AbuseIPDB » 120.229.85.231
120.229.85.231 was found in our database!
This IP was reported 5 times. Confidence of
Abuse
is 0%: ?
| ISP |
China Mobile Communications Corporation
|
| Usage Type |
Fixed Line ISP
|
| ASN |
AS9808
|
| Domain Name |
chinamobile.com
|
| Country |
🇨🇳
China
|
| City |
Shenzhen, Guangdong
|
IP info including ISP, Usage Type, and Location provided
by IPInfo. Updated weekly.
IP Abuse Reports for 120.229.85.231:
This IP address has been reported a total of
5
times from
5 distinct
sources.
120.229.85.231 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
| Reporter |
IoA Timestamp (UTC)
|
Comment |
Categories |
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210350) triggered by 120.229.85.231 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 120.229.85.231 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 13 04:13:29.497253 2025] [security2:error] [pid 16400:tid 16400] [client 120.229.85.231:17559] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.renju.net|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/tournament/1807/game/75516/"] [unique_id "aMUnqQJRvCitsDPfp5ymogAAADA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇵🇭
siemwarrior
|
|
exploit mozi
|
Web App Attack
|
|
|
🇫🇷
security.rdmc.fr
|
|
Automatic report - Port Scan Attack
|
Fraud VoIP
Port Scan
|
|
|
🇲🇩
iHost
|
|
*Port Scan* detected from 120.229.85.231 (CN/China/-). 3 hits in the last 40 seconds; Ports: *; Dire ...
show more
*Port Scan* detected from 120.229.85.231 (CN/China/-). 3 hits in the last 40 seconds; Ports: *; Direction: in; Trigger: PS_LIMIT; Logs: Mar 21 22:19:11 web1 kernel: Firewall: *TCP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=120.229.85.231 DST=31.131.1.99 LEN=60 TOS=0x08 PREC=0x20 TTL=40 ID=58182 DF PROTO=TCP SPT=35473 DPT=5555 WINDOW=14600 RES=0x00 SYN URGP=0
Mar 21 22:19:12 web1 kernel: Firewall: *TCP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=120.229.85.231 DST=31.131.1.99 LEN=60 TOS=0x08 PREC=0x20 TTL=40 ID=58183 DF PROTO=TCP SPT=35473 DPT=5555 WINDOW=14600 RES=0x00 SYN URGP=0
Mar 21 22:19:14 web1 kernel: Firewall: *TCP_IN Blocked* IN=ens2f0 OUT= MAC=ac:16:2d:99:fc:fc:00:08:e3:ff:fc:28:08:00 SRC=120.229.85.231 DST=31.131.1.99 LEN=60 TOS=0x08 PREC=0x20 TTL=40 ID=58184 DF PROTO=TCP SPT=35473 DPT=5555 WINDOW=14600 RES=0x00 SYN URGP=0
show less
|
Port Scan
|
|
|
🇳🇱
EGP Abuse Dept
|
|
SQL injection attack
|
SQL Injection
|
|
Showing 1 to
5
of 5 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: