JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.55.120.41

111.55.120.41 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 35%: ?

35%

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS24444
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.55.120.41

Whois 111.55.120.41

IP Abuse Reports for 111.55.120.41:

This IP address has been reported a total of 16 times from 13 distinct sources. 111.55.120.41 was first reported on April 10th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 isolated	2026-07-01 20:29:16 (1 week ago)	2026-07-02T04:28:31.992929localhost sshd[98204]: Invalid user room from 111.55.120.41 port 41504 202 ... show more 2026-07-02T04:28:31.992929localhost sshd[98204]: Invalid user room from 111.55.120.41 port 41504 2026-07-02T04:28:54.451164localhost sshd[98206]: Invalid user sunmingyang from 111.55.120.41 port 12011 2026-07-02T04:29:16.135035localhost sshd[98208]: Invalid user cvsuser from 111.55.120.41 port 12012 ... show less	Brute-Force SSH
🇫🇷 blackynet	2026-07-01 08:38:44 (1 week ago)	2026-07-01T10:37:09.067557srv sshd[2368]: Invalid user zhangfz from 111.55.120.41 port 19079 2026-07 ... show more 2026-07-01T10:37:09.067557srv sshd[2368]: Invalid user zhangfz from 111.55.120.41 port 19079 2026-07-01T10:37:33.510768srv sshd[2815]: Invalid user renmeng from 111.55.120.41 port 19080 2026-07-01T10:37:59.482965srv sshd[3295]: Invalid user jjf from 111.55.120.41 port 19081 2026-07-01T10:38:23.532027srv sshd[3728]: Invalid user zcgong from 111.55.120.41 port 19082 2026-07-01T10:38:44.109720srv sshd[4091]: Invalid user app02 from 111.55.120.41 port 3059 ... show less	Brute-Force SSH
🇫🇷 SiyCah	2026-07-01 02:00:01 (2 weeks ago)	IP banned by fail2ban; banned in jail sshd. Report generated by fail2abuseipdb.	Hacking Brute-Force SSH
Anonymous	2026-06-29 22:33:06 (2 weeks ago)	Aggressive SSH Brute-Force	Brute-Force SSH
🇩🇪 kreativstrecke	2026-06-29 08:09:14 (2 weeks ago)	Jun 29 10:07:13 srv05 sshd[3096441]: Invalid user xujiang from 111.55.120.41 port 14996 Jun 29 10:08 ... show more Jun 29 10:07:13 srv05 sshd[3096441]: Invalid user xujiang from 111.55.120.41 port 14996 Jun 29 10:08:18 srv05 sshd[3097327]: Invalid user cji from 111.55.120.41 port 7402 Jun 29 10:08:39 srv05 sshd[3097635]: Invalid user zeu from 111.55.120.41 port 14999 Jun 29 10:08:57 srv05 sshd[3097873]: Invalid user jyo from 111.55.120.41 port 15000 Jun 29 10:09:14 srv05 sshd[3098326]: Invalid user snu from 111.55.120.41 port 15001 ... show less	Brute-Force
🇫🇷 LAHCEN TAHIRI	2026-06-28 19:56:02 (2 weeks ago)	2026-06-28T20:56:23.192364+01:00 mx.magpie.ma sshd-session[3504812]: Invalid user sysdba from 111.55 ... show more 2026-06-28T20:56:23.192364+01:00 mx.magpie.ma sshd-session[3504812]: Invalid user sysdba from 111.55.120.41 port 62053 2026-06-28T20:56:42.703871+01:00 mx.magpie.ma sshd-session[3504819]: Invalid user abx from 111.55.120.41 port 64135 2026-06-28T20:57:22.823338+01:00 mx.magpie.ma sshd-session[3504829]: Invalid user larry from 111.55.120.41 port 62055 2026-06-28T20:57:39.276546+01:00 mx.magpie.ma sshd-session[3504837]: Invalid user deploy from 111.55.120.41 port 62056 2026-06-28T20:58:10.840774+01:00 mx.magpie.ma sshd-session[3504847]: Invalid user goutievo from 111.55.120.41 port 62058 ... show less	Brute-Force SSH
🇩🇪 rooty	2026-06-28 08:03:17 (2 weeks ago)	Jun 28 11:01:30 rooty sshd-session[4520]: Invalid user syy from 111.55.120.41 port 41316 Jun 28 11:0 ... show more Jun 28 11:01:30 rooty sshd-session[4520]: Invalid user syy from 111.55.120.41 port 41316 Jun 28 11:01:51 rooty sshd-session[4522]: Invalid user koziarz from 111.55.120.41 port 28701 Jun 28 11:02:13 rooty sshd-session[4528]: Invalid user liuleiso from 111.55.120.41 port 41317 Jun 28 11:02:55 rooty sshd-session[4532]: Invalid user yaoll from 111.55.120.41 port 28702 Jun 28 11:03:17 rooty sshd-session[4536]: Invalid user csl from 111.55.120.41 port 41318 ... show less	Brute-Force SSH
Anonymous	2026-04-16 13:03:47 (2 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 TPI-Abuse	2026-04-12 16:28:47 (3 months ago)	(mod_security) mod_security (id:210350) triggered by 111.55.120.41 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 111.55.120.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 12 12:28:39.491702 2026] [security2:error] [pid 153180:tid 153180] [client 111.55.120.41:13635] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|blog.mosherpit.com\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "blog.mosherpit.com"] [uri "/tv/ultraseven-episode-3-the-secret-of-the-lake/"] [unique_id "advIN5yK29iThLWx_OZtdwAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-03-03 10:37:26 (4 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇷🇸 Scan	2026-03-03 03:40:37 (4 months ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇩🇪 marzzzello	2025-11-16 09:50:42 (7 months ago)	Ports: 27x 14458	Port Scan
🇺🇸 TPI-Abuse	2025-09-10 10:25:11 (10 months ago)	(mod_security) mod_security (id:210350) triggered by 111.55.120.41 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 111.55.120.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 10 06:25:05.355748 2025] [security2:error] [pid 17684:tid 17684] [client 111.55.120.41:47915] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.renju.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/game/153406/"] [unique_id "aMFSAaiLuCIllxi7FZHZXQAAABM"], referer: https://www.renju.net/game/153406 show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-09-08 23:32:28 (10 months ago)	ThreatBook Intelligence: Scanner,Mobile more details on https://threatbook.io/ip/111.55.120.41 2025- ... show more ThreatBook Intelligence: Scanner,Mobile more details on https://threatbook.io/ip/111.55.120.41 2025-09-08 15:41:03 /pac/pac-sh.pac 2025-09-08 15:41:04 /pac/pac-sh.pac 2025-09-08 15:41:04 /pac/pac-sh.pac 2025-09-08 15:41:04 /pac/pac-sh.pac 2025-09-08 15:41:01 /pac/pac-sh.pac 2025-09-08 15:41:03 /pac/pac-sh.pac 2025-09-08 15:41:04 /pac/pac-sh.pac 2025-09-08 15:41:03 /pac/pac-sh.pac 2025-09-08 15:41:04 /pac/pac-sh.pac 2025-09-08 15:41:03 /pac/pac-sh.pac show less	Web App Attack
🇷🇸 Scan	2025-08-13 02:04:22 (11 months ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇩 217.19.214.139

🇺🇸 216.180.246.225

🇵🇰 203.33.239.7

🇮🇷 195.214.235.78

🇺🇸 91.230.168.67

🇭🇹 66.9.168.133

🇨🇳 61.146.235.54

🇳🇱 45.156.87.93

🇮🇳 38.183.61.103

🇧🇪 34.76.239.106

🇻🇳 222.255.214.223

🇬🇧 213.166.84.58

🇧🇷 205.210.31.162

🇹🇼 198.235.24.73

🇸🇬 194.164.107.5

🇺🇸 184.98.79.129

🇸🇪 172.160.227.37

🇺🇸 161.35.129.114

🇨🇳 120.82.84.178

🇨🇳 116.177.172.108