JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.230.22.168

120.230.22.168 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 4%: ?

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.230.22.168

Whois 120.230.22.168

IP Abuse Reports for 120.230.22.168:

This IP address has been reported a total of 10 times from 2 distinct sources. 120.230.22.168 was first reported on April 25th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-26 01:32:05 (2 days ago)	(mod_security) mod_security (id:210831) triggered by 120.230.22.168 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 120.230.22.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 21:31:58.541863 2026] [security2:error] [pid 8906:tid 8906] [client 120.230.22.168:15204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|vincenzorusso.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "vincenzorusso.com"] [uri "/"] [unique_id "aj3Wjj9SCuL4Ei-h_067JgAAAAQ"], referer: http://vincenzorusso.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-28 20:36:36 (3 months ago)	(mod_security) mod_security (id:210831) triggered by 120.230.22.168 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 120.230.22.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Feb 28 15:36:31.458804 2026] [security2:error] [pid 7406:tid 7406] [client 120.230.22.168:3596] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.styxwetworld.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.styxwetworld.com"] [uri "/"] [unique_id "aaNRzzCF8q9dSqUwcfcgjAAAAAY"], referer: http://www.styxwetworld.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-09 02:33:45 (4 months ago)	(mod_security) mod_security (id:210831) triggered by 120.230.22.168 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 120.230.22.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 08 21:33:41.145977 2026] [security2:error] [pid 13190:tid 13190] [client 120.230.22.168:22713] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|keyspring-niseko.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "keyspring-niseko.com"] [uri "/"] [unique_id "aYlHhdGTcklv5o-yK0oYkwAAABA"], referer: https://keyspring-niseko.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-11-27 03:40:10 (7 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.230.22.168 2025-11-26 0 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.230.22.168 2025-11-26 04:48:58 /config.json show less	Web App Attack
🇨🇳 ThreatBook.io	2025-10-22 22:48:17 (8 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.230.22.168 2025-10-22 2 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.230.22.168 2025-10-22 23:25:41 /robots.txt show less	Web App Attack
🇺🇸 TPI-Abuse	2025-09-22 17:36:12 (9 months ago)	(mod_security) mod_security (id:210350) triggered by 120.230.22.168 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210350) triggered by 120.230.22.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 22 13:35:58.933465 2025] [security2:error] [pid 11583:tid 11583] [client 120.230.22.168:11862] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.renju.net\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/tournament/2151/game/85084/"] [unique_id "aNGI_u4zumCUaD8V9Sbw4gAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-08-30 22:49:19 (9 months ago)	ThreatBook Intelligence: Mobile more details on http://threatbook.io/ip/120.230.22.168 2025-08-30 09 ... show more ThreatBook Intelligence: Mobile more details on http://threatbook.io/ip/120.230.22.168 2025-08-30 09:33:00 /robots.txt 2025-08-30 09:15:58 /robots.txt 2025-08-30 06:29:48 /sitemap.xml show less	Web App Attack
🇨🇳 ThreatBook.io	2025-04-29 23:27:25 (1 year ago)	ThreatBook Intelligence: Zombie,Mobile more details on https://threatbook.io/ip/120.230.22.168 2025- ... show more ThreatBook Intelligence: Zombie,Mobile more details on https://threatbook.io/ip/120.230.22.168 2025-04-29 02:30:26 /sitemap.xml show less	Web App Attack
🇨🇳 ThreatBook.io	2025-04-28 23:23:27 (1 year ago)	ThreatBook Intelligence: Zombie,Mobile more details on https://threatbook.io/ip/120.230.22.168 2025- ... show more ThreatBook Intelligence: Zombie,Mobile more details on https://threatbook.io/ip/120.230.22.168 2025-04-28 09:30:35 / show less	Web App Attack
🇨🇳 ThreatBook.io	2025-04-25 23:19:14 (1 year ago)	ThreatBook Intelligence: Zombie,Mobile more details on https://threatbook.io/ip/120.230.22.168 2025- ... show more ThreatBook Intelligence: Zombie,Mobile more details on https://threatbook.io/ip/120.230.22.168 2025-04-25 07:18:59 / show less	Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 198.235.24.221

🇨🇳 110.80.1.210

🇧🇷 205.210.31.146

🇳🇱 204.76.203.219

🇧🇪 198.235.24.219

🇧🇪 198.235.24.206

🇺🇸 162.216.150.96

🇺🇸 152.32.236.116

🇧🇩 103.135.253.197

🇳🇱 91.92.40.233

🇮🇪 18.201.250.96

🇰🇷 14.49.156.198

🇧🇷 205.210.31.255

🇭🇰 199.45.155.96

🇭🇰 199.45.154.180

🇧🇪 198.235.24.205

🇧🇪 198.235.24.196

🇲🇽 187.191.48.4

🇸🇬 139.59.102.93

🇩🇪 69.5.169.47