JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.230.23.38

120.230.23.38 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 4%: ?

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.230.23.38

Whois 120.230.23.38

IP Abuse Reports for 120.230.23.38:

This IP address has been reported a total of 14 times from 4 distinct sources. 120.230.23.38 was first reported on May 1st 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-10 07:44:47 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 120.230.23.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.230.23.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 03:44:39.903693 2026] [security2:error] [pid 22526:tid 22526] [client 120.230.23.38:13620] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|myappliancehero.pro\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "myappliancehero.pro"] [uri "/"] [unique_id "alCi5-Y4zw-ACqjfgQkkDQAAAAI"], referer: http://myappliancehero.pro/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 22:03:15 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 120.230.23.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.230.23.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 18:03:08.241027 2026] [security2:error] [pid 7110:tid 7110] [client 120.230.23.38:8391] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|compassionfatigue.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "compassionfatigue.org"] [uri "/"] [unique_id "ai8lHFA57xc5wuQF5iFRpwAAAAg"], referer: http://compassionfatigue.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 Peter Yu	2026-05-18 05:22:28 (1 month ago)		Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-05-12 23:15:12 (2 months ago)	ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/120.230.23.38 2026 ... show more ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/120.230.23.38 2026-05-12 20:02:18 /config.json 2026-05-12 16:38:26 /sitemap.xml show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-07 23:10:00 (2 months ago)	ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/120.230.23.38 2026 ... show more ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/120.230.23.38 2026-05-07 16:46:53 /dfdfd 2026-05-07 17:09:58 /favicon.ico show less	Web App Attack
🇺🇸 TPI-Abuse	2026-04-23 09:25:44 (2 months ago)	(mod_security) mod_security (id:210831) triggered by 120.230.23.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.230.23.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 23 05:25:38.260592 2026] [security2:error] [pid 21569:tid 21569] [client 120.230.23.38:4638] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|darrowco.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "darrowco.com"] [uri "/"] [unique_id "aenlkmNTOLYQ6BFbp9kheQAAABc"], referer: http://darrowco.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-03-29 00:07:10 (3 months ago)	(mod_security) mod_security (id:210831) triggered by 120.230.23.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.230.23.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 28 20:07:04.439808 2026] [security2:error] [pid 31562:tid 31562] [client 120.230.23.38:17817] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|diveron.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "diveron.com"] [uri "/"] [unique_id "achtKO5mikmW2hE1RBG9xQAAAAo"], referer: http://diveron.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-12-20 23:18:08 (6 months ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.230.23.38 2025-12-20 12 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.230.23.38 2025-12-20 12:57:52 / show less	Web App Attack
🇺🇸 kosada.com	2025-09-23 11:48:19 (9 months ago)	Web bot: DDoS	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2025-09-21 19:43:41 (9 months ago)	(mod_security) mod_security (id:210350) triggered by 120.230.23.38 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210350) triggered by 120.230.23.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 21 15:43:26.217348 2025] [security2:error] [pid 9720:tid 9720] [client 120.230.23.38:7686] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.renju.net\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/game/22290/"] [unique_id "aNBVXukGeg5R4FYf6k8JEAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-07-04 23:08:01 (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.230.23.38 2025-07-04 17 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.230.23.38 2025-07-04 17:45:07 /config.json show less	Web App Attack
🇨🇳 ThreatBook.io	2025-05-18 22:55:09 (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.230.23.38 2025-05- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.230.23.38 2025-05-18 07:04:44 / 2025-05-18 03:01:21 /robots.txt show less	Web App Attack
🇨🇳 ThreatBook.io	2025-05-05 23:31:36 (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.230.23.38 2025-05- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.230.23.38 2025-05-05 03:41:13 /sitemap.xml show less	Web App Attack
🇨🇳 ThreatBook.io	2025-05-01 23:27:18 (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.230.23.38 2025-05- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.230.23.38 2025-05-01 03:02:52 /robots.txt show less	Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.43.236.81

🇺🇸 209.50.168.5

🇷🇺 185.59.246.253

🇮🇳 182.76.71.82

🇨🇱 181.173.198.65

🇩🇪 167.94.146.46

🇳🇱 160.119.76.10

🇸🇬 118.194.234.189

🇻🇳 118.68.43.78

🇺🇸 107.167.34.125

🇹🇼 61.223.67.238

🇧🇪 35.195.73.129

🇸🇮 31.57.184.232

🇨🇳 14.103.107.214

🇺🇸 192.204.132.172

🇬🇧 185.247.137.248

🇯🇵 152.32.201.80

🇬🇧 137.220.120.12

🇨🇳 116.178.134.246

🇨🇦 85.217.149.68