JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.242.179.250

120.242.179.250 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 4%: ?

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS9808
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.242.179.250

Whois 120.242.179.250

IP Abuse Reports for 120.242.179.250:

This IP address has been reported a total of 5 times from 2 distinct sources. 120.242.179.250 was first reported on November 10th 2025, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-08 04:51:50 (5 days ago)	(mod_security) mod_security (id:210831) triggered by 120.242.179.250 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 120.242.179.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 00:51:45.288841 2026] [security2:error] [pid 32400:tid 32400] [client 120.242.179.250:21063] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.frelsburg.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.frelsburg.com"] [uri "/"] [unique_id "ak3XYffy300lqHcErueXxAAAAAU"], referer: http://www.frelsburg.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 17:03:10 (6 days ago)	(mod_security) mod_security (id:210831) triggered by 120.242.179.250 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 120.242.179.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 13:03:04.830490 2026] [security2:error] [pid 17083:tid 17083] [client 120.242.179.250:21119] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.mjgraphics.net\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.mjgraphics.net"] [uri "/"] [unique_id "ak0xSHn0p5VLE_-j-XQBjQAAABE"], referer: http://www.mjgraphics.net/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-07 03:43:02 (6 days ago)	(mod_security) mod_security (id:210831) triggered by 120.242.179.250 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 120.242.179.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 23:42:56.515995 2026] [security2:error] [pid 27880:tid 27880] [client 120.242.179.250:20759] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.ccureiti.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.ccureiti.com"] [uri "/"] [unique_id "akx1wLt8GVggA3Jq4Icn5wAAAA0"], referer: http://www.ccureiti.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-11-12 22:30:17 (8 months ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.242.179.250 2025- ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.242.179.250 2025-11-12 03:36:45 /config.json 2025-11-12 05:14:11 / show less	Web App Attack
🇨🇳 ThreatBook.io	2025-11-10 22:40:14 (8 months ago)	ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.242.179.250 2025- ... show more ThreatBook Intelligence: Spam,Gateway more details on https://threatbook.io/ip/120.242.179.250 2025-11-10 13:16:13 /dfdfd show less	Web App Attack

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.111

🇧🇷 201.16.238.49

🇺🇸 144.126.140.182

🇫🇷 51.77.211.39

🇨🇳 222.92.61.242

🇭🇺 185.203.185.201

🇺🇸 162.216.150.57

🇰🇷 121.162.61.229

🇧🇩 103.179.199.5

🇨🇦 85.217.149.71

🇲🇩 45.86.86.162

🇺🇸 45.79.190.10

🇸🇬 43.160.245.79

🇮🇩 36.91.101.202

🇷🇴 2.57.121.25

🇨🇳 180.76.233.159

🇨🇳 113.201.207.206

🇺🇸 66.132.186.246

🇺🇸 65.49.139.223

🇻🇳 27.79.41.238