JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.229.113.141

120.229.113.141 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 5%: ?

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.229.113.141

Whois 120.229.113.141

IP Abuse Reports for 120.229.113.141:

This IP address has been reported a total of 8 times from 2 distinct sources. 120.229.113.141 was first reported on August 10th 2022, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-09 09:13:13 (1 day ago)	(mod_security) mod_security (id:210831) triggered by 120.229.113.141 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 120.229.113.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 05:13:04.910751 2026] [security2:error] [pid 15212:tid 15212] [client 120.229.113.141:24487] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.heathersheels.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.heathersheels.com"] [uri "/"] [unique_id "ak9mIDT1KhF3OIqfm24wzAAAAAs"], referer: http://www.heathersheels.com show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-04 00:06:30 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 120.229.113.141 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 120.229.113.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 20:06:21.591712 2026] [security2:error] [pid 20686:tid 20686] [client 120.229.113.141:24568] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.makegoodsausage.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.makegoodsausage.com"] [uri "/"] [unique_id "akhOfUi8P7Gxw4NOWfkkZQAAAB4"], referer: http://www.makegoodsausage.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-03 22:48:30 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 120.229.113.141 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 120.229.113.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 18:48:24.968249 2026] [security2:error] [pid 32070:tid 32070] [client 120.229.113.141:24651] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.firstlivingcell.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.firstlivingcell.com"] [uri "/"] [unique_id "akg8OBxZACU2uM-R5h2QvgAAAAw"], referer: http://www.firstlivingcell.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 20:52:17 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 120.229.113.141 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 120.229.113.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 16:52:10.291877 2026] [security2:error] [pid 1106:tid 1106] [client 120.229.113.141:24644] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|savoiapower.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "savoiapower.com"] [uri "/"] [unique_id "akQsei7qRZKj3V2sMTgOmQAAABo"], referer: http://savoiapower.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-10 00:11:46 (5 months ago)	(mod_security) mod_security (id:210831) triggered by 120.229.113.141 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 120.229.113.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 19:11:38.900941 2026] [security2:error] [pid 957869:tid 957881] [client 120.229.113.141:27994] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.varmouries.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.varmouries.com"] [uri "/index.html"] [unique_id "aYp3uti5iPpcoi3ZjnfluAAAAEo"], referer: http://www.varmouries.com/index.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 03:14:08 (5 months ago)	(mod_security) mod_security (id:210831) triggered by 120.229.113.141 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 120.229.113.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 08 22:14:01.359608 2026] [security2:error] [pid 21395:tid 21395] [client 120.229.113.141:28082] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.pkmachine.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pkmachine.com"] [uri "/"] [unique_id "aYlQ-dWcq-j-uxFkdmtZ9gAAAAQ"], referer: http://www.pkmachine.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-07 22:58:41 (5 months ago)	(mod_security) mod_security (id:210831) triggered by 120.229.113.141 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 120.229.113.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 07 17:58:35.580290 2026] [security2:error] [pid 25412:tid 25412] [client 120.229.113.141:28105] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.raintechgutters.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.raintechgutters.com"] [uri "/"] [unique_id "aYfDm9ZfU44ievFjXdQ3YwAAAAA"], referer: https://www.raintechgutters.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 IrisFlower	2022-08-10 06:55:15 (3 years ago)	Unauthorized connection attempt detected from IP address 120.229.113.141 to port 443 [J]	Port Scan Hacking

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.170

🇺🇸 162.216.149.169

🇳🇱 81.19.208.92

🇯🇲 67.213.147.34

🇺🇸 207.90.244.19

🇺🇸 205.210.31.38

🇩🇪 193.124.20.233

🇧🇷 177.137.85.36

🇩🇪 167.94.146.33

🇺🇸 72.240.125.133

🇬🇧 37.10.113.215

🇧🇪 34.156.108.143

🇺🇸 20.75.217.64

🇬🇧 5.252.83.13

🇧🇷 206.0.91.91

🇧🇪 198.235.24.248

🇧🇪 198.235.24.175

🇬🇧 193.32.209.232

🇺🇸 172.253.196.87

🇹🇭 114.131.130.11