JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.221.13.39

120.221.13.39 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 41%: ?

41%

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.221.13.39

Whois 120.221.13.39

IP Abuse Reports for 120.221.13.39:

This IP address has been reported a total of 12 times from 10 distinct sources. 120.221.13.39 was first reported on July 25th 2022, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 Block Rockin' Beats	2026-08-31 13:32:17 (3 hours ago)	Attempted connection to TCP port 23	Port Scan
🇺🇸 TPI-Abuse	2026-08-31 11:59:30 (5 hours ago)	(mod_security) mod_security (id:210831) triggered by 120.221.13.39 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.221.13.39 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 07:59:25.497077 2026] [security2:error] [pid 1587:tid 1587] [client 120.221.13.39:19967] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|engineeringarts.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "engineeringarts.com"] [uri "/"] [unique_id "apVsnXeAFY5J6EVM5Qq9-wAAABM"], referer: https://engineeringarts.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2026-08-30 08:21:53 (1 day ago)	Blocked by UFW (TCP on 23) Source port: 41962 TTL: 38 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 41962 TTL: 38 Packet length: 60 TOS: 0x08 This report (for 120.221.13.39) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇫🇷 Entalpi.net	2026-08-29 18:02:36 (1 day ago)	Tried to hit sensible closed port commonly used in attacks	Port Scan Hacking
🇺🇸 xmission.com	2026-08-28 04:52:12 (3 days ago)	Blocked by UFW (TCP on 23) Source port: 45420 TTL: 38 Packet length: 60 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 45420 TTL: 38 Packet length: 60 TOS: 0x08 This report (for 120.221.13.39) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
Anonymous	2026-08-20 08:42:02 (1 week ago)	Blocked by firewall on hugin [23/tcp] \| Rule: UFW \| SPT: 64793 \| TTL: 44 \| LEN: 60 \| TOS: 0x00 • Rep ... show more Blocked by firewall on hugin [23/tcp] \| Rule: UFW \| SPT: 64793 \| TTL: 44 \| LEN: 60 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
🇳🇱 Tsumugi Kotobuki	2026-08-18 05:28:52 (1 week ago)	Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 34 \| Len: 60B \| Win ... show more Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 34 \| Len: 60B \| Win: 14120(1) \| F2B/ufw-honeypot@2026-08-18T05:28:52Z show less	Port Scan Hacking
🇺🇸 xmission.com	2026-08-15 06:27:46 (2 weeks ago)	Blocked by UFW (TCP on 23) Source port: 8558 TTL: 38 Packet length: 60 TOS: 0x08 This report (for 1 ... show more Blocked by UFW (TCP on 23) Source port: 8558 TTL: 38 Packet length: 60 TOS: 0x08 This report (for 120.221.13.39) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
Anonymous	2025-08-05 18:12:12 (1 year ago)	Infected user bad webscan	Exploited Host
🇨🇳 ThreatBook.io	2025-06-04 00:41:01 (1 year ago)	ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/120.221.13.39 2025- ... show more ThreatBook Intelligence: Scanner,Zombie more details on https://threatbook.io/ip/120.221.13.39 2025-06-03 04:19:51 /robots.txt show less	Web App Attack
🇷🇸 Scan	2024-06-16 10:41:16 (2 years ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇿🇦 IrisFlower	2022-07-25 00:30:43 (4 years ago)	Unauthorized connection attempt detected from IP address 120.221.13.39 to port 1433 [J]	Port Scan Hacking

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.245.92.234

🇧🇷 152.243.213.247

🇩🇪 94.130.18.222

🇺🇸 170.203.24.56

🇨🇳 120.48.39.220

🇧🇬 79.124.62.178

🇫🇷 77.239.124.177

🇩🇪 46.236.203.226

🇺🇸 216.25.89.83

🇭🇰 199.45.155.25

🇳🇱 195.178.110.217

🇫🇷 185.177.72.24

🇨🇳 119.48.168.41

🇫🇷 91.231.89.8

🇺🇸 68.7.97.164

🇺🇸 18.212.208.154

🇧🇷 16.5.0.254

🇺🇸 189.81.4.119

🇩🇪 159.69.179.27

🇮🇳 115.240.253.10