JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.231.44.200

120.231.44.200 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 13%: ?

13%

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.231.44.200

Whois 120.231.44.200

IP Abuse Reports for 120.231.44.200:

This IP address has been reported a total of 9 times from 5 distinct sources. 120.231.44.200 was first reported on September 1st 2024, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 AS213449.net	2026-06-03 03:49:24 (2 days ago)	06/03/2026-05:49:21.439685 src=120.231.44.200 dst=89.144.63.14:1433 proto=6 msg=ET SCAN Suspicious i ... show more 06/03/2026-05:49:21.439685 src=120.231.44.200 dst=89.144.63.14:1433 proto=6 msg=ET SCAN Suspicious inbound to MSSQL port 1433 show less	SQL Injection
🇩🇪 AS213449.net	2026-06-03 02:43:14 (2 days ago)	06/03/2026-04:43:10.729373 src=120.231.44.200 dst=89.144.63.243:1433 proto=6 msg=ET SCAN Suspicious ... show more 06/03/2026-04:43:10.729373 src=120.231.44.200 dst=89.144.63.243:1433 proto=6 msg=ET SCAN Suspicious inbound to MSSQL port 1433 show less	SQL Injection
🇩🇪 AS213449.net	2026-06-03 01:51:27 (2 days ago)	06/03/2026-03:51:23.913412 src=120.231.44.200 dst=89.144.63.160:1433 proto=6 msg=ET SCAN Suspicious ... show more 06/03/2026-03:51:23.913412 src=120.231.44.200 dst=89.144.63.160:1433 proto=6 msg=ET SCAN Suspicious inbound to MSSQL port 1433 show less	SQL Injection
🇩🇪 AS213449.net	2026-06-03 01:30:40 (2 days ago)	06/03/2026-03:30:37.304400 src=120.231.44.200 dst=89.144.63.142:1433 proto=6 msg=ET SCAN Suspicious ... show more 06/03/2026-03:30:37.304400 src=120.231.44.200 dst=89.144.63.142:1433 proto=6 msg=ET SCAN Suspicious inbound to MSSQL port 1433 show less	SQL Injection
🇩🇪 AS213449.net	2026-06-03 00:43:21 (2 days ago)	06/03/2026-02:43:18.145642 src=120.231.44.200 dst=89.144.63.53:1433 proto=6 msg=ET SCAN Suspicious i ... show more 06/03/2026-02:43:18.145642 src=120.231.44.200 dst=89.144.63.53:1433 proto=6 msg=ET SCAN Suspicious inbound to MSSQL port 1433 show less	SQL Injection
🇩🇪 phil2k	2026-05-31 07:09:38 (5 days ago)	fail2ban:firewall:2026-05-31T09:09:34.988448+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ... show more fail2ban:firewall:2026-05-31T09:09:34.988448+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=120.231.44.200 DST=<ANONYMIZED_IP> LEN=52 TOS=0x00 PREC=0x00 TTL=38 ID=15853 DF PROTO=TCP SPT=58328 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 2026-05-31T09:09:35.721331+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=120.231.44.200 DST=<ANONYMIZED_IP> LEN=52 TOS=0x00 PREC=0x00 TTL=40 ID=16056 DF PROTO=TCP SPT=38841 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0 show less	DDoS Attack Port Scan Brute-Force
🇺🇸 TPI-Abuse	2026-02-18 21:36:44 (3 months ago)	(mod_security) mod_security (id:210831) triggered by 120.231.44.200 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 120.231.44.200 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 16:36:39.600557 2026] [security2:error] [pid 11163:tid 11163] [client 120.231.44.200:26823] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.beach98.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.beach98.com"] [uri "/index.html"] [unique_id "aZYw58QMsy1i60wRzYv9eAAAABQ"], referer: http://www.beach98.com/index.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Cyber Crusader	2025-08-09 02:23:43 (9 months ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇸🇬 Charles	2024-09-01 06:55:28 (1 year ago)	120.231.44.200 - - [01/Sep/2024:14:54:05 +0800] "GET /osc1/product_reviews.php/cPath/36/products_id/ ... show more 120.231.44.200 - - [01/Sep/2024:14:54:05 +0800] "GET /osc1/product_reviews.php/cPath/36/products_id/87/language/cn/osCsid/rust4ht7gkvvu6t7fr0v27jcj5 HTTP/1.1" 200 8308 "-" "Opera/8.73.(X11; Linux x86_64; ar-OM) Presto/2.9.160 Version/12.00" ... show less	Web Spam Email Spam Brute-Force Bad Web Bot Web App Attack SSH

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.60

🇰🇷 112.216.129.27

🇺🇸 107.173.216.190

🇷🇺 95.47.246.223

🇷🇺 89.23.113.208

🇺🇸 68.42.37.130

🇰🇷 61.76.38.54

🇭🇰 2602:80d:1004::2a

🇧🇷 205.210.31.211

🇷🇺 194.135.98.202

🇩🇪 167.94.146.42

🇺🇸 147.182.183.153

🇨🇳 124.174.129.198

🇲🇩 89.35.14.14

🇩🇰 85.203.47.216

🇽🇰 84.22.62.247

🇩🇪 46.224.234.158

🇳🇱 45.148.10.152

🇭🇰 45.78.26.55

🇬🇧 2.103.217.119