JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.230.28.31

120.230.28.31 was found in our database!

This IP was reported 7 times. Confidence of Abuse is 3%: ?

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.230.28.31

Whois 120.230.28.31

IP Abuse Reports for 120.230.28.31:

This IP address has been reported a total of 7 times from 2 distinct sources. 120.230.28.31 was first reported on May 23rd 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-22 22:42:11 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 120.230.28.31 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.230.28.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 18:42:03.232210 2026] [security2:error] [pid 27051:tid 27051] [client 120.230.28.31:4581] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.ezsmiledental.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.ezsmiledental.com"] [uri "/"] [unique_id "amFHO090RJMJWKXsir6mzAAAAAE"], referer: https://www.ezsmiledental.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 21:08:09 (1 month ago)	(mod_security) mod_security (id:949110) triggered by 120.230.28.31 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:949110) triggered by 120.230.28.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 17:08:04.223604 2026] [security2:error] [pid 14997:tid 14997] [client 120.230.28.31:3191] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.justinpenney.com"] [uri "/"] [unique_id "ajBptO-2UsOQV7JXo_5FPAAAAA4"], referer: http://www.justinpenney.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-12 23:14:54 (5 months ago)	(mod_security) mod_security (id:210831) triggered by 120.230.28.31 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 120.230.28.31 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 18:14:46.791275 2026] [security2:error] [pid 1879066:tid 1879066] [client 120.230.28.31:1073] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.teenaarunoceans.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.teenaarunoceans.com"] [uri "/"] [unique_id "aY5e5pvkQUKZNXj8sugDLgAAAAE"], referer: http://www.teenaarunoceans.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-08-18 22:15:39 (11 months ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.230.28.31 2025-08 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.230.28.31 2025-08-18 01:39:27 /robots.txt show less	Web App Attack
🇨🇳 ThreatBook.io	2025-08-07 22:14:14 (11 months ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.230.28.31 2025-08 ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.230.28.31 2025-08-07 13:55:40 /dfdfd show less	Web App Attack
🇨🇳 ThreatBook.io	2025-05-27 22:17:11 (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.230.28.31 2025-05- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.230.28.31 2025-05-27 09:31:00 /robots.txt show less	Web App Attack
🇨🇳 ThreatBook.io	2025-05-23 22:25:42 (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.230.28.31 2025-05- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/120.230.28.31 2025-05-23 04:52:37 /explore/projects?non_archived=true&page=1&sort=latest_activity_desc show less	Web App Attack

Showing 1 to 7 of 7 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 217.154.38.181

🇺🇸 195.184.76.50

🇺🇦 194.39.227.85

🇸🇬 159.223.32.29

🇨🇦 147.182.154.58

🇿🇦 129.232.187.42

🇲🇶 95.138.3.155

🇲🇾 47.250.188.105

🇬🇧 35.203.211.25

🇳🇱 213.176.26.42

🇰🇷 211.106.133.202

🇳🇱 195.178.110.30

🇩🇪 194.36.25.35

🇺🇸 165.22.189.133

🇺🇸 157.245.83.220

🇧🇷 152.250.123.176

🇺🇸 91.230.168.121

🇸🇬 47.128.34.83

🇨🇳 36.213.110.250

🇨🇦 23.234.86.53