AbuseIPDB » 109.120.21.148
109.120.21.148
This IP was reported 11 times. Confidence of
Abuse
is 47% : ?
ISP
BC-Telecom
Usage Type
Fixed Line ISP
ASN
AS15870
Hostname(s)
host148.net109-120-21.bs-telecom.net
Domain Name
bs-telecom.net
Country
🇷🇺
Russian Federation
City
Omsk, Omsk Oblast
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 109.120.21.148 :
This IP address has been reported a total of
11
times from
9 distinct
sources.
109.120.21.148 was first reported on
March 15th 2026 , and the most recent report was
17 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
xmission.com
2026-07-30 07:31:57
(17 hours ago)
Blocked by UFW (TCP on 23)
Source port: 59640
TTL: 41
Packet length: 60
TOS: 0x08
This report (for ...
show more
Blocked by UFW (TCP on 23)
Source port: 59640
TTL: 41
Packet length: 60
TOS: 0x08
This report (for 109.120.21.148) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Hacking
Brute-Force
🇩🇪
Admins@FBN
2026-07-29 12:03:36
(1 day ago)
FW-PortScan: Traffic Blocked srcport=37972 dstport=23
Port Scan
🇺🇸
MPL
2026-07-27 10:15:47
(3 days ago)
tcp/23
Port Scan
🇺🇸
IndigoRidge
2026-07-26 18:22:06
(4 days ago)
Knock-Knock TNET honeypot activity; time=2026-07-26 18:18:46; username=root
Brute-Force
🇺🇸
kosada.com
2026-07-26 02:07:54
(4 days ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
MPL
2026-07-25 05:10:40
(5 days ago)
tcp/23 (2 or more attempts)
Port Scan
2026-07-24 09:42:31
(6 days ago)
denied Telnet access attempt. destination port 23.
Port Scan
Brute-Force
🇺🇸
kosada.com
2026-07-08 18:08:17
(3 weeks ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇩🇪
pltcldvlpr
2026-06-06 10:21:56
(1 month ago)
Bogus Useragent: 109.120.21.148 - - [06/Jun/2026:12:21:56 +0200] "GET /protocol?id=by_16_50¶grap ...
show more
Bogus Useragent: 109.120.21.148 - - [06/Jun/2026:12:21:56 +0200] "GET /protocol?id=by_16_50¶graph=3299021&seq=350 HTTP/1.1" 444 0 "-" "Opera/8.25.(Windows NT 4.0; kok-IN) Presto/2.9.165 Version/10.00" asn=15870 org="Bst Ltd." country=RU
...
show less
Bad Web Bot
🇺🇸
TheCluePhone
2026-03-24 20:53:49
(4 months ago)
2026-03-24T20:53:49.261504ip-172-30-0-137.ec2.internal auth[25738]: pam_unix(dovecot:auth): authenti ...
show more
2026-03-24T20:53:49.261504ip-172-30-0-137.ec2.internal auth[25738]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot [email protected] rhost=109.120.21.148
...
show less
Brute-Force
Exploited Host
🇺🇸
TPI-Abuse
2026-03-15 20:21:01
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 109.120.21.148 (host148.net109-120-21.bs-teleco ...
show more
(mod_security) mod_security (id:225170) triggered by 109.120.21.148 (host148.net109-120-21.bs-telecom.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 15 16:20:56.677524 2026] [security2:error] [pid 1262:tid 1286] [client 109.120.21.148:61406] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||abusaimeh.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "abusaimeh.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abcUqPMV1o0IAgHKRRyDmAAAAI8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
11
of 11 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: