JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.119.48.20

157.119.48.20 was found in our database!

This IP was reported 123 times. Confidence of Abuse is 100%: ?

100%

ISP	BD-Networks
Usage Type	Fixed Line ISP
ASN	AS59365
Domain Name	bd-networks.net
Country	🇧🇩 Bangladesh
City	Gazipur, Dhaka Division

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.119.48.20

Whois 157.119.48.20

IP Abuse Reports for 157.119.48.20:

This IP address has been reported a total of 123 times from 64 distinct sources. 157.119.48.20 was first reported on November 14th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 security.rdmc.fr	2026-09-17 22:26:24 (1 day ago)	Port Scan Attack proto:TCP src:60648 dst:23	Port Scan
🇫🇷 Sklurk	2026-09-17 12:14:31 (1 day ago)	Web App Attack	Web App Attack
🇧🇷 noconex	2026-09-16 17:04:21 (2 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 157.119.48 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 157.119.48.20 show less	Port Scan Brute-Force SSH
🇺🇸 gui-ying233	2026-09-16 10:54:24 (2 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇵🇹 redmihype	2026-09-15 10:08:00 (3 days ago)	SSH tarpit (endlessh)	Brute-Force SSH
Anonymous	2026-09-14 13:10:18 (4 days ago)	IP associated with 1 spam user(s) automatically banned on acomics.ru and 1 event(s) during the last ... show more IP associated with 1 spam user(s) automatically banned on acomics.ru and 1 event(s) during the last period. Event types: UPDATE_PROFILE (1). show less	Web Spam
🇫🇮 jonahtebaa	2026-09-14 08:40:03 (4 days ago)	SSH tarpit (endlessh) capture on jonahtebaa infra	Port Scan Brute-Force SSH
Anonymous	2026-09-13 18:04:26 (5 days ago)	PORT & IP Scan.	Port Scan Brute-Force
🇺🇸 gui-ying233	2026-09-13 05:45:24 (5 days ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇧🇷 noconex	2026-09-12 23:07:02 (6 days ago)	Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 157.119.48 ... show more Wazuh Alert \| Rule ID: 100199 \| Desc: Suricata: (ET SCAN Potential SSH Scan) detectado de 157.119.48.20 show less	Port Scan Brute-Force SSH
🇫🇮 6kilowatti	2026-09-12 18:52:17 (6 days ago)	2026-09-12T21:52:16.850944+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ... show more 2026-09-12T21:52:16.850944+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=157.119.48.20 DST=83.148.240.21 LEN=60 TOS=0x00 PREC=0x00 TTL=45 ID=33935 DF PROTO=TCP SPT=51160 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 bescared	2026-09-10 07:58:34 (1 week ago)	F2B - Malicious activity detected. Unauthorized connection attempt: Telnet. -8ff06ede-	Port Scan
🇬🇪 ORDUNET	2026-09-09 14:59:29 (1 week ago)	Botnet UDP flood (DDoS) against a host in AS203136 (LLC Ordunet), Georgia, on 2026-09-09 between 18: ... show more Botnet UDP flood (DDoS) against a host in AS203136 (LLC Ordunet), Georgia, on 2026-09-09 between 18:00 and 19:30 local time (+04:00). This source sent UDP to port 47472 of 185.143.177.x at more than 800 packets/sec. Nothing listens on that port - repeated full packet captures of all traffic reaching this machine recorded its services on other UDP ports and never a single packet to 47472 - so this cannot be a client of anything; it is flood by definition, independent of any rate measurement. One of 2743 sources in 1270 networks and 136 countries in the same wave. Detected on a MikroTik RouterOS router in the raw/prerouting chain (dst-limit 800,200,src-address/10s); the timestamp is when this source crossed the threshold. The host is almost certainly compromised and part of a botnet. Evidence: [email protected]. show less	DDoS Attack Exploited Host
🇵🇹 redmihype	2026-09-08 09:49:30 (1 week ago)	SSH tarpit (endlessh)	Brute-Force SSH
🇺🇸 kosada.com	2026-09-07 05:14:06 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0 ... show more Repeated requests classified as pathological web bot behavior, for example: /[redacted]/search?f%5B0%5D=digest_key_terms%3A389&f%5B1%5D=digest_key_terms%3A765&f%5B2%5D=digest_publication_type%3A927&field_article_edition%5B504%5D=504&field_key_terms%5B380%5D=380 (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot

Showing 1 to 15 of 123 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 154.221.25.72

🇵🇱 109.205.211.25

🇱🇹 62.60.130.230

🇧🇪 35.187.108.183

🇺🇸 20.38.35.126

🇺🇸 3.82.141.143

🇧🇷 205.210.31.181

🇸🇬 194.56.225.119

🇺🇦 193.34.172.53

🇮🇹 188.152.238.126

🇨🇳 180.76.173.228

🇧🇷 179.183.114.175

🇫🇮 178.20.210.198

🇸🇰 176.107.20.209

🇩🇪 172.120.37.25

🇧🇷 170.238.149.153

🇨🇳 120.71.144.228

🇵🇭 112.202.40.185

🇩🇪 104.207.52.70

🇸🇬 104.28.163.28