120.239.154.72

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
96 reports
47 reporters · latest 9 months ago
ISP
China Mobile Communications Corporation
Usage Type
Fixed Line ISP
ASN
AS9808
Domain Name
chinamobile.com
Country
🇨🇳 China
City
Guangzhou, Guangdong
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

120.239.154.72 has been reported 96 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
96 from 47 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/0
Brute-Force
Anonymous
SMTP brute force - auth failed
Brute-Force Exploited Host
🇩🇪 kkeyser
warning: unknown[120.239.154.72]: SASL LOGIN authentication failed: authentication failure
Brute-Force
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.239.154.72
SSH
🇹🇷 rtbh.com.tr
list.rtbh.com.tr report: tcp/0
Brute-Force
🇳🇱 Slartibartfast
SMTP Brute Force
Brute-Force
🇩🇪 MarkGGN
Brute-Force
🇬🇧 stom
2026-02-02T03:56:14.167372ls.fionamaguire-art.com postfix/smtps/smtpd[7477]: warning: unknown[120.239.154.72]: SASL LOGIN authentication failed: authentication failure ...
Email Spam Brute-Force
🇮🇩 xveil
2026-02-02T10:44:10.381496 mail-honeypot postfix/submission/smtpd[28076]: warning: unknown[120.239.154.72]: SASL LOGIN authentication failed: authentication failure ...
Brute-Force
Anonymous
SMTP brute force - auth failed
Brute-Force Exploited Host
🇭🇺 Lacika555
RdpGuard detected brute-force attempt on SMTP
Brute-Force
🇺🇸 chrisj
Brute-Force
🇮🇹 main.ows
Feb 1 05:38:29 main postfix/smtpd[626508]: warning: unknown[120.239.154.72]: SASL LOGIN authentication failed: authentication failure, sasl_username=info ...
Phishing Email Spam
🇷🇺 Kotiacat_one
2026-02-01T05:27:56.787679+03:00 kotia sshd-session[268590]: Invalid user Config from 120.239.154.72 port 58312 ...
Brute-Force SSH
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.239.154.72
SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 20.106.103.160
🇰🇷 220.116.117.213
🇺🇸 199.165.159.141
🇺🇸 184.105.139.79
🇺🇸 167.172.159.243
🇳🇱 167.99.34.208
🇩🇪 167.94.145.17
🇷🇴 92.118.39.56
🇮🇳 69.17.19.42
🇺🇸 68.183.104.154
🇨🇳 61.142.44.132
🇫🇷 51.255.192.15
🇺🇦 46.63.99.211
🇨🇱 45.232.176.215
🇹🇭 1.10.236.228
🇮🇳 223.237.178.184
🇳🇱 200.138.46.146
🇦🇷 179.60.228.74
🇺🇸 162.216.149.232
🇮🇳 139.59.86.13
feedback