JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.48.97.128

120.48.97.128 was found in our database!

This IP was reported 387 times. Confidence of Abuse is 0%: ?

ISP	Beijing Baidu Netcom Science and Technology Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS38365
Domain Name	baidu.com
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.48.97.128

Whois 120.48.97.128

IP Abuse Reports for 120.48.97.128:

This IP address has been reported a total of 387 times from 247 distinct sources. 120.48.97.128 was first reported on June 6th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 bogdanv	2024-08-27 08:14:47 (1 year ago)	$f2bV_matches	Brute-Force SSH
🇩🇪 bogdanv	2024-07-18 07:12:48 (1 year ago)	$f2bV_matches	Brute-Force SSH
Anonymous	2024-07-02 05:07:25 (1 year ago)	Jul 2 05:03:21 de-fra2-dns3 sshd[1745037]: Invalid user devops from 120.48.97.128 port 45600 Jul 2 ... show more Jul 2 05:03:21 de-fra2-dns3 sshd[1745037]: Invalid user devops from 120.48.97.128 port 45600 Jul 2 05:04:49 de-fra2-dns3 sshd[1745085]: Invalid user admin from 120.48.97.128 port 59112 Jul 2 05:07:24 de-fra2-dns3 sshd[1745137]: Invalid user ubuntu from 120.48.97.128 port 57884 ... show less	Brute-Force SSH
🇨🇭 master.arknet.ch	2024-07-02 05:04:15 (1 year ago)	2024-07-02T05:57:31.693664+01:00 wels sshd[518486]: Disconnected from authenticating user root 120.4 ... show more 2024-07-02T05:57:31.693664+01:00 wels sshd[518486]: Disconnected from authenticating user root 120.48.97.128 port 35838 [preauth] 2024-07-02T06:02:51.493731+01:00 wels sshd[518581]: Disconnected from authenticating user root 120.48.97.128 port 44884 [preauth] 2024-07-02T06:04:14.951336+01:00 wels sshd[518584]: Disconnected from authenticating user root 120.48.97.128 port 58392 [preauth] ... show less	Brute-Force SSH
🇧🇷 diego	2024-07-02 03:10:00 (1 year ago)	[rede-arem1] (sshd) Failed SSH login from 120.48.97.128 (CN/China/-): 5 in the last 3600 secs; Ports ... show more [rede-arem1] (sshd) Failed SSH login from 120.48.97.128 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul 2 00:02:06 sshd[7269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.97.128 user=[USERNAME] Jul 2 00:02:07 sshd[7269]: Failed password for [USERNAME] from 120.48.97.128 port 43598 ssh2 Jul 2 00:07:46 sshd[7353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.97.128 user=[USERNAME] Jul 2 00:07:48 sshd[7353]: Failed password for [USERNAME] from 120.48.97.128 port 35012 ssh2 Jul 2 00:09:55 ss show less	Port Scan
🇳🇱 applemooz	2024-07-02 01:25:53 (1 year ago)	Jul 2 03:24:54 ns41 sshd[5600]: Failed password for root from 120.48.97.128 port 38434 ssh2 Jul 2 ... show more Jul 2 03:24:54 ns41 sshd[5600]: Failed password for root from 120.48.97.128 port 38434 ssh2 Jul 2 03:25:51 ns41 sshd[5710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.97.128 Jul 2 03:25:53 ns41 sshd[5710]: Failed password for invalid user ubuntu from 120.48.97.128 port 52468 ssh2 ... show less	Brute-Force SSH
🇳🇱 applemooz	2024-07-02 01:02:26 (1 year ago)	Jul 2 02:54:01 ns41 sshd[724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 t ... show more Jul 2 02:54:01 ns41 sshd[724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.97.128 Jul 2 02:54:03 ns41 sshd[724]: Failed password for invalid user ubuntu from 120.48.97.128 port 46648 ssh2 Jul 2 03:02:25 ns41 sshd[2080]: Failed password for root from 120.48.97.128 port 54146 ssh2 ... show less	Brute-Force SSH
🇧🇷 diego	2024-07-01 20:39:43 (1 year ago)	[rede-164-62] (sshd) Failed SSH login from 120.48.97.128 (CN/China/-): 5 in the last 3600 secs; Port ... show more [rede-164-62] (sshd) Failed SSH login from 120.48.97.128 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 1 17:26:34 sshd[21315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.97.128 user=[USERNAME] show less	SSH
🇫🇷 Fr13nds.Tech	2024-07-01 19:34:54 (1 year ago)	Jul 1 21:33:01 plesk sshd[32543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Jul 1 21:33:01 plesk sshd[32543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.97.128 user=root Jul 1 21:33:04 plesk sshd[32543]: Failed password for root from 120.48.97.128 port 43250 ssh2 Jul 1 21:33:59 plesk sshd[440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.97.128 user=root Jul 1 21:34:01 plesk sshd[440]: Failed password for root from 120.48.97.128 port 58054 ssh2 Jul 1 21:34:53 plesk sshd[760]: Invalid user ftpuser from 120.48.97.128 port 44618 show less	Brute-Force SSH
🇺🇸 oof	2024-07-01 19:33:46 (1 year ago)	Jul 1 19:32:48 gcore sshd[225759]: Failed password for root from 120.48.97.128 port 43924 ssh2 Jul ... show more Jul 1 19:32:48 gcore sshd[225759]: Failed password for root from 120.48.97.128 port 43924 ssh2 Jul 1 19:33:43 gcore sshd[225761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.97.128 user=root Jul 1 19:33:45 gcore sshd[225761]: Failed password for root from 120.48.97.128 port 58726 ssh2 ... show less	Brute-Force SSH
🇩🇪 V	2024-07-01 19:22:56 (1 year ago)	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2024-07-01T19:22:56Z	Brute-Force SSH
Anonymous	2024-07-01 18:08:53 (1 year ago)	Jul 1 14:08:05 global2 sshd[16301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Jul 1 14:08:05 global2 sshd[16301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.97.128 Jul 1 14:08:07 global2 sshd[16301]: Failed password for invalid user jenkins from 120.48.97.128 port 50956 ssh2 Jul 1 14:08:51 global2 sshd[16365]: Invalid user erpnext from 120.48.97.128 port 57182 Jul 1 14:08:51 global2 sshd[16365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.48.97.128 Jul 1 14:08:52 global2 sshd[16365]: Failed password for invalid user erpnext from 120.48.97.128 port 57182 ssh2 ... show less	Brute-Force SSH
🇯🇵 zwh	2024-07-01 17:25:25 (1 year ago)	SSH Brute-Force	Brute-Force SSH
🇩🇪 ghostwarriors	2024-07-01 16:21:10 (1 year ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇩🇪 eminovic.ba	2024-07-01 16:10:17 (1 year ago)	Brute force login attack ...	Brute-Force SSH

Showing 1 to 15 of 387 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 95.164.159.182

🇳🇱 45.198.224.18

🇨🇴 186.112.120.36

🇯🇵 160.251.101.169

🇫🇮 157.180.9.211

🇩🇪 116.202.96.3

🇮🇳 103.248.120.6

🇨🇳 101.126.53.14

🇺🇸 95.164.159.133

🇫🇷 85.217.140.34

🇧🇷 45.205.1.247

🇪🇨 45.70.15.152

🇴🇲 38.253.216.151

🇺🇸 20.168.121.93

🇩🇪 213.209.159.225

🇪🇬 197.63.60.180

🇺🇸 172.70.179.156

🇸🇬 101.32.240.173

🇺🇸 99.63.68.41

🇫🇷 91.231.89.81