.246

🇻🇳 157.66.26.151