JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.211.194.65

120.211.194.65 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 4%: ?

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS24547
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.211.194.65

Whois 120.211.194.65

IP Abuse Reports for 120.211.194.65:

This IP address has been reported a total of 7 times from 2 distinct sources. 120.211.194.65 was first reported on June 11th 2025, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-12 03:56:20 (11 hours ago)	(mod_security) mod_security (id:210831) triggered by 120.211.194.65 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 120.211.194.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 23:56:15.562045 2026] [security2:error] [pid 10202:tid 10202] [client 120.211.194.65:4523] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.sparler.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.sparler.com"] [uri "/"] [unique_id "aiuDX5L7c45fal18JkeKjQAAAAc"], referer: http://www.sparler.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 22:17:08 (3 months ago)	(mod_security) mod_security (id:210831) triggered by 120.211.194.65 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 120.211.194.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 17:17:03.463635 2026] [security2:error] [pid 18161:tid 18161] [client 120.211.194.65:15510] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|female.bodybuildbid.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "female.bodybuildbid.com"] [uri "/"] [unique_id "aZY6X7W47sWIFxdHKoRYygAAABc"], referer: http://female.bodybuildbid.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-16 03:19:01 (3 months ago)	(mod_security) mod_security (id:210831) triggered by 120.211.194.65 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 120.211.194.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 22:18:56.024199 2026] [security2:error] [pid 21353:tid 21353] [client 120.211.194.65:15519] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.urie.to\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.urie.to"] [uri "/"] [unique_id "aZKMoKL9igw9AZ9EHbTKOQAAAAs"], referer: http://www.urie.to/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-02-14 22:53:50 (3 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.211.194.65 2026-02-14 0 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.211.194.65 2026-02-14 04:01:00 /robots.txt show less	Web App Attack
🇨🇳 ThreatBook.io	2025-11-17 22:59:21 (6 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.211.194.65 2025-11-17 1 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.211.194.65 2025-11-17 11:32:08 /robots.txt show less	Web App Attack
🇨🇳 ThreatBook.io	2025-06-17 23:03:47 (11 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.211.194.65 2025-06-17 0 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.211.194.65 2025-06-17 05:37:44 / show less	Web App Attack
🇨🇳 ThreatBook.io	2025-06-11 23:03:33 (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.211.194.65 2025-06-11 0 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.211.194.65 2025-06-11 01:31:56 /sitemap.xml show less	Web App Attack

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 122.114.69.235

🇩🇪 87.106.245.167

🇭🇰 123.58.213.128

🇭🇰 123.58.212.28

🇷🇴 89.40.72.9

🇳🇱 88.151.32.22

🇳🇱 68.66.251.43

🇭🇰 43.132.181.177

🇺🇸 40.80.207.25

🇰🇷 14.49.178.90

🇺🇸 3.209.174.110

🇨🇱 190.22.7.212

🇺🇸 174.162.12.25

🇺🇸 170.106.37.134

🇺🇸 150.107.38.69

🇺🇸 47.253.149.245

🇪🇬 41.233.168.142

🇨🇳 39.152.203.150

🇩🇪 216.26.252.9

🇩🇪 213.209.159.227