JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.230.22.23

120.230.22.23 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 4%: ?

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.230.22.23

Whois 120.230.22.23

IP Abuse Reports for 120.230.22.23:

This IP address has been reported a total of 6 times from 2 distinct sources. 120.230.22.23 was first reported on August 30th 2025, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-03 19:31:41 (12 hours ago)	(mod_security) mod_security (id:210831) triggered by 120.230.22.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.230.22.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 15:31:36.039054 2026] [security2:error] [pid 11177:tid 11177] [client 120.230.22.23:1374] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|fourminutedecision.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "fourminutedecision.com"] [uri "/"] [unique_id "aiCBGK_NqUf69RlTV6WMjwAAAAA"], referer: https://fourminutedecision.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 20:17:36 (3 months ago)	(mod_security) mod_security (id:210831) triggered by 120.230.22.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.230.22.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 15:17:27.862552 2026] [security2:error] [pid 13245:tid 13245] [client 120.230.22.23:19880] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|tankservicesinc.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "tankservicesinc.com"] [uri "/"] [unique_id "aZYeV6a1PTwhm_hn7F9X_gAAABc"], referer: http://tankservicesinc.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-18 18:20:04 (3 months ago)	(mod_security) mod_security (id:210831) triggered by 120.230.22.23 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.230.22.23 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 13:19:57.925231 2026] [security2:error] [pid 1169291:tid 1169314] [client 120.230.22.23:19862] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.a2zlns.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.a2zlns.com"] [uri "/403.shtml"] [unique_id "aZYCzbunKigN1pETEMs1jgAAAFQ"], referer: http://www.a2zlns.com/403.shtml show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-01-31 01:42:53 (4 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.230.22.23 2026-01-30 10 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.230.22.23 2026-01-30 10:51:34 /open.html 2026-01-30 10:51:38 /open.html 2026-01-30 10:51:39 /open.html 2026-01-30 10:51:35 /open.html show less	Web App Attack
🇨🇳 ThreatBook.io	2025-09-04 00:34:04 (9 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.230.22.23 2025-09-03 02 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.230.22.23 2025-09-03 02:34:43 /config.json show less	Web App Attack
🇨🇳 ThreatBook.io	2025-08-30 00:02:27 (9 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.230.22.23 2025-08-29 17 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.230.22.23 2025-08-29 17:42:02 /sitemap.xml show less	Web App Attack

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 116.48.150.115

🇩🇪 185.17.144.56

🇺🇸 172.214.209.153

🇺🇸 165.154.36.204

🇺🇸 142.171.240.236

🇷🇴 92.118.39.236

🇳🇱 45.142.193.161

🇵🇰 2400:adc5:138:500:e96f:897c:cb9:9eb1

🇺🇸 216.25.89.109

🇺🇸 165.154.172.111

🇳🇱 156.255.1.208

🇭🇰 152.32.251.182

🇺🇸 152.32.182.41

🇳🇬 152.32.140.39

🇮🇳 122.165.124.15

🇺🇸 91.230.168.194

🇨🇳 58.209.82.184

🇭🇰 49.131.102.118

🇳🇱 45.142.193.169

🇧🇷 43.157.181.189