JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

120.221.11.0

Recent Activity

Abuse confidence score ?

43% Elevated

34 reports

21 reporters · latest 6 days ago

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Qingdao, Shandong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 120.221.11.0

This IP address has been reported a total of 34 times from 21 distinct sources. 120.221.11.0 was first reported on August 10th 2022, and the most recent report was 6 days ago. In the last 60 days, the top reporter locations were: United States of America with 5 reports; Belarus with 3 reports; Australia with 2 reports. The most common categories in these recent reports were: Port Scan 16 times; Hacking 5 times; Brute-Force 4 times; IoT Targeted 3 times; Bad Web Bot 2 times; Other 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇾 stroytrest	2026-09-21 09:48:08 (6 days ago)	2026-09-21T12:48:06.314119+03:00 gate kernel: [ 6228.452648] nftables: JAIL-TELNET IN=wan OUT= MAC= ... show more 2026-09-21T12:48:06.314119+03:00 gate kernel: [ 6228.452648] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=120.221.11.0 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=12564 DF PROTO=TCP SPT=62061 DPT=23 WINDOW=14120 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-09-21 04:28:11 (1 week ago)	Blocked by UFW [23/tcp] \| SPT: 45069 \| TTL: 43 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefin ... show more Blocked by UFW [23/tcp] \| SPT: 45069 \| TTL: 43 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
🇳🇱 Tsumugi Kotobuki	2026-09-19 20:11:32 (1 week ago)	Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 33 \| Len: 60B \| Win ... show more Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 33 \| Len: 60B \| Win: 14120(1) \| F2B/ufw-honeypot@2026-09-19T20:11:32Z show less	Port Scan Hacking
🇧🇾 stroytrest	2026-09-19 02:25:45 (1 week ago)	2026-09-19T05:25:44.991218+03:00 gate kernel: [1545920.336235] nftables: JAIL-TELNET IN=wan OUT= MAC ... show more 2026-09-19T05:25:44.991218+03:00 gate kernel: [1545920.336235] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=120.221.11.0 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=59826 DF PROTO=TCP SPT=29228 DPT=23 WINDOW=14120 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-09-18 19:51:03 (1 week ago)	Blocked by firewall on hugin [23/tcp] \| Rule: UFW \| SPT: 28657 \| TTL: 43 \| LEN: 60 \| TOS: 0x04 • Rep ... show more Blocked by firewall on hugin [23/tcp] \| Rule: UFW \| SPT: 28657 \| TTL: 43 \| LEN: 60 \| TOS: 0x04 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
🇧🇾 stroytrest	2026-09-14 21:54:51 (1 week ago)	2026-09-15T00:54:50.496038+03:00 gate kernel: [1184065.841049] nftables: JAIL-TELNET IN=wan OUT= MAC ... show more 2026-09-15T00:54:50.496038+03:00 gate kernel: [1184065.841049] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=120.221.11.0 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=24262 DF PROTO=TCP SPT=50106 DPT=23 WINDOW=14120 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 TPI-Abuse	2026-08-26 11:41:21 (1 month ago)	(mod_security) mod_security (id:210350) triggered by 120.221.11.0 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 120.221.11.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 07:41:15.349561 2026] [security2:error] [pid 11364:tid 11364] [client 120.221.11.0:24190] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|borzoi-color.batw.net\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "borzoi-color.batw.net"] [uri "/Color_discussion.html"] [unique_id "ao7Q27FoekiCMUUCbWXqVAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 PetePK	2026-08-19 20:29:06 (1 month ago)	Probed 1 time(s): TCP/23	Port Scan
🇺🇸 xmission.com	2026-08-17 21:29:54 (1 month ago)	Blocked by UFW (TCP on 23) Source port: 47411 TTL: 40 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 47411 TTL: 40 Packet length: 60 TOS: 0x08 This report (for 120.221.11.0) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇺🇸 xmission.com	2026-08-16 17:38:24 (1 month ago)	Blocked by UFW (TCP on 23) Source port: 39210 TTL: 38 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 39210 TTL: 38 Packet length: 60 TOS: 0x08 This report (for 120.221.11.0) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇦🇺 PetePK	2026-08-16 14:29:04 (1 month ago)	Probed 1 time(s): TCP/23	Port Scan
🇳🇵 radheykrishna.com.np	2026-08-15 19:00:51 (1 month ago)	Aug 16 00:45:50 kernel: [536581.474430] [UFW BLOCK] IN=ens160 OUT= SRC=120.221.11.0 LEN=60 TOS=0x00 ... show more Aug 16 00:45:50 kernel: [536581.474430] [UFW BLOCK] IN=ens160 OUT= SRC=120.221.11.0 LEN=60 TOS=0x00 PREC=0x00 TTL=39 ID=49527 DF PROTO=TCP SPT=2870 DPT=23 WINDOW=14600 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-08-15 04:23:48 (1 month ago)	Blocked by UFW (TCP on 23) Source port: 62772 TTL: 38 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 62772 TTL: 38 Packet length: 60 TOS: 0x08 This report (for 120.221.11.0) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇨🇦 DRI	2026-08-14 12:53:40 (1 month ago)	Unsolicited TCP traffic on Honeypot, srcport=37152 dstport=23	Port Scan Hacking
🇦🇷 Bruno	2026-08-14 02:36:13 (1 month ago)	Port Scanner: 120.221.11.0	Port Scan

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.77.252.84

🇳🇱 213.177.179.109

🇳🇱 204.76.203.4

🇺🇸 195.184.76.181

🇺🇸 167.71.240.77

🇺🇸 65.49.1.97

🇯🇵 2400:8902::f03c:92ff:fefb:b436

🇧🇦 213.91.83.105

🇫🇷 176.31.139.11

🇸🇬 168.144.106.252

🇹🇼 165.154.132.96

🇺🇸 152.32.207.179

🇻🇳 115.75.98.32

🇫🇷 88.175.96.93

🇫🇷 85.69.52.84

🇺🇦 77.239.164.86

🇳🇱 62.221.216.158

🇺🇸 45.79.168.172

🇮🇩 34.50.66.109

🇮🇳 2401:4900:1d4c:f298:a119:63bc:4f35:1e1f