JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.216.217.211

120.216.217.211 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS24445
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.216.217.211

Whois 120.216.217.211

IP Abuse Reports for 120.216.217.211:

This IP address has been reported a total of 38 times from 26 distinct sources. 120.216.217.211 was first reported on August 28th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 RAP	2026-08-31 18:32:12 (2 days ago)	2026-08-31 18:32:12 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇳🇵 radheykrishna.com.np	2026-08-31 17:31:10 (2 days ago)	Aug 31 23:16:10 kernel: [1913638.150119] [UFW BLOCK] IN=ens160 OUT= SRC=120.216.217.211 LEN=60 TOS=0 ... show more Aug 31 23:16:10 kernel: [1913638.150119] [UFW BLOCK] IN=ens160 OUT= SRC=120.216.217.211 LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=57327 DF PROTO=TCP SPT=27328 DPT=23 WINDOW=28240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇳🇱 Tsumugi Kotobuki	2026-08-31 15:43:17 (2 days ago)	Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 45 \| Len: 60B \| Win ... show more Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 45 \| Len: 60B \| Win: 28240(1) \| F2B/ufw-honeypot@2026-08-31T15:43:16Z show less	Port Scan Hacking
🇳🇱 rmvanderspek	2026-08-31 12:45:03 (2 days ago)	Telnet Brute-force (IoT Botnet scan) detected.	Brute-Force IoT Targeted
🇬🇧 OptimusGO	2026-08-31 07:48:00 (2 days ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-08-31 08:48:00 UTC Log evidence: 08/31/2026-08:47:59.669199 [wDrop] [] [1:7001101:1] FINSERV CRITICAL: Telnet Access Blocked [] [Classification: Potential Corporate Privacy Violation] [Priority: 1] {TCP} 120.216.217.211:27198 -> 185.127.18.66:23 08/31/2026-08:47:59.669199 [] [1:1000103:1] SECURITY Management Port Probe - CRITICAL [] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 120.216.217.211:27198 -> 185.127.18.66:23 show less	Port Scan Brute-Force
🇺🇸 RAP	2026-08-31 05:29:01 (2 days ago)	2026-08-31 05:29:01 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 MPL	2026-08-31 01:45:52 (2 days ago)	tcp/23 (2 or more attempts)	Port Scan
🇺🇸 RAP	2026-08-31 00:38:15 (2 days ago)	2026-08-31 00:38:15 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇫🇷 security.rdmc.fr	2026-08-30 21:32:30 (3 days ago)	Port Scan Attack proto:TCP src:26972 dst:23	Port Scan
Anonymous	2026-08-30 13:44:11 (3 days ago)	Blocked by UFW [23/tcp] \| SPT: 27227 \| TTL: 49 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefin ... show more Blocked by UFW [23/tcp] \| SPT: 27227 \| TTL: 49 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
🇺🇸 Cyber Crusader	2026-08-30 12:44:38 (3 days ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
Anonymous	2026-08-30 08:45:57 (3 days ago)	Aug 29 14:50:26 localhost kernel: [116374567.684797] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Aug 29 14:50:26 localhost kernel: [116374567.684797] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=120.216.217.211 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=43 ID=39237 DF PROTO=TCP SPT=27263 DPT=23 WINDOW=28240 RES=0x00 SYN URGP=0 Aug 29 14:50:26 localhost kernel: [116374567.684811] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=120.216.217.211 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=43 ID=39237 DF PROTO=TCP SPT=27263 DPT=23 SEQ=3792797409 ACK=0 WINDOW=28240 RES=0x00 SYN URGP=0 OPT (020405780402080A1443E7A40000000001030309) Aug 30 04:45:56 localhost kernel: [116424697.342666] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=120.216.217.211 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=43 ID=21318 DF PROTO=TCP SPT=27037 DPT=23 WINDOW=28240 RES=0x00 SYN URGP=0 Aug 30 04:45:56 localhost kernel: [116424697.342699] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0 show less	Port Scan
Anonymous	2026-08-30 07:51:23 (3 days ago)	2026-08-30T09:51:22.336447+02:00 vps kernel: [4447100.913739] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more 2026-08-30T09:51:22.336447+02:00 vps kernel: [4447100.913739] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=120.216.217.211 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=28840 DF PROTO=TCP SPT=27435 DPT=23 WINDOW=28240 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇺🇸 MPL	2026-08-30 00:17:05 (3 days ago)	tcp/23 (2 or more attempts)	Port Scan
🇺🇸 RAP	2026-08-29 21:36:11 (4 days ago)	2026-08-29 21:36:11 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 66.132.172.243

🇫🇮 65.21.113.241

🇰🇷 1.212.196.146

🇸🇬 85.203.23.50

🇺🇸 2a03:2880:f802:44::

🇩🇪 213.209.159.20

🇿🇦 105.184.183.119

🇬🇧 213.166.84.50

🇬🇧 213.166.84.44

🇳🇱 185.103.255.38

🇵🇹 176.79.180.89

🇷🇴 80.94.92.55

🇨🇳 183.63.220.210

🇨🇳 175.20.107.43

🇩🇪 167.94.146.46

🇨🇲 165.211.32.115

🇮🇳 122.168.197.245

🇧🇩 118.179.205.159

🇫🇷 85.217.140.41

🇪🇸 34.175.89.106