JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.224.66.44

120.224.66.44 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 39%: ?

39%

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS24444
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Jinan, Shandong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.224.66.44

Whois 120.224.66.44

IP Abuse Reports for 120.224.66.44:

This IP address has been reported a total of 16 times from 10 distinct sources. 120.224.66.44 was first reported on May 14th 2021, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 sonot	2026-07-24 18:28:03 (5 days ago)	Blocked by UFW on tunneluk01 [6007/tcp] \| SPT: 40625 \| TTL: 234 \| LEN: 40 \| TOS: 0x00 • Reported by: ... show more Blocked by UFW on tunneluk01 [6007/tcp] \| SPT: 40625 \| TTL: 234 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-07-24 17:33:12 (5 days ago)	Blocked by UFW on LAXHH [6015/tcp] \| SPT: 40625 \| TTL: 237 \| LEN: 40 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [6015/tcp] \| SPT: 40625 \| TTL: 237 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 phil2k	2026-07-24 13:27:41 (5 days ago)	Firewall: Within 2026-07-23 23:04:04 - 2026-07-24 09:17:48 CEST(+0200) identified: port scan from 12 ... show more Firewall: Within 2026-07-23 23:04:04 - 2026-07-24 09:17:48 CEST(+0200) identified: port scan from 120.224.66.44 on uncommon port/s: 6012(tcp:6012),6005(x11-5),6014(tcp:6014) (3 trials) Fail2ban: Within 2026-07-23 23:04:04 - 2026-07-24 09:17:49 CEST(+0200) banned: 5 times by fail2ban[firewall]; 5 times by fail2ban[recidive] show less	Port Scan
🇬🇧 kiwi.network	2026-07-24 11:14:15 (5 days ago)	Incessant port scan:	Port Scan Hacking Exploited Host
🇩🇪 phil2k	2026-07-24 07:17:51 (5 days ago)	fail2ban:firewall:2026-07-24T07:23:02.312890+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-07-24T07:23:02.312890+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=120.224.66.44 DST=<ANONYMIZED_IP> LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=56651 PROTO=TCP SPT=40625 DPT=6012 WINDOW=1024 RES=0x00 SYN URGP=0 2026-07-24T09:17:48.559931+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=120.224.66.44 DST=<ANONYMIZED_IP> LEN=40 TOS=0x00 PREC=0x00 TTL=228 ID=9203 PROTO=TCP SPT=40625 DPT=6005 WINDOW=1024 RES=0x00 SYN URGP=0 show less	DDoS Attack Port Scan
🇺🇸 Axel	2026-07-24 04:53:27 (5 days ago)	Blocked by UFW on LAXHH [6020/tcp] \| SPT: 40625 \| TTL: 237 \| LEN: 40 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [6020/tcp] \| SPT: 40625 \| TTL: 237 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 polycoda	2026-07-23 14:29:15 (6 days ago)	📡 Port scan	Hacking Web App Attack
🇺🇸 Axel	2026-07-23 12:43:17 (6 days ago)	Blocked by UFW on LAXHH [6011/tcp] \| SPT: 40625 \| TTL: 237 \| LEN: 40 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [6011/tcp] \| SPT: 40625 \| TTL: 237 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 pengpeng	2026-07-18 12:57:08 (1 week ago)	monitor: on VM-0-7-ubuntu \| port: 6720 \| ttl: 240 script: github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
Anonymous	2025-12-08 09:03:53 (7 months ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇺🇸 TPI-Abuse	2025-09-05 21:36:34 (10 months ago)	(mod_security) mod_security (id:210350) triggered by 120.224.66.44 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 120.224.66.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 05 17:36:26.149096 2025] [security2:error] [pid 25741:tid 25741] [client 120.224.66.44:20726] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.renju.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/tournament/74/game/2317/"] [unique_id "aLtX2qMMNSfJpyHPhGN_3gAAABY"], referer: https://www.renju.net/game/2317/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2024-11-25 11:02:49 (1 year ago)	Web attack	Bad Web Bot Web App Attack
🇿🇦 IrisFlower	2022-04-19 05:04:14 (4 years ago)	Unauthorized connection attempt detected from IP address 120.224.66.44 to port 443 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2021-12-15 11:04:08 (4 years ago)	Unauthorized connection attempt detected from IP address 120.224.66.44 to port 443 [J]	Port Scan Hacking
🇿🇦 IrisFlower	2021-05-14 10:53:13 (5 years ago)	Unauthorized connection attempt detected from IP address 120.224.66.44 to port 443 [J]	Port Scan Hacking

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 103.25.47.94

🇺🇸 2a09:bac5:a6c2:2773::3ee:79

🇧🇷 201.68.254.230

🇱🇹 195.238.126.14

🇻🇪 190.142.252.146

🇵🇰 182.181.211.223

🇺🇸 147.185.132.75

🇮🇩 117.53.45.180

🇨🇳 114.80.39.74

🇮🇩 103.190.62.5

🇳🇱 88.151.33.188

🇨🇳 60.166.82.112

🇨🇳 58.212.237.171

🇸🇬 45.78.204.246

🇨🇳 43.248.108.220

🇬🇧 35.203.211.194

🇨🇦 216.26.251.247

🇺🇸 185.117.225.98

🇿🇦 169.0.98.127

🇫🇮 147.185.133.134