JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.229.72.214

120.229.72.214 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 58%: ?

58%

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.229.72.214

Whois 120.229.72.214

IP Abuse Reports for 120.229.72.214:

This IP address has been reported a total of 13 times from 10 distinct sources. 120.229.72.214 was first reported on September 26th 2025, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 AustrianSimon	2026-09-16 17:06:06 (3 hours ago)	16 Sep 2026 17:06:05UTC:spam e-mail originating from IP address 120.229.72.214 failing dmarc criteri ... show more 16 Sep 2026 17:06:05UTC:spam e-mail originating from IP address 120.229.72.214 failing dmarc criteria of sending domain zyeaiusjs <[email protected]> (e.g. unauthorized by sending domain) show less	Email Spam Spoofing
🇦🇹 AustrianSimon	2026-09-16 03:17:19 (17 hours ago)	16 Sep 2026 03:17:19UTC:spam e-mail originating from IP address 120.229.72.214 failing dmarc criteri ... show more 16 Sep 2026 03:17:19UTC:spam e-mail originating from IP address 120.229.72.214 failing dmarc criteria of sending domain eubhuap <[email protected]> (e.g. unauthorized by sending domain) show less	Email Spam Spoofing
🇩🇪 iNetWorker	2026-09-15 10:25:39 (1 day ago)	spam	Email Spam
🇩🇪 H. Hampel	2026-09-15 09:32:50 (1 day ago)	Spam Score: 28	Email Spam
🇩🇪 H. Hampel	2026-09-15 08:44:29 (1 day ago)	Spam Score: 27	Email Spam
🇺🇸 JCB	2026-09-15 07:34:00 (1 day ago)	spam	Email Spam
🇸🇰 EVISION	2026-09-15 07:33:45 (1 day ago)	Automatic report from EV firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporti ... show more Automatic report from EV firewall log. https://github.com/Ragnarocek/Windows_FW_AbuseIPDB_Reporting ID: 53rryIWkZ7JYQBkf3Rv2E2D8Cb84xtM8 show less	Port Scan Hacking Brute-Force
🇧🇬 Stoyko Stoykov	2026-09-15 06:28:40 (1 day ago)	2026-09-15T05:57:37.601970+03:00 ns1 postfix/smtpd[1263203]: NOQUEUE: reject: RCPT from unknown[120. ... show more 2026-09-15T05:57:37.601970+03:00 ns1 postfix/smtpd[1263203]: NOQUEUE: reject: RCPT from unknown[120.229.72.214]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<wika-hr.mail.protection.outlook.com> 2026-09-15T09:28:40.377528+03:00 ns1 postfix/smtpd[1280418]: NOQUEUE: reject: RCPT from unknown[120.229.72.214]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<alt2.aspmx.l.google.com> ... show less	Hacking Brute-Force
🇦🇹 AustrianSimon	2026-09-15 05:06:26 (1 day ago)	15 Sep 2026 05:06:26UTC:spam e-mail originating from IP address 120.229.72.214 failing dmarc criteri ... show more 15 Sep 2026 05:06:26UTC:spam e-mail originating from IP address 120.229.72.214 failing dmarc criteria of sending domain reesnwpm <[email protected]> (e.g. unauthorized by sending domain) show less	Email Spam Spoofing
🇭🇺 Lacika555	2026-09-15 04:46:41 (1 day ago)	RdpGuard detected brute-force attempt on SMTP	Brute-Force
🇸🇰 Eurofluid	2026-09-15 00:00:45 (1 day ago)	You shall not pass ! Abusive behavior blocked by EF firewall.	Port Scan Hacking Brute-Force
🇱🇻 garmtech.com	2026-09-14 22:46:04 (1 day ago)	IP Address black-listed by anti-spam (blocked).	Email Spam
🇺🇸 TPI-Abuse	2025-09-26 01:13:48 (11 months ago)	(mod_security) mod_security (id:210350) triggered by 120.229.72.214 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 120.229.72.214 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 25 21:13:31.773897 2025] [security2:error] [pid 22085:tid 22085] [client 120.229.72.214:21258] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.renju.net\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/tournament/1998/game/74948/"] [unique_id "aNXou8soF6d40CHf0tAlYQAAAAk"], referer: https://www.renju.net/game/74948/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 182.43.221.112

🇵🇾 160.238.185.60

🇻🇳 113.169.28.162

🇩🇪 213.209.159.154

🇺🇸 185.191.171.2

🇰🇿 185.78.233.52

🇵🇱 176.53.159.197

🇺🇸 154.83.211.58

🇨🇳 112.31.167.120

🇳🇱 45.148.10.141

🇮🇩 36.93.249.106

🇧🇪 35.205.186.178

🇩🇪 196.251.121.151

🇻🇳 165.154.137.186

🇲🇽 148.224.101.110

🇧🇾 109.126.176.245

🇧🇷 108.174.147.36

🇮🇳 103.161.55.199

🇺🇸 91.230.168.238

🇧🇬 79.124.49.154