JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.235.150.182

120.235.150.182 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 60%: ?

60%

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.235.150.182

Whois 120.235.150.182

IP Abuse Reports for 120.235.150.182:

This IP address has been reported a total of 17 times from 12 distinct sources. 120.235.150.182 was first reported on December 28th 2022, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Duggy_Tuxy🧱	2026-07-06 21:17:05 (1 hour ago)	[DS-BLKS-PROD01] Blocked by SysWarden Firewall (Traffic from Blocked Country (GeoIP))	Port Scan
🇩🇪 femboy.cat	2026-07-06 07:16:11 (15 hours ago)	Port scan to tcp/11434 from 120.235.150.182	Brute-Force
Anonymous	2026-07-05 00:09:46 (1 day ago)	Jul 4 20:09:42 localhost kernel: [111555434.017185] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Jul 4 20:09:42 localhost kernel: [111555434.017185] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=120.235.150.182 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=235 ID=25356 PROTO=TCP SPT=15757 DPT=11434 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 4 20:09:42 localhost kernel: [111555434.017204] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=120.235.150.182 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=235 ID=25356 PROTO=TCP SPT=15757 DPT=11434 SEQ=3104583640 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 4 20:09:45 localhost kernel: [111555437.903554] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=120.235.150.182 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=235 ID=25356 PROTO=TCP SPT=15757 DPT=11434 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 4 20:09:45 localhost kernel: [111555437.903579] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=120.235.150.182 DST=[mungedIP2] L show less	Port Scan
🇩🇪 heyzg	2026-07-04 19:50:44 (2 days ago)	API LLMjacking (Ollama) (observed): 2 HTTP, 2s; attempted outbound scan & cryptomining; Ollama: /api ... show more API LLMjacking (Ollama) (observed): 2 HTTP, 2s; attempted outbound scan & cryptomining; Ollama: /api/tags,/api/chat show less	Hacking Web App Attack
Anonymous	2026-07-04 17:56:37 (2 days ago)	Blocked by UFW (TCP on 11434) Source port: 15757 TTL: 244 Packet length: 40 TOS: 0x14 This report ( ... show more Blocked by UFW (TCP on 11434) Source port: 15757 TTL: 244 Packet length: 40 TOS: 0x14 This report (for 120.235.150.182) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇭 pingusurmars	2026-07-04 09:22:47 (2 days ago)	Blocked by UFW on amperetwo [11434/tcp] Source port: 15757 TTL: 237 Packet length: 40 TOS: 0x08 Thi ... show more Blocked by UFW on amperetwo [11434/tcp] Source port: 15757 TTL: 237 Packet length: 40 TOS: 0x08 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Duggy_Tuxy🧱	2026-07-02 18:05:25 (4 days ago)	[DS-BLKS-PROD01] Blocked by SysWarden Firewall (Traffic from Blocked Country (GeoIP))	Port Scan
🇩🇪 acadeova	2026-07-02 08:45:40 (4 days ago)	Blocked by UFW on vps4 [11434/tcp] Source port: 15757 TTL: 241 Packet length: 40 TOS: 0x08 This rep ... show more Blocked by UFW on vps4 [11434/tcp] Source port: 15757 TTL: 241 Packet length: 40 TOS: 0x08 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 LotPhantom	2026-07-01 21:12:45 (5 days ago)	2026-07-01T21:12:45.644938+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-07-01T21:12:45.644938+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=120.235.150.182 DST=157.230.217.55 LEN=40 TOS=0x00 PREC=0x00 TTL=229 ID=21243 PROTO=TCP SPT=15757 DPT=11434 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇯🇵 Execoop	2026-06-30 18:31:46 (6 days ago)	API honeypot \| LLMjacking (Ollama) \| 3 HTTP, 14.3m \| tactics: outbound scan, cryptomining \| Ollama: ... show more API honeypot \| LLMjacking (Ollama) \| 3 HTTP, 14.3m \| tactics: outbound scan, cryptomining \| Ollama: /api/tags,/api/chat show less	Hacking Web App Attack
🇯🇵 jay hung	2026-06-30 10:07:11 (6 days ago)	2026-06-30T10:07:10.320174+00:00 quarktech kernel: [1458686.552961] [UFW BLOCK] IN=eth0 OUT= MAC=22: ... show more 2026-06-30T10:07:10.320174+00:00 quarktech kernel: [1458686.552961] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=120.235.150.182 DST=172.237.20.248 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=56303 PROTO=TCP SPT=9984 DPT=11434 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇨🇭 pingusurmars	2026-06-30 06:57:05 (6 days ago)	Blocked by UFW on amperetwo [11434/tcp] Source port: 9984 TTL: 241 Packet length: 40 TOS: 0x08 This ... show more Blocked by UFW on amperetwo [11434/tcp] Source port: 9984 TTL: 241 Packet length: 40 TOS: 0x08 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 LotPhantom	2026-06-28 10:51:33 (1 week ago)	2026-06-28T10:50:51.872697+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-06-28T10:50:51.872697+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=120.235.150.182 DST=157.230.217.55 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=9633 PROTO=TCP SPT=9984 DPT=11434 WINDOW=1024 RES=0x00 SYN URGP=0 2026-06-28T10:50:55.860146+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=120.235.150.182 DST=157.230.217.55 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=9633 PROTO=TCP SPT=9984 DPT=11434 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇺🇸 heyzg	2026-06-27 17:37:06 (1 week ago)	API honeypot \| LLMjacking (Ollama) \| 2 HTTP, 23s \| tactics: outbound scan, cryptomining \| Ollama: /a ... show more API honeypot \| LLMjacking (Ollama) \| 2 HTTP, 23s \| tactics: outbound scan, cryptomining \| Ollama: /api/tags,/api/chat show less	Hacking Web App Attack
🇺🇸 heyzg	2026-06-27 17:22:04 (1 week ago)	API LLMjacking (Ollama) (observed): 2 HTTP, 23s; attempted outbound scan & cryptomining; Ollama: /ap ... show more API LLMjacking (Ollama) (observed): 2 HTTP, 23s; attempted outbound scan & cryptomining; Ollama: /api/tags,/api/chat show less	Hacking Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.221

🇹🇼 114.35.131.235

🇯🇵 107.155.15.8

🇳🇱 45.148.10.157

🇧🇷 4.228.106.19

🇦🇱 185.80.227.49

🇨🇳 119.249.100.107

🇫🇷 108.61.209.179

🇩🇪 64.89.163.130

🇬🇧 35.203.211.185

🇮🇪 20.238.100.89

🇨🇳 220.250.52.75

🇧🇷 191.9.124.218

🇳🇱 167.71.12.100

🇩🇪 95.90.13.168

🇸🇬 45.78.201.248

🇲🇴 60.246.71.4

🇺🇸 12.63.250.10

🇺🇸 151.240.47.96

🇻🇳 123.25.115.189