JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.48.96.161

120.48.96.161 was found in our database!

This IP was reported 105 times. Confidence of Abuse is 100%: ?

100%

ISP	Beijing Baidu Netcom Science and Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS38365
Domain Name	baidu.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.48.96.161

Whois 120.48.96.161

IP Abuse Reports for 120.48.96.161:

This IP address has been reported a total of 105 times from 96 distinct sources. 120.48.96.161 was first reported on April 15th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 jjjjj	2026-07-15 19:01:47 (1 hour ago)	ssh fail2ban: 2026-07-15 21:01:38 +02:00 conn closed by, port=52810 [preauth] 2026-07-15 21:01:40 +0 ... show more ssh fail2ban: 2026-07-15 21:01:38 +02:00 conn closed by, port=52810 [preauth] 2026-07-15 21:01:40 +02:00 auth fail: user=root 2026-07-15 21:01:42 +02:00 wrong password: user=root, port=52818 2026-07-15 21:01:42 +02:00 conn closed by authing user root, port=52818 [preauth] 2026-07-15 21:01:44 +02:00 auth fail: user=root 2026-07-15 21:01:45 +02:00 wrong password: user=root, port=52830 2026-07-15 21:01:46 +02:00 conn closed by authing user root, port=52830 [preauth] (automated) show less	Brute-Force SSH
🇺🇸 LSPCCU	2026-07-15 11:28:37 (8 hours ago)	TSEC Honeypot Network report. Threat score: 95/100. Categories: DDoS Attack, Port Scan, Hacking, Bru ... show more TSEC Honeypot Network report. Threat score: 95/100. Categories: DDoS Attack, Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: cowrie, ssh-telnet. Context: 120. show less	DDoS Attack Port Scan Hacking Brute-Force Web App Attack SSH
🇧🇬 geddo.in	2026-07-15 03:35:01 (16 hours ago)	Jul 14 21:33:25 mortgagebase sshd[6282]: Failed password for root from 120.48.96.161 port 60806 ssh2 ... show more Jul 14 21:33:25 mortgagebase sshd[6282]: Failed password for root from 120.48.96.161 port 60806 ssh2 Jul 14 21:33:29 mortgagebase sshd[6288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.96.161 user=root Jul 14 21:33:31 mortgagebase sshd[6288]: Failed password for root from 120.48.96.161 port 56056 ssh2 Jul 14 21:34:57 mortgagebase sshd[6292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.96.161 user=root Jul 14 21:35:00 mortgagebase sshd[6292]: Failed password for root from 120.48.96.161 port 56062 ssh2 ... show less	Brute-Force SSH
🇩🇪 femboy.cat	2026-07-15 02:34:45 (17 hours ago)	Port scan to tcp/2233 from 120.48.96.161	Brute-Force
🇫🇮 Alexandr Kulkov	2026-07-14 21:33:23 (22 hours ago)	2026-07-14T21:33:20.559369+00:00 ubuntu24 sshd[286085]: pam_unix(sshd:auth): authentication failure; ... show more 2026-07-14T21:33:20.559369+00:00 ubuntu24 sshd[286085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.96.161 user=root 2026-07-14T21:33:22.459392+00:00 ubuntu24 sshd[286085]: Failed password for root from 120.48.96.161 port 46304 ssh2 ... show less	Brute-Force SSH
🇺🇸 HamSammich	2026-07-14 21:05:31 (23 hours ago)	Automated sensor: 2 SSH connection/probe attempts over the last 24h (latest 2026-07-14T21:05Z).	Brute-Force SSH
🇩🇪 eminovic.ba	2026-07-14 20:17:33 (23 hours ago)	2026-07-14T22:17:28.988534+02:00 sun sshd[415635]: Failed password for root from 120.48.96.161 port ... show more 2026-07-14T22:17:28.988534+02:00 sun sshd[415635]: Failed password for root from 120.48.96.161 port 37906 ssh2 2026-07-14T22:17:31.123868+02:00 sun sshd[415638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.96.161 user=root 2026-07-14T22:17:32.863025+02:00 sun sshd[415638]: Failed password for root from 120.48.96.161 port 58482 ssh2 ... show less	Brute-Force SSH
🇺🇸 drewf.ink	2026-07-14 18:16:14 (1 day ago)	[18:16] Attempted SSH login on port 2222 with credentials root:------fuck------	Brute-Force SSH
🇵🇱 JavaStart	2026-07-14 04:06:03 (1 day ago)	Jul 14 06:05:49 javastart sshd[3381674]: Failed password for root from 120.48.96.161 port 41932 ssh2 ... show more Jul 14 06:05:49 javastart sshd[3381674]: Failed password for root from 120.48.96.161 port 41932 ssh2 Jul 14 06:05:54 javastart sshd[3381678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.96.161 user=root Jul 14 06:05:57 javastart sshd[3381678]: Failed password for root from 120.48.96.161 port 41948 ssh2 Jul 14 06:05:59 javastart sshd[3381718]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.96.161 user=root Jul 14 06:06:01 javastart sshd[3381718]: Failed password for root from 120.48.96.161 port 46150 ssh2 ... show less	Brute-Force SSH
🇩🇪 LRob	2026-07-14 00:57:42 (1 day ago)	CrowdSec: crowdsecurity/ssh-bf	Brute-Force SSH
🇩🇪 F63NNKJ4	2026-07-14 00:51:40 (1 day ago)	Jul 14 02:51:18 v22019058497090703 sshd[19822]: Failed password for root from 120.48.96.161 port 441 ... show more Jul 14 02:51:18 v22019058497090703 sshd[19822]: Failed password for root from 120.48.96.161 port 44172 ssh2 ... show less	Brute-Force SSH
🇺🇸 COMPLEX	2026-07-14 00:31:43 (1 day ago)	Banned by Multi Agent · node …47g7 · attempts=5 · SSH brute-force / scan	Brute-Force SSH
🇰🇷 winter	2026-07-13 20:57:48 (1 day ago)	Connection attemp from 120.48.96.161 to port 22	Brute-Force SSH
🇫🇷 cereal57	2026-07-13 19:34:58 (2 days ago)	{"eventid":"cowrie.session.connect","src_ip":"120.48.96.161","src_port":48442,"dst_ip":"172.17.0.2", ... show more {"eventid":"cowrie.session.connect","src_ip":"120.48.96.161","src_port":48442,"dst_ip":"172.17.0.2","dst_port":2222,"session":"67169c5986ae","protocol":"ssh","message":"New connection: 120.48.96.161:48442 (172.17.0.2:2222) [session: 67169c5986ae]","sensor":"6992c69f2c91","uuid":"38e11aec-6eff-11f1-8c17-1620fae93b35","timestamp":"2026-07-13T19:34:57.010542Z"} ... show less	Port Scan Brute-Force SSH
🇺🇸 paradoxnetworks	2026-07-13 07:28:57 (2 days ago)	2026-07-13T07:28:51.985388+00:00 edge-sea-con01.int.pdx.net.uk sshd[3294166]: Failed password for ro ... show more 2026-07-13T07:28:51.985388+00:00 edge-sea-con01.int.pdx.net.uk sshd[3294166]: Failed password for root from 120.48.96.161 port 37882 ssh2 2026-07-13T07:28:55.428211+00:00 edge-sea-con01.int.pdx.net.uk sshd[3294186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.96.161 user=root 2026-07-13T07:28:56.888356+00:00 edge-sea-con01.int.pdx.net.uk sshd[3294186]: Failed password for root from 120.48.96.161 port 37898 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 105 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 186.225.227.179

🇫🇷 185.142.53.15

🇺🇸 70.182.12.141

🇪🇬 41.128.181.199

🇦🇺 34.40.145.110

🇩🇪 2a09:bac5:2a92:2496::3a5:5b

🇫🇷 213.136.80.233

🇭🇰 199.45.155.65

🇳🇱 195.178.110.239

🇸🇬 167.71.204.56

🇸🇦 142.247.222.145

🇧🇷 20.226.103.253

🇺🇸 20.221.69.50

🇬🇧 2.57.17.219

🇬🇪 212.58.103.102

🇧🇷 205.210.31.204

🇧🇷 201.81.233.116

🇵🇱 176.53.159.197

🇺🇸 162.216.149.170

🇷🇺 157.22.100.177