JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 117.2.121.204

117.2.121.204 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 46%: ?

46%

ISP	Viettel Group
Usage Type	Fixed Line ISP
ASN	AS7552
Hostname(s)	dynamic-adsl.viettel.vn
Domain Name	viettel.com.vn
Country	🇻🇳 Viet Nam
City	Nha Trang, Khanh Hoa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 117.2.121.204

Whois 117.2.121.204

IP Abuse Reports for 117.2.121.204:

This IP address has been reported a total of 12 times from 8 distinct sources. 117.2.121.204 was first reported on May 26th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-06-03 12:52:54 (5 days ago)	(mod_security) mod_security (id:213050) triggered by 117.2.121.204 (dynamic-ip-adsl.viettel.vn): 1 i ... show more (mod_security) mod_security (id:213050) triggered by 117.2.121.204 (dynamic-ip-adsl.viettel.vn): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 08:52:49.532157 2026] [security2:error] [pid 6610:tid 6610] [client 117.2.121.204:59612] ModSecurity: Access denied with code 403 (phase 2). Match of "rx (?:body\|content\|description\|post\|desc\|html_message\|text)=" against "MATCHED_VAR" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/07_XSS_XSS.conf"] [line "165"] [id "213050"] [rev "3"] [msg "COMODO WAF: XSS vulnerability\|\|mavikalem.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "XSS"] [hostname "mavikalem.org"] [uri "/"] [unique_id "aiAjoUGcbs2zsR-U1Tzq7gAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-05-31 10:04:24 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /xmlrpc.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/124.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇦 URAN Publishing Service	2026-05-31 07:20:37 (1 week ago)	117.2.121.204 - - [31/May/2026:10:20:36 +0300] "GET /wp-includes/js/wp-emoji-release.min.js HTTP/1.1 ... show more 117.2.121.204 - - [31/May/2026:10:20:36 +0300] "GET /wp-includes/js/wp-emoji-release.min.js HTTP/1.1" 404 3115 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/124.0" 117.2.121.204 - - [31/May/2026:10:20:36 +0300] "GET /xmlrpc.php HTTP/1.1" 404 3115 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/124.0" ... show less	Web App Attack
🇫🇷 Campus France	2026-05-31 06:45:13 (1 week ago)	[Sun May 31 03:51:01.081892 2026] [php:error] [pid 4091359] [client 117.2.121.204:61716] script '/va ... show more [Sun May 31 03:51:01.081892 2026] [php:error] [pid 4091359] [client 117.2.121.204:61716] script '/var/www/html/brume.org/radios/xmlrpc.php' not found or unable to stat [Sun May 31 03:51:01.083742 2026] [php:error] [pid 4089149] [client 117.2.121.204:61715] script '/var/www/html/brume.org/radios/wp-login.php' not found or unable to stat [Sun May 31 06:39:37.405679 2026] [php:error] [pid 4169002] [client 117.2.121.204:65324] script '/var/www/html/brume.org/xmlrpc.php' not found or unable to stat [Sun May 31 08:45:11.902896 2026] [php:error] [pid 34012] [client 117.2.121.204:55260] script '/var/www/html/brume.org/radios/wp-login.php' not found or unable to stat [Sun May 31 08:45:11.904047 2026] [php:error] [pid 35962] [client 117.2.121.204:55261] script '/var/www/html/brume.org/radios/xmlrpc.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇺🇦 URAN Publishing Service	2026-05-31 00:58:00 (1 week ago)	117.2.121.204 - - [31/May/2026:03:57:59 +0300] "GET /xmlrpc.php HTTP/1.1" 404 3116 "-" "Mozilla/5.0 ... show more 117.2.121.204 - - [31/May/2026:03:57:59 +0300] "GET /xmlrpc.php HTTP/1.1" 404 3116 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/124.0" ... show less	Web App Attack
🇨🇦 1gz	2026-05-31 00:39:05 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from VN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-login.php UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/124.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇦 URAN Publishing Service	2026-05-30 15:48:51 (1 week ago)	117.2.121.204 - - [30/May/2026:18:48:51 +0300] "GET /wp-includes/js/wp-emoji-release.min.js HTTP/1.1 ... show more 117.2.121.204 - - [30/May/2026:18:48:51 +0300] "GET /wp-includes/js/wp-emoji-release.min.js HTTP/1.1" 404 762 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/124.0" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2026-05-30 11:03:23 (1 week ago)	117.2.121.204 - - [30/May/2026:14:03:19 +0300] "GET /wp-login.php HTTP/1.1" 404 762 "-" "Mozilla/5.0 ... show more 117.2.121.204 - - [30/May/2026:14:03:19 +0300] "GET /wp-login.php HTTP/1.1" 404 762 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/124.0" 117.2.121.204 - - [30/May/2026:14:03:19 +0300] "GET /wp-includes/js/wp-emoji-release.min.js HTTP/1.1" 404 762 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/124.0" ... show less	Web App Attack
🇲🇽 octageeks.com	2026-05-28 04:07:17 (1 week ago)	Wordpress malicious attack:[octablocked]	Web App Attack
Anonymous	2026-05-26 07:00:03 (1 week ago)	\| [Dangerous/Vietnam] Aggressive IP 117.2.121.204 (~30 hits). Type: DoS Defender- Web server 400 err ... show more \| [Dangerous/Vietnam] Aggressive IP 117.2.121.204 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇧🇪 cmbplf	2026-05-26 06:34:00 (1 week ago)	173 requests with url.path */package.json	Brute-Force Bad Web Bot
🇪🇸 masterguru	2026-05-26 05:24:39 (1 week ago)	xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (1020-123)	Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.241.173.215

🇧🇪 146.148.16.120

🇺🇸 137.27.32.70

🇬🇧 81.19.219.243

🇺🇸 34.162.165.166

🇭🇰 23.91.97.170

🇰🇷 221.167.50.229

🇺🇸 216.144.226.214

🇯🇵 207.56.229.19

🇺🇸 206.221.176.60

🇲🇾 175.144.255.252

🇺🇸 172.174.235.159

🇺🇸 147.185.132.51

🇹🇼 125.229.218.214

🇨🇳 118.212.120.167

🇧🇩 114.130.85.36

🇨🇳 101.71.208.95

🇺🇸 47.185.238.84

🇷🇺 45.91.64.7

🇸🇬 43.134.23.177