JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.230.21.210

120.230.21.210 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 10%: ?

10%

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.230.21.210

Whois 120.230.21.210

IP Abuse Reports for 120.230.21.210:

This IP address has been reported a total of 9 times from 4 distinct sources. 120.230.21.210 was first reported on March 27th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-20 14:04:05 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 120.230.21.210 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 120.230.21.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 10:04:01.160911 2026] [security2:error] [pid 32224:tid 32224] [client 120.230.21.210:1728] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|ulrike-petri.de\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "ulrike-petri.de"] [uri "/"] [unique_id "ajad0Yf-f6ALNwo9NLsrMwAAAAQ"], referer: https://ulrike-petri.de/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-28 00:01:09 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 120.230.21.210 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 120.230.21.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 20:01:04.943204 2026] [security2:error] [pid 16583:tid 16583] [client 120.230.21.210:2019] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.pyxelstudios.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pyxelstudios.com"] [uri "/"] [unique_id "aheFwG93L35t15jOJeO7jAAAAAk"], referer: https://www.pyxelstudios.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-05-12 22:36:45 (1 month ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.230.21.210 2026-05-12 2 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.230.21.210 2026-05-12 22:54:40 /favicon.ico show less	Web App Attack
🇺🇸 TPI-Abuse	2026-05-12 20:11:20 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 120.230.21.210 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 120.230.21.210 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 16:11:14.806821 2026] [security2:error] [pid 16719:tid 16719] [client 120.230.21.210:3621] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|bigbandrockparty.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "bigbandrockparty.com"] [uri "/"] [unique_id "agOJYtzSvREVGR9YDExyVgAAAA0"], referer: http://bigbandrockparty.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 Tokolosh Hunters	2026-03-21 05:46:46 (3 months ago)	AutoBlockWindow-Known bad useragent query-2026-03-21 05:46:45	Bad Web Bot
🇨🇳 ThreatBook.io	2025-06-04 22:36:03 (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.230.21.210 2025-06-04 1 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.230.21.210 2025-06-04 11:42:28 /robots.txt show less	Web App Attack
🇨🇳 ThreatBook.io	2025-03-16 22:41:48 (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.230.21.210 2025-03-16 1 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.230.21.210 2025-03-16 10:04:30 /robots.txt show less	Web App Attack
🇨🇳 ThreatBook.io	2025-03-14 22:52:32 (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.230.21.210 2025-03-14 1 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.230.21.210 2025-03-14 15:28:50 /static/img/facio.ico show less	Web App Attack
🇨🇭 backslash	2023-03-27 09:35:13 (3 years ago)		Bad Web Bot

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2602:80d:1007::39

🇺🇸 207.90.244.26

🇺🇬 196.0.242.54

🇫🇷 195.154.103.239

🇧🇷 190.115.84.25

🇸🇬 47.82.49.78

🇳🇱 45.156.128.149

🇳🇱 45.148.10.147

🇨🇳 14.103.118.61

🇨🇳 14.103.107.31

🇬🇧 213.134.9.2

🇳🇱 192.253.248.7

🇵🇱 176.53.159.198

🇫🇮 65.108.6.34

🇱🇹 62.60.130.219

🇳🇱 45.148.10.157

🇧🇪 35.205.111.42

🇷🇴 2.57.121.112

🇨🇴 191.92.224.157

🇧🇷 187.6.121.246