JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

121.229.45.160

Activity Trending Down

Abuse Confidence Score

26% Elevated

16 reports

8 reporters · latest 1 week ago

ISP: CHINANET jiangsu province network
Usage Type: Fixed Line ISP
ASN: AS4134
Domain Name: chinatelecom.cn
Country: 🇨🇳 China
City: Nanjing, Jiangsu

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

16 from 8 distinct reporters

First reported

March 30th 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 2 🇫🇷 France 1 🇮🇹 Italy 1

Most common categories Web App Attack 5 Brute-Force 4 Bad Web Bot 2 Hacking 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇹 Malta	2026-10-21 09:00:45 (1 week ago)	121.229.45.160 - - [21/Oct/2026:11:00:45 +0200] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36"	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-10-17 23:53:29 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 121.229.45.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 19:53:25.294306 2026] [security2:error] [pid 29984:tid 29984] [client 121.229.45.160:38628] ... show more (mod_security) mod_security (id:225170) triggered by 121.229.45.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 19:53:25.294306 2026] [security2:error] [pid 29984:tid 29984] [client 121.229.45.160:38628] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.fusteriafontane.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fusteriafontane.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "atQKdZaVPGo4APVsUDmzUQAAAAc"], referer: https://www.fusteriafontane.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-10-09 16:20:04 (2 weeks ago)	Detected mail brute force attack from different servers	Brute-Force
🇺🇸 TPI-Abuse	2026-10-04 19:45:10 (3 weeks ago)	(mod_security) mod_security (id:225170) triggered by 121.229.45.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 15:45:04.977552 2026] [security2:error] [pid 11520:tid 11520] [client 121.229.45.160:49272] ... show more (mod_security) mod_security (id:225170) triggered by 121.229.45.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 15:45:04.977552 2026] [security2:error] [pid 11520:tid 11520] [client 121.229.45.160:49272] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.virtualmediamasters.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.virtualmediamasters.net"] [uri "/wp-json/wp/v2/users/"] [unique_id "asKswDqWx7WNUtfc0vH39AAAAAE"], referer: http://www.virtualmediamasters.net/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-24 19:04:15 (1 month ago)	Blocked by web application firewall: automated malicious HTTP requests (WordPress xmlrpc.php / wp-login brute-force and admin-panel scanning). Distributed botnet / automated tooling. No legitimate use.	Brute-Force Web App Attack
🇲🇽 octageeks.com	2026-09-17 04:11:15 (1 month ago)	Wordpress malicious attack:[octawpauthor]	Web App Attack
🇩🇪 big-cloud.nl	2026-08-18 17:33:16 (2 months ago)	Try to access /xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-08-07 20:08:58 (2 months ago)	(mod_security) mod_security (id:225170) triggered by 121.229.45.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 16:08:51.935564 2026] [security2:error] [pid 2393711:tid 2393711] [client 121.229.45.160:57 ... show more (mod_security) mod_security (id:225170) triggered by 121.229.45.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 16:08:51.935564 2026] [security2:error] [pid 2393711:tid 2393711] [client 121.229.45.160:57324] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|hendersonhomes.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "hendersonhomes.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "anY7U102seP6fUSvkRKyKgAAAAA"], referer: https://hendersonhomes.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-06-27 20:05:11 (4 months ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇺🇸 mnsf	2026-06-22 07:05:56 (4 months ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇫🇷 ELYAZ	2026-06-21 22:33:46 (4 months ago)	(y4) Failed scan -byebye- from 121.229.45.160 (CN/China/-): (CF_ENABLE)	Hacking
🇺🇸 TPI-Abuse	2026-06-16 21:39:32 (4 months ago)	(mod_security) mod_security (id:225170) triggered by 121.229.45.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 17:39:23.597780 2026] [security2:error] [pid 20421:tid 20421] [client 121.229.45.160:40502] ... show more (mod_security) mod_security (id:225170) triggered by 121.229.45.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 17:39:23.597780 2026] [security2:error] [pid 20421:tid 20421] [client 121.229.45.160:40502] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ubuciko.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ubuciko.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajHCiyt1ip9aNqNJh3l2QgAAAAM"], referer: https://ubuciko.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-18 20:07:55 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 121.229.45.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 16:07:50.181243 2026] [security2:error] [pid 26996:tid 26996] [client 121.229.45.160:47416] ... show more (mod_security) mod_security (id:225170) triggered by 121.229.45.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 16:07:50.181243 2026] [security2:error] [pid 26996:tid 26996] [client 121.229.45.160:47416] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.darkalleyproductions.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.darkalleyproductions.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "agtxliKxIYbKG5a3s0KkNQAAAAA"], referer: https://www.darkalleyproductions.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-14 05:19:24 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 121.229.45.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 01:19:15.688047 2026] [security2:error] [pid 8114:tid 8114] [client 121.229.45.160:45874] M ... show more (mod_security) mod_security (id:225170) triggered by 121.229.45.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 01:19:15.688047 2026] [security2:error] [pid 8114:tid 8114] [client 121.229.45.160:45874] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.hvacmechanalysis.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.hvacmechanalysis.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "agVbU0YzhwhOi-ckeO_YTgAAABU"], referer: https://www.hvacmechanalysis.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-09 01:56:39 (5 months ago)	(mod_security) mod_security (id:225170) triggered by 121.229.45.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 21:56:33.790670 2026] [security2:error] [pid 12801:tid 12801] [client 121.229.45.160:39026] ... show more (mod_security) mod_security (id:225170) triggered by 121.229.45.160 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 21:56:33.790670 2026] [security2:error] [pid 12801:tid 12801] [client 121.229.45.160:39026] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.fundingworkingcapital.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fundingworkingcapital.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "af6UUZAikWG02OXMlI14RQAAAA0"], referer: https://www.fundingworkingcapital.com/ show less	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 205.210.31.107

🇺🇸 192.177.166.179

🇲🇽 189.217.130.86

🇧🇷 130.49.77.159

🇹🇼 128.14.237.120

🇵🇰 111.68.98.152

🇰🇷 106.247.22.181

🇺🇸 83.142.54.241

🇮🇹 34.17.15.61

🇺🇸 5.181.171.22

🇧🇷 205.210.31.202

🇳🇱 193.47.62.69

🇷🇴 193.46.255.86

🇬🇧 188.240.59.11

🇦🇷 181.81.142.162

🇨🇭 179.43.153.2

🇺🇸 173.69.45.102

🇺🇸 158.94.187.197

🇫🇷 146.19.44.80

🇳🇱 138.226.239.234