JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.221.12.205

120.221.12.205 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 24%: ?

24%

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.221.12.205

Whois 120.221.12.205

IP Abuse Reports for 120.221.12.205:

This IP address has been reported a total of 19 times from 10 distinct sources. 120.221.12.205 was first reported on December 26th 2022, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 security.rdmc.fr	2026-09-02 03:45:41 (12 hours ago)	Port Scan Attack proto:TCP src:58657 dst:23	Port Scan
🇺🇸 Cyber Crusader	2026-08-29 08:48:05 (4 days ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇺🇸 xmission.com	2026-08-28 08:40:40 (5 days ago)	Blocked by UFW (TCP on 23) Source port: 60056 TTL: 39 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 60056 TTL: 39 Packet length: 60 TOS: 0x08 This report (for 120.221.12.205) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇺🇸 Cyber Crusader	2026-08-25 22:40:12 (1 week ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇷🇸 Scan	2025-10-06 03:03:03 (10 months ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2025-08-06 19:59:44 (1 year ago)	Infected user bad webscan	Exploited Host
🇳🇱 Linuxmalwarehuntingnl	2024-07-04 07:16:19 (2 years ago)	Unauthorized connection attempt	Brute-Force
Anonymous	2024-06-21 15:38:35 (2 years ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 bigscoots.com	2024-05-29 07:08:30 (2 years ago)	120.221.12.205 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Por ... show more 120.221.12.205 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 29 02:08:18 16440 sshd[7740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.221.12.205 user=root May 29 02:08:20 16440 sshd[7740]: Failed password for root from 120.221.12.205 port 44055 ssh2 May 29 01:50:46 16440 sshd[6372]: Failed password for root from 122.4.64.120 port 24811 ssh2 May 29 01:50:50 16440 sshd[6380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.128.205.58 user=root May 29 01:50:52 16440 sshd[6380]: Failed password for root from 113.128.205.58 port 47550 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇳🇱 Savvii	2024-05-28 17:28:21 (2 years ago)	126 attempts against mh-ssh on kubes-dev04	Brute-Force SSH
Anonymous	2024-05-27 07:25:38 (2 years ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇷🇸 Scan	2024-05-26 09:26:35 (2 years ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 bigscoots.com	2024-05-24 08:39:53 (2 years ago)	120.221.12.205 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Por ... show more 120.221.12.205 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 24 03:39:34 16334 sshd[19537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.175.104.5 user=root May 24 03:39:35 16334 sshd[19537]: Failed password for root from 222.175.104.5 port 56638 ssh2 May 24 03:39:37 16334 sshd[19539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.221.12.205 user=root May 24 03:39:39 16334 sshd[19539]: Failed password for root from 120.221.12.205 port 32932 ssh2 May 24 03:39:41 16334 sshd[19541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.128.205.76 user=root IP Addresses Blocked: 222.175.104.5 (CN/China/-) show less	Brute-Force SSH
Anonymous	2024-05-04 09:56:28 (2 years ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇷🇸 Scan	2024-04-20 02:41:43 (2 years ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.79

🇷🇴 193.46.255.86

🇻🇳 103.237.144.204

🇸🇪 89.233.202.252

🇺🇸 75.65.169.93

🇺🇸 34.138.198.120

🇧🇷 16.5.0.244

🇨🇳 223.220.120.141

🇨🇳 220.180.166.214

🇮🇳 171.76.18.19

🇺🇸 165.154.162.102

🇮🇹 151.83.51.16

🇮🇩 103.99.214.214

🇳🇱 80.82.77.33

🇮🇳 66.116.225.6

🇷🇺 5.255.231.120

🇺🇸 170.23.20.167

🇺🇸 143.244.88.5

🇵🇰 59.103.230.194

🇦🇹 45.38.115.251