JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.239.27.194

120.239.27.194 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 4%: ?

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS56040
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.239.27.194

Whois 120.239.27.194

IP Abuse Reports for 120.239.27.194:

This IP address has been reported a total of 8 times from 3 distinct sources. 120.239.27.194 was first reported on October 9th 2024, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-12 02:22:13 (6 days ago)	(mod_security) mod_security (id:210831) triggered by 120.239.27.194 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 120.239.27.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 22:22:08.304233 2026] [security2:error] [pid 6153:tid 6153] [client 120.239.27.194:9279] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.dbq.us\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.dbq.us"] [uri "/"] [unique_id "aittUJv7KXYJ1_N4IaVGmwAAAAI"], referer: http://www.dbq.us/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-04-29 20:04:06 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 120.239.27.194 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 120.239.27.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 29 16:03:58.658746 2026] [security2:error] [pid 20755:tid 20755] [client 120.239.27.194:20957] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.stewhist.org\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.stewhist.org"] [uri "/"] [unique_id "afJkLmByeM7QI088rnyzEAAAAAU"], referer: http://www.stewhist.org/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-02-13 04:42:35 (4 months ago)	(mod_security) mod_security (id:210831) triggered by 120.239.27.194 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210831) triggered by 120.239.27.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 23:42:31.287142 2026] [security2:error] [pid 25498:tid 25498] [client 120.239.27.194:19628] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.glolady.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.glolady.com"] [uri "/"] [unique_id "aY6rt6FDBRf1VRN3GplZogAAAAY"], referer: https://www.glolady.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-11-15 01:11:32 (7 months ago)	ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/120.239.27.194 202 ... show more ThreatBook Intelligence: Scanner,Gateway more details on https://threatbook.io/ip/120.239.27.194 2025-11-14 21:22:08 /robots.txt show less	Web App Attack
🇨🇳 ThreatBook.io	2025-06-04 00:57:57 (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.239.27.194 2025-06-03 2 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.239.27.194 2025-06-03 20:40:57 /sitemap.xml show less	Web App Attack
🇨🇳 ThreatBook.io	2025-06-03 01:28:11 (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.239.27.194 2025-06-02 1 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.239.27.194 2025-06-02 12:28:49 / show less	Web App Attack
🇨🇳 ThreatBook.io	2025-05-25 02:12:59 (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.239.27.194 2025-05-24 1 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/120.239.27.194 2025-05-24 16:12:26 /robots.txt show less	Web App Attack
Anonymous	2024-10-09 00:36:17 (1 year ago)	Malicious activity detected	Hacking Web App Attack

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 176.65.148.158

🇩🇿 154.255.35.30

🇫🇮 147.185.133.23

🇨🇦 99.243.16.243

🇳🇱 91.92.40.12

🇭🇰 43.132.215.68

🇹🇷 37.148.214.69

🇬🇧 35.203.211.148

🇬🇧 35.203.211.103

🇬🇧 35.203.211.36

🇭🇰 23.91.97.170

🇬🇧 193.163.125.220

🇫🇷 173.249.53.9

🇺🇸 147.185.132.191

🇧🇩 103.153.110.190

🇺🇸 100.29.192.126

🇳🇱 91.92.40.204

🇲🇽 189.174.42.36

🇫🇮 147.185.133.239

🇬🇧 35.203.211.13