JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.224.42.108

120.224.42.108 was found in our database!

This IP was reported 2,748 times. Confidence of Abuse is 0%: ?

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS24444
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Jinan, Shandong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.224.42.108

Whois 120.224.42.108

IP Abuse Reports for 120.224.42.108:

This IP address has been reported a total of 2,748 times from 585 distinct sources. 120.224.42.108 was first reported on September 29th 2021, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 jonathanselea.se	2026-05-13 07:15:16 (1 month ago)	$f2bV_matches	SSH
🇳🇱 BellFix	2026-04-27 17:44:38 (2 months ago)	Fail2ban reported 120.224.42.108 for sshd	SSH Brute-Force
🇺🇸 Mcall5113	2026-04-12 08:35:13 (2 months ago)	Referenced as botnet peer/target in SSH honeypot command capture [US]	Port Scan
🇳🇿 sh97	2026-03-13 17:21:59 (3 months ago)	z393: SSH Brute Force from 120.224.42.108 at 2026-03-13 21:21:59 +04	Brute-Force SSH
🇸🇬 sh97	2026-03-07 08:54:13 (3 months ago)	SG03-ONI: SSH Brute Force from 120.224.42.108 at 2026-03-07 12:54:13 +04	Brute-Force SSH
🇸🇬 sh97	2026-03-07 08:14:12 (3 months ago)	SG03-ONI: SSH Brute Force from 120.224.42.108 at 2026-03-07 12:14:12 +04	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-03-05 20:11:54 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 helix	2026-03-05 08:00:08 (3 months ago)	Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ... show more Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts). show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-03-05 06:47:46 (3 months ago)	120.224.42.108 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Por ... show more 120.224.42.108 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Mar 5 00:34:18 17664 sshd[23790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.188.64.50 user=root Mar 5 00:34:20 17664 sshd[23790]: Failed password for root from 64.188.64.50 port 44988 ssh2 Mar 5 00:47:36 17664 sshd[24851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.224.42.108 user=root Mar 5 00:36:14 17664 sshd[23951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.188.64.50 user=root Mar 5 00:28:11 17664 sshd[23307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.188.64.50 user=root Mar 5 00:28:13 17664 sshd[23307]: Failed password for root from 64.188.64.50 port 53628 ssh2 IP Addresses Blocked: 64.188.64.50 (DE/Germany/-) show less	Brute-Force SSH
🇳🇱 donarev419	2026-03-05 06:41:32 (3 months ago)	Port scan detected on port 2222 (connection without data transfer)	Port Scan
🇺🇸 Bankbook8585	2026-03-05 05:57:25 (3 months ago)	T-Pot honeypot \| Cowrie SSH/Telnet honeypot: cowrie.login.failed user=root	Brute-Force SSH
🇸🇬 sh97	2026-03-05 05:37:53 (3 months ago)	SG05-ON: SSH Brute Force from 120.224.42.108 at 2026-03-05 11:07:53 IST	Brute-Force SSH
🇭🇺 tokyohost.eu	2026-03-05 05:26:35 (3 months ago)	Mar 5 06:26:27 node1 sshd[3894861]: Failed password for root from 120.224.42.108 port 33346 ssh2 Ma ... show more Mar 5 06:26:27 node1 sshd[3894861]: Failed password for root from 120.224.42.108 port 33346 ssh2 Mar 5 06:26:32 node1 sshd[3897958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.224.42.108 user=root Mar 5 06:26:34 node1 sshd[3897958]: Failed password for root from 120.224.42.108 port 38808 ssh2 ... show less	Brute-Force SSH
🇳🇿 sh97	2026-03-05 05:14:02 (3 months ago)	z393: SSH Brute Force from 120.224.42.108 at 2026-03-05 09:14:01 +04	Brute-Force SSH
🇺🇸 bigscoots.com	2026-03-05 04:38:48 (3 months ago)	(sshd) Failed SSH login from 120.224.42.108 (CN/China/-): 5 in the last 3600 secs; Ports: ; Directi ... show more (sshd) Failed SSH login from 120.224.42.108 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Mar 4 22:37:16 17993 sshd[27794]: Did not receive identification string from 120.224.42.108 port 43558 Mar 4 22:37:34 17993 sshd[27795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.224.42.108 user=root Mar 4 22:37:36 17993 sshd[27795]: Failed password for root from 120.224.42.108 port 45072 ssh2 Mar 4 22:38:36 17993 sshd[27803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.224.42.108 user=root Mar 4 22:38:38 17993 sshd[27803]: Failed password for root from 120.224.42.108 port 45148 ssh2 show less	Brute-Force SSH

Showing 1 to 15 of 2748 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇶 169.224.4.138

🇺🇸 146.190.69.108

🇨🇲 143.105.152.245

🇩🇪 128.14.225.164

🇺🇸 50.84.211.204

🇰🇪 41.90.209.5

🇺🇸 207.7.90.139

🇮🇩 182.8.65.73

🇸🇬 159.223.78.203

🇺🇸 147.185.132.151

🇯🇵 124.156.212.23

🇮🇳 103.181.40.51

🇳🇬 102.88.137.80

🇺🇸 98.88.221.220

🇽🇰 95.86.40.83

🇮🇪 52.169.217.131

🇳🇱 45.148.10.37

🇺🇸 44.92.99.34

🇬🇧 35.203.211.207

🇨🇷 186.177.88.21