JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.229.212.95

120.229.212.95 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 5%: ?

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.229.212.95

Whois 120.229.212.95

IP Abuse Reports for 120.229.212.95:

This IP address has been reported a total of 13 times from 2 distinct sources. 120.229.212.95 was first reported on April 4th 2025, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-02 20:14:03 (13 hours ago)	(mod_security) mod_security (id:210831) triggered by 120.229.212.95 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 120.229.212.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 16:13:57.713001 2026] [security2:error] [pid 17244:tid 17244] [client 120.229.212.95:11848] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.synergystudios.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.synergystudios.org"] [uri "/"] [unique_id "apiDhQxbXZrPvB44Cc053gAAAAE"], referer: http://www.synergystudios.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 22:14:41 (2 days ago)	(mod_security) mod_security (id:210831) triggered by 120.229.212.95 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 120.229.212.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 18:14:33.664351 2026] [security2:error] [pid 5696:tid 5696] [client 120.229.212.95:6160] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.partybusesflint.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.partybusesflint.com"] [uri "/"] [unique_id "apX8yZU-9GOc7mKZC2VXugAAACY"], referer: http://www.partybusesflint.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-30 19:20:31 (3 days ago)	(mod_security) mod_security (id:210831) triggered by 120.229.212.95 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 120.229.212.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 15:20:25.475206 2026] [security2:error] [pid 1476:tid 1476] [client 120.229.212.95:6582] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.pbdot3.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pbdot3.com"] [uri "/"] [unique_id "apSCeXbfjXBH8YXLpUw2EwAAAAk"], referer: http://www.pbdot3.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-15 04:30:17 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 120.229.212.95 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 120.229.212.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 15 00:30:12.413962 2026] [security2:error] [pid 10409:tid 10409] [client 120.229.212.95:20372] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.eric-grant.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.eric-grant.com"] [uri "/"] [unique_id "alcM1FMl-jfaG-h7ybBtMAAAABU"], referer: http://www.eric-grant.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-13 14:25:18 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 120.229.212.95 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 120.229.212.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 10:25:10.266740 2026] [security2:error] [pid 5019:tid 5019] [client 120.229.212.95:1726] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|rokket.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "rokket.com"] [uri "/index.html"] [unique_id "alT1Rqd__m3LyvldJWkawQAAABM"], referer: http://rokket.com/index.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-09 00:04:21 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 120.229.212.95 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 120.229.212.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 20:04:14.710576 2026] [security2:error] [pid 15743:tid 15743] [client 120.229.212.95:19971] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.nashes.net\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.nashes.net"] [uri "/"] [unique_id "ak7lfqANfOWOVLPzrVU15QAAAAo"], referer: http://www.nashes.net/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-26 22:46:24 (2 months ago)	(mod_security) mod_security (id:210831) triggered by 120.229.212.95 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 120.229.212.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 18:46:16.928913 2026] [security2:error] [pid 14785:tid 14785] [client 120.229.212.95:32630] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.partyblockwedding.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.partyblockwedding.com"] [uri "/"] [unique_id "aj8BOKjEWcXe1xF-IunWtQAAAA0"], referer: http://www.partyblockwedding.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-01 21:08:50 (3 months ago)	(mod_security) mod_security (id:210831) triggered by 120.229.212.95 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 120.229.212.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 17:08:45.549295 2026] [security2:error] [pid 773:tid 773] [client 120.229.212.95:10258] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|ankitoner.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "ankitoner.com"] [uri "/index.htm"] [unique_id "ah303b45Mo8gXPqeDj_kiwAAAAw"], referer: http://ankitoner.com/index.htm show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-05-13 22:16:42 (3 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.229.212.95 2026-05 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.229.212.95 2026-05-13 12:16:42 /robots.txt show less	Web App Attack
🇨🇳 ThreatBook.io	2025-05-29 22:19:17 (1 year ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.229.212.95 2025-0 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.229.212.95 2025-05-29 08:26:32 /favicon.ico show less	Web App Attack
🇨🇳 ThreatBook.io	2025-05-06 22:15:37 (1 year ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.229.212.95 2025-0 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.229.212.95 2025-05-06 17:01:03 /static/img/facio.ico show less	Web App Attack
🇨🇳 ThreatBook.io	2025-05-05 22:12:20 (1 year ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.229.212.95 2025-0 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.229.212.95 2025-05-05 16:49:19 /robots.txt show less	Web App Attack
🇨🇳 ThreatBook.io	2025-04-04 22:15:12 (1 year ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.229.212.95 2025-0 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.229.212.95 2025-04-04 03:55:13 /config.json 2025-04-04 05:45:07 / 2025-04-04 07:21:36 /sitemap.xml show less	Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇱 185.80.227.45

🇺🇸 172.70.133.116

🇺🇸 172.70.133.115

🇻🇳 103.159.51.70

🇿🇼 102.177.72.174

🇸🇬 47.82.201.219

🇬🇧 45.133.173.204

🇺🇸 34.73.255.80

🇮🇳 203.115.98.138

🇸🇬 165.232.164.223

🇺🇸 162.158.152.23

🇺🇸 104.23.210.75

🇮🇳 103.211.114.135

🇮🇳 103.164.205.167

🇷🇺 87.250.224.134

🇮🇩 69.5.7.218

🇫🇷 51.38.12.14

🇮🇳 49.43.247.156

🇸🇬 47.82.201.238

🇿🇦 41.135.64.91