JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

120.55.240.71

Activity Trending Down

Abuse Confidence Score

11% Caution

53 reports

23 reporters · latest 1 week ago

ISP: Aliyun Computing Co., LTD
Usage Type: Data Center/Web Hosting/Transit
ASN: AS37963
Domain Name: alibabacloud.com
Country: 🇨🇳 China
City: Hangzhou, Zhejiang

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

53 from 23 distinct reporters

First reported

April 11th 2025

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇩🇪 Germany 3 🇳🇱 Netherlands 2

Most common categories Bad Web Bot 3 DDoS Attack 2 Port Scan 2

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 GES	2026-10-31 14:18:05 UTC · (1 week ago)	Credential scanning on player_api.php (5 distinct logins in 120s). Auto-blocked by XUI Shield.	DDoS Attack Port Scan
🇩🇪 LRob	2026-10-23 11:48:07 UTC · (2 weeks ago)	Not following 301 redirects — wasted requests \| method: GET \| path: /wp-fi/wp-includes/css/dashicons.min.css \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 \| 2026-10-23 11:48 UTC	Bad Web Bot
🇳🇱 GES	2026-10-21 07:14:43 UTC · (2 weeks ago)	Credential scanning on player_api.php (5 distinct logins in 120s). Auto-blocked by XUI Shield.	DDoS Attack Port Scan
🇩🇪 LRob	2026-09-27 14:19:03 UTC · (1 month ago)	This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; bl ... show more This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. \| method: GET \| path: / \| 2026-09-27 14:19 UTC show less	Bad Web Bot
🇩🇪 LRob	2026-09-25 16:26:34 UTC · (1 month ago)	This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; bl ... show more This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. \| method: GET \| path: / \| 2026-09-25 16:26 UTC show less	Bad Web Bot
🇹🇷 neron	2026-08-15 23:06:48 UTC · (2 months ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 dtorrer	2026-07-29 00:58:13 UTC · (3 months ago)	Client attempted to submit spam on a website post.	Blog Spam
🇹🇷 neron	2026-07-28 22:19:38 UTC · (3 months ago)	CrowdSec blocked: http:exploit detected via OPNsense firewall	Hacking Web App Attack
🇺🇸 cwytech	2026-06-21 08:23:59 UTC · (4 months ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/wordpress-geofence-sus.	Bad Web Bot Web App Attack
🇮🇹 Progetto1	2026-06-18 00:40:03 UTC · (4 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇮🇹 Progetto1	2026-06-08 01:40:02 UTC · (5 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇫🇷 ✨	2026-05-27 01:03:20 UTC · (5 months ago)	Domain : mrara.org Rule : xmlrpc 2026-05-27 00:47:16 *hidden-privacy* GET /xmlrpc.php - 80 - 120.55.240.71 HTTP/1.0 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 YaBrowser/26.3.0.0 Safari/537.36 ... show more Domain : mrara.org Rule : xmlrpc 2026-05-27 00:47:16 *hidden-privacy* GET /xmlrpc.php - 80 - 120.55.240.71 HTTP/1.0 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 YaBrowser/26.3.0.0 Safari/537.36 http://www.mrara.org/ www.mrara.org 404 5 0 1455 644 231 - - show less	Web App Attack
🇨🇦 Ashgrinder_00013	2026-04-28 13:40:00 UTC · (6 months ago)	inout; Ports: *; Direction: 1; Trigger: (Web_Vulnerability_Scan) LABEL: Web_Vulnerability_Scan \| DESC: ALERT:_Bot_scanning_for_web_vulnerabilities_on_Port_80 120.55.240.71 (CN/China/-): 1 in the last 3600 secs; Logs:	Port Scan
🇸🇬 pusathosting.com	2026-04-21 22:21:03 UTC · (6 months ago)	24ds22 bruteforce	Brute-Force Web App Attack
🇸🇬 pusathosting.com	2026-04-18 04:00:11 UTC · (6 months ago)	24ds22 bruteforce	Brute-Force Web App Attack

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 195.184.76.197

🇲🇩 89.34.67.72

🇰🇷 43.133.246.218

🇧🇪 35.210.178.145

🇺🇸 212.119.40.180

🇷🇺 185.219.41.236

🇳🇱 185.45.193.187

🇸🇬 175.156.127.110

🇺🇸 128.90.113.88

🇹🇼 34.80.176.118

🇸🇬 8.222.244.154

🇨🇴 209.14.118.226

🇲🇽 187.189.33.14

🇦🇷 181.46.230.216

🇳🇱 85.11.167.7

🇬🇧 78.153.140.148

🇳🇱 77.239.124.63

🇩🇪 63.179.48.75

🇸🇬 47.79.200.249

🇧🇪 34.78.49.147