JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.53.248.92

120.53.248.92 was found in our database!

This IP was reported 98 times. Confidence of Abuse is 100%: ?

100%

ISP	Shandong Servsd Technology Co. Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45090
Domain Name	cnnic.cn
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.53.248.92

Whois 120.53.248.92

IP Abuse Reports for 120.53.248.92:

This IP address has been reported a total of 98 times from 79 distinct sources. 120.53.248.92 was first reported on May 25th 2026, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 210kur	2026-06-07 01:16:12 (13 hours ago)	SSH brute-force detected from 120.53.248.92	Brute-Force SSH
Anonymous	2026-06-07 00:26:55 (14 hours ago)	2026-06-07T00:16:46.653203+00:00 de-fra2-ddos1 sshd[762890]: Invalid user shahab from 120.53.248.92 ... show more 2026-06-07T00:16:46.653203+00:00 de-fra2-ddos1 sshd[762890]: Invalid user shahab from 120.53.248.92 port 40654 2026-06-07T00:25:55.865606+00:00 de-fra2-ddos1 sshd[763189]: Invalid user etirama from 120.53.248.92 port 36656 2026-06-07T00:26:54.975315+00:00 de-fra2-ddos1 sshd[763191]: Invalid user john from 120.53.248.92 port 47346 ... show less	Brute-Force SSH
🇧🇾 lns.bz	2026-06-07 00:19:26 (14 hours ago)	SSH bruteforce [BY]	SSH
🇫🇷 lel.ovh	2026-06-06 22:37:40 (16 hours ago)	2026-06-06T22:18:32.492420+00:00 fr sshd[31988]: Invalid user dev from 120.53.248.92 port 42714 2026 ... show more 2026-06-06T22:18:32.492420+00:00 fr sshd[31988]: Invalid user dev from 120.53.248.92 port 42714 2026-06-06T22:31:14.189425+00:00 fr sshd[32145]: Invalid user bloom from 120.53.248.92 port 36434 2026-06-06T22:37:38.896418+00:00 fr sshd[32223]: Invalid user diana from 120.53.248.92 port 44694 ... show less	Brute-Force SSH
🇺🇸 ISPLtd	2026-06-05 20:48:46 (1 day ago)	Jun 5 17:48:25 120.53.248.92 TCP SPT=57992 DPT=222 SYN Jun 5 17:48:26 120.53.248.92 TCP SPT=57992 ... show more Jun 5 17:48:25 120.53.248.92 TCP SPT=57992 DPT=222 SYN Jun 5 17:48:26 120.53.248.92 TCP SPT=57992 DPT=222 SYN Jun 5 17:48:28 120.53.248.92 TCP SPT=57992 DPT=222 SYN ... show less	Port Scan
🇺🇸 anon333	2026-06-03 16:33:19 (3 days ago)	Hacker syslog review 1780504399	Hacking
🇹🇷 Threat.live	2026-06-03 15:10:07 (3 days ago)	Suspicious Connection Attempts	Brute-Force
🇺🇸 Freenex1911	2026-06-03 13:33:09 (4 days ago)	2026-06-03T15:33:07.095433+02:00 bear sshd[1632017]: Invalid user aramos from 120.53.248.92 port 527 ... show more 2026-06-03T15:33:07.095433+02:00 bear sshd[1632017]: Invalid user aramos from 120.53.248.92 port 52726 2026-06-03T15:33:07.098559+02:00 bear sshd[1632017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.53.248.92 2026-06-03T15:33:09.320294+02:00 bear sshd[1632017]: Failed password for invalid user aramos from 120.53.248.92 port 52726 ssh2 ... show less	Brute-Force SSH
🇺🇸 NetGuard	2026-06-02 19:34:00 (4 days ago)	#honeypot #netguard247 #cowrie #ssh_telnet_probe Captured by NetGuard 24/7 T-Pot honeypot (netguard2 ... show more #honeypot #netguard247 #cowrie #ssh_telnet_probe Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com). Timestamp: 2026-05-26T19:32:57.573+00:00 Attacker IP: 120.53.248.92 \| Port: 22 \| Country: China Honeypot: cowrie \| Attack: ssh_telnet_probe Source: NetGuard 24/7 (netguard24-7.com) \| PhantomGrid Defense show less	Brute-Force SSH
🇫🇷 guille-rodriguez	2026-06-02 11:27:32 (5 days ago)	SSH BruteForce detected by Fail2Ban (failures=8, source=VPSO)	Brute-Force SSH
🇩🇪 on-com	2026-06-02 11:24:28 (5 days ago)	SSH login attempt	SSH
🇨🇦 dpinse	2026-06-01 09:17:42 (6 days ago)	Honeypot [honeypot-ca-sensor1]: Unauthorized connection attempt detected on 22/SSH	SSH Port Scan
🇧🇷 modscleo4	2026-06-01 08:31:05 (6 days ago)	2026-06-01T05:31:04.809860-03:00 salada-de-fruta sshd[2993634]: Disconnected from authenticating use ... show more 2026-06-01T05:31:04.809860-03:00 salada-de-fruta sshd[2993634]: Disconnected from authenticating user root 120.53.248.92 port 44566 [preauth] ... show less	Port Scan Brute-Force SSH
🇦🇺 specializedtom	2026-05-31 06:15:15 (1 week ago)	Fail2Ban triggered a ban on 120.53.248.92 for postfix-sasl	Phishing Email Spam Spoofing
🇫🇷 GoXLd	2026-05-31 02:25:23 (1 week ago)	2026-05-31T04:25:20.579158+02:00 node1 sshd-session[471082]: pam_unix(sshd:auth): authentication fai ... show more 2026-05-31T04:25:20.579158+02:00 node1 sshd-session[471082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.53.248.92 user=root 2026-05-31T04:25:22.180725+02:00 node1 sshd-session[471082]: Failed password for root from 120.53.248.92 port 52656 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 98 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 193.37.32.189

🇳🇬 197.211.63.16

🇸🇬 193.37.32.229

🇸🇬 193.37.32.197

🇮🇳 182.95.191.186

🇮🇳 171.61.20.182

🇨🇳 171.37.92.108

🇦🇪 165.154.12.108

🇺🇸 143.110.156.84

🇨🇳 125.120.205.224

🇩🇪 77.91.71.10

🇺🇸 44.223.116.149

🇺🇸 43.162.99.8

🇺🇸 20.14.79.82

🇸🇬 193.37.32.209

🇧🇴 190.181.25.210

🇧🇷 179.184.85.167

🇷🇺 176.57.76.206

🇫🇷 173.212.228.191

🇳🇱 172.235.168.35