JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.228.223.50

120.228.223.50 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 36%: ?

36%

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS56047
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.228.223.50

Whois 120.228.223.50

IP Abuse Reports for 120.228.223.50:

This IP address has been reported a total of 12 times from 8 distinct sources. 120.228.223.50 was first reported on September 25th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-10-13 05:49:51 (2 weeks ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /wp-content/plugins/all-in-one-w ... show more Not following 301 redirects — wasted requests \| method: GET \| path: /wp-content/plugins/all-in-one-wp-migration/readme.txt, /wp-content/plugins/wordfence/readme.txt \| ua: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11 \| 2026-10-13 05:49 UTC show less	Bad Web Bot
🇯🇵 weils.net	2026-10-11 02:49:51 (2 weeks ago)	2026-10-11 10:49:51(GMT+8) - /system1.php	Bad Web Bot
🇵🇱 sefinek.net	2026-10-10 20:08:58 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action: MANAGED_CHALLENGE \| Protocol: HTTP/1.1 (GET) \| Endpoint: /a.php \| UA: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 ipblock.com	2026-10-10 14:55:00 (2 weeks ago)	IPBlock protected site ID [3390-wh]. Exploit request, vulnerability scanner.	Hacking Bad Web Bot Web App Attack
🇺🇸 IndigoRidge	2026-10-05 18:05:14 (3 weeks ago)	120.228.223.50 - - [05/Oct/2026:14:05:08 -0400] "GET /wp-content/plugins/wp-database-backup/readme.t ... show more 120.228.223.50 - - [05/Oct/2026:14:05:08 -0400] "GET /wp-content/plugins/wp-database-backup/readme.txt HTTP/1.1" 404 4841 "http://www.sellinglakewateree.com/wp-content/plugins/wp-database-backup/readme.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11" 120.228.223.50 - - [05/Oct/2026:14:05:09 -0400] "GET /wp-content/plugins/timber-library/readme.txt HTTP/1.1" 404 4841 "http://www.sellinglakewateree.com/wp-content/plugins/timber-library/readme.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11" 120.228.223.50 - - [05/Oct/2026:14:05:10 -0400] "GET /wp-content/plugins/embed-form/readme.txt HTTP/1.1" 404 4841 "http://www.sellinglakewateree.com/wp-content/plugins/embed-form/readme.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11" 120.228.223.50 - - [05/Oct/2026:14:05:10 -0400] "GET /wp-content/plugi ... show less	Web App Attack
🇩🇪 LRob	2026-10-05 06:02:12 (3 weeks ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /wp-content/plugins/wp-youtube-l ... show more Not following 301 redirects — wasted requests \| method: GET \| path: /wp-content/plugins/wp-youtube-lyte/readme.txt \| ua: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11 \| 2026-10-05 06:02 UTC show less	Bad Web Bot
🇩🇪 LRob	2026-10-02 12:02:31 (3 weeks ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /wp-content/themes/catch-box/sty ... show more Not following 301 redirects — wasted requests \| method: GET \| path: /wp-content/themes/catch-box/style.css, /wp-content/plugins/posts-in-page/readme.txt \| ua: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11 \| 2026-10-02 12:02 UTC show less	Bad Web Bot
🇲🇽 octageeks.com	2026-10-02 04:19:10 (3 weeks ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇩🇪 LRob	2026-10-01 18:27:46 (3 weeks ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /wp-content/themes/hitchcock/sty ... show more Not following 301 redirects — wasted requests \| method: GET \| path: /wp-content/themes/hitchcock/style.css \| ua: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11 show less	Bad Web Bot
Anonymous	2026-09-26 22:56:16 (1 month ago)	[ns3.backorder.gr] httpd-suspicious-path: sites=www.gosolar.gr; logs=/var/log/httpd/domains/gosolar. ... show more [ns3.backorder.gr] httpd-suspicious-path: sites=www.gosolar.gr; logs=/var/log/httpd/domains/gosolar.gr.log; samples=/wp-content/plugins/stream/readme.txt \| /wp-content/plugins/order-import-export-for-woocommerce/readme.txt \| /wp-content/plugins/site-reviews/readme.txt show less	Hacking Web App Attack
🇸🇪 vaia.cloud	2026-09-26 16:40:05 (1 month ago)	crowdsecurity/http-wordpress-scan	Brute-Force Web App Attack
🇺🇸 IndigoRidge	2026-09-25 07:16:35 (1 month ago)	120.228.223.50 - - [25/Sep/2026:03:16:19 -0400] "GET /wp-content/plugins/woocommerce-gateway-stripe/ ... show more 120.228.223.50 - - [25/Sep/2026:03:16:19 -0400] "GET /wp-content/plugins/woocommerce-gateway-stripe/readme.txt HTTP/1.1" 404 33931 "http://www.caarps.com/wp-content/plugins/woocommerce-gateway-stripe/readme.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11" 120.228.223.50 - - [25/Sep/2026:03:16:23 -0400] "GET /wp-content/plugins/contact-form-cfdb7/readme.txt HTTP/1.1" 404 33931 "http://www.caarps.com/wp-content/plugins/contact-form-cfdb7/readme.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11" 120.228.223.50 - - [25/Sep/2026:03:16:26 -0400] "GET /wp-content/plugins/the-events-calendar/readme.txt HTTP/1.1" 404 33931 "http://www.caarps.com/wp-content/plugins/the-events-calendar/readme.txt" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.97 Safari/537.11" 120.228.223.50 - - [25/Sep/2026:03:16:29 -0400] "GET /wp-cont ... show less	Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 187.110.238.50

🇷🇴 2.57.121.25

🇩🇪 2a01:4020:31:0:102::795

🇪🇸 217.154.180.145

🇷🇺 188.128.63.114

🇺🇸 100.50.17.159

🇳🇱 94.102.49.190

🇺🇸 50.6.200.164

🇳🇱 45.148.10.152

🇳🇱 31.77.13.178

🇩🇪 2a01:4020:31:0:102::5ea

🇦🇷 186.58.2.29

🇺🇦 178.54.158.71

🇺🇸 136.69.211.117

🇳🇬 102.88.137.145

🇸🇬 94.231.206.133

🇳🇱 77.67.26.136

🇺🇸 52.248.42.171

🇩🇪 2a01:4020:31:0:102::18e

🇲🇾 211.25.161.126