AbuseIPDB » 120.232.111.151
120.232.111.151
This IP was reported 7 times. Confidence of
Abuse
is 5% : ?
ISP
China Mobile Communications Corporation
Usage Type
Fixed Line ISP
ASN
AS9808
Domain Name
chinamobile.com
Country
🇨🇳
China
City
Guangzhou, Guangdong
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 120.232.111.151 :
This IP address has been reported a total of
7
times from
1 distinct
source.
120.232.111.151 was first reported on
May 8th 2026 , and the most recent report was
1 day ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-07-11 06:43:17
(1 day ago)
(mod_security) mod_security (id:210740) triggered by 120.232.111.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210740) triggered by 120.232.111.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 02:43:10.786369 2026] [security2:error] [pid 29863:tid 29863] [client 120.232.111.151:36804] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||dwightbrown.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "dwightbrown.com"] [uri "/wp-content/uploads/2014/08/Benjamin-Franklin.jpg"] [unique_id "alHl_t6FOL_5iwWtAa4MvgAAAEU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-11 04:54:49
(1 day ago)
(mod_security) mod_security (id:210740) triggered by 120.232.111.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210740) triggered by 120.232.111.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 00:54:43.932346 2026] [security2:error] [pid 7474:tid 7474] [client 120.232.111.151:44722] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.vzan.org|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.vzan.org"] [uri "/wp-content/uploads/2017/03/EDA-Logo.jpg"] [unique_id "alHMkwDSUes_bZ93iOa1dwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 08:38:30
(5 days ago)
(mod_security) mod_security (id:210740) triggered by 120.232.111.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210740) triggered by 120.232.111.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 04:38:24.936424 2026] [security2:error] [pid 16294:tid 16294] [client 120.232.111.151:48888] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.ohwaitiforgot.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.ohwaitiforgot.com"] [uri "/wp-content/uploads/2014/02/ladiesofgraceadieu.jpg"] [unique_id "aktpgCjxxYcwQtH1mMbvewAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 20:04:29
(1 week ago)
(mod_security) mod_security (id:210740) triggered by 120.232.111.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210740) triggered by 120.232.111.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 16:04:22.415334 2026] [security2:error] [pid 13688:tid 13688] [client 120.232.111.151:41652] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||frankpollicino.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "frankpollicino.com"] [uri "/products/media/BLS_7261_tarcisius.jpg"] [unique_id "akVyxpX4F6Foq5ebt6JAYQAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 15:58:17
(3 weeks ago)
(mod_security) mod_security (id:210740) triggered by 120.232.111.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210740) triggered by 120.232.111.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 11:58:08.824076 2026] [security2:error] [pid 17528:tid 17528] [client 120.232.111.151:27528] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||advancedmotorsports.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "advancedmotorsports.com"] [uri "/cgi-sys/suspendedpage.cgi"] [unique_id "ajFykL6ujBl_io-16hxr5wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-09 15:59:08
(2 months ago)
(mod_security) mod_security (id:210740) triggered by 120.232.111.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210740) triggered by 120.232.111.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 11:59:03.173882 2026] [security2:error] [pid 5283:tid 5283] [client 120.232.111.151:27958] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||butkiewiczfamilyfarm.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "butkiewiczfamilyfarm.com"] [uri "/index.php/pages/show/Error+403"] [unique_id "af9Zx8FRfvGOe41MJIC4-AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 08:07:31
(2 months ago)
(mod_security) mod_security (id:210740) triggered by 120.232.111.151 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210740) triggered by 120.232.111.151 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 04:07:24.976605 2026] [security2:error] [pid 18384:tid 18384] [client 120.232.111.151:14968] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||thenewplantation.org|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "thenewplantation.org"] [uri "/403.html"] [unique_id "af2ZvFIr_Ne1Pv9k6m4P2gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
7
of 7 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: