JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.230.114.23

120.230.114.23 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 0%: ?

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.230.114.23

Whois 120.230.114.23

IP Abuse Reports for 120.230.114.23:

This IP address has been reported a total of 4 times from 4 distinct sources. 120.230.114.23 was first reported on September 12th 2023, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2025-09-18 14:05:35 (9 months ago)	(mod_security) mod_security (id:210350) triggered by 120.230.114.23 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 120.230.114.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 18 10:05:22.770313 2025] [security2:error] [pid 17506:tid 17506] [client 120.230.114.23:8438] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.renju.net\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/game/57083/"] [unique_id "aMwRoh2OUPuZ_QNgYcZ38AAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 xmission.com	2025-08-17 22:54:20 (10 months ago)	Blocked by UFW (TCP on 61940) Source port: 38451 TTL: 46 Packet length: 60 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 61940) Source port: 38451 TTL: 46 Packet length: 60 TOS: 0x08 This report (for 120.230.114.23) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 andy	2025-04-09 13:16:13 (1 year ago)	2025-04-09T22:05:18.111596panthera.a-fal.co sshd[24321]: Invalid user cacti from 120.230.114.23 port ... show more 2025-04-09T22:05:18.111596panthera.a-fal.co sshd[24321]: Invalid user cacti from 120.230.114.23 port 9320 2025-04-09T22:05:18.184683panthera.a-fal.co sshd[24321]: Connection closed by 120.230.114.23 port 9320 [preauth] 2025-04-09T22:16:13.010134panthera.a-fal.co sshd[24383]: Invalid user deployer from 120.230.114.23 port 41497 ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2023-09-12 03:18:28 (2 years ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/120.230.114.23 2023-09-1 ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/120.230.114.23 2023-09-11 03:17:18 /config/visualized/iOS.conf?project=production&app_id=com.ly.wallet show less	Web App Attack

Showing 1 to 4 of 4 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 69.5.169.35

🇨🇱 45.166.147.237

🇳🇱 45.153.34.112

🇮🇳 223.185.53.178

🇭🇰 199.45.155.77

🇿🇦 102.182.46.250

🇺🇸 66.132.195.22

🇨🇳 47.112.190.24

🇹🇷 37.77.29.86

🇺🇸 20.168.120.150

🇧🇷 2a09:bac5:65e:7af::c4:28

🇰🇷 218.156.93.202

🇬🇧 165.22.115.160

🇮🇩 163.7.11.83

🇸🇬 139.59.243.9

🇨🇳 123.116.141.82

🇳🇱 107.6.151.170

🇺🇸 65.49.20.119

🇺🇸 64.62.197.51

🇺🇸 13.219.37.54