JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 119.186.216.134

119.186.216.134 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 5%: ?

ISP	China Unicom Shandong Province Network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Qingdao, Shandong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 119.186.216.134

Whois 119.186.216.134

IP Abuse Reports for 119.186.216.134:

This IP address has been reported a total of 14 times from 2 distinct sources. 119.186.216.134 was first reported on March 22nd 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-13 21:18:12 (15 hours ago)	(mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 13 17:18:05.176475 2026] [security2:error] [pid 7067:tid 7067] [client 119.186.216.134:52445] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|wpwlv.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "wpwlv.com"] [uri "/"] [unique_id "alVWDV7ONYNdor-aVWQxbwAAAAA"], referer: http://wpwlv.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-12 21:37:31 (1 day ago)	(mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 17:37:26.007678 2026] [security2:error] [pid 14432:tid 14432] [client 119.186.216.134:53031] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.pattifox.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.pattifox.com"] [uri "/"] [unique_id "alQJFkihOk7t6MGjZW9N3wAAAAE"], referer: https://www.pattifox.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-12 17:30:12 (1 day ago)	(mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 12 13:30:09.021837 2026] [security2:error] [pid 14515:tid 14515] [client 119.186.216.134:53094] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|protonmultimedia.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "protonmultimedia.com"] [uri "/"] [unique_id "alPPIVh38TJLFk-ZHeOOugAAAB8"], referer: http://protonmultimedia.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 00:44:58 (1 week ago)	(mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 20:44:53.590729 2026] [security2:error] [pid 4951:tid 4951] [client 119.186.216.134:52322] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.instepdogobedience.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.instepdogobedience.com"] [uri "/"] [unique_id "akr6hWikC8VMr292LwzsLQAAAAw"], referer: http://www.instepdogobedience.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 10:55:45 (2 weeks ago)	(mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 06:55:38.184366 2026] [security2:error] [pid 586:tid 586] [client 119.186.216.134:53445] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|namefinder.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "namefinder.com"] [uri "/"] [unique_id "akOgqhrVfEqJ-6W_sFw_rQAAACE"], referer: https://namefinder.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 07:01:05 (2 weeks ago)	(mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 03:01:00.006223 2026] [security2:error] [pid 29702:tid 29726] [client 119.186.216.134:52547] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|tusappsonline.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "tusappsonline.com"] [uri "/index.html"] [unique_id "akNprNfkT6zLgnU9bVoqDgAAABY"], referer: https://tusappsonline.com/index.html show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 21:28:19 (2 weeks ago)	(mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 17:28:12.891886 2026] [security2:error] [pid 26767:tid 26767] [client 119.186.216.134:53056] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.reyadecostarica.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.reyadecostarica.com"] [uri "/"] [unique_id "akGR7GhKA8rs7mCLybZm1AAAAAQ"], referer: http://www.reyadecostarica.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 15:00:30 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 11:00:24.904326 2026] [security2:error] [pid 2207:tid 2226] [client 119.186.216.134:51901] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|rbarw.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "rbarw.com"] [uri "/"] [unique_id "aibZCCffntGpaZ1TC0VKDgAAAVE"], referer: http://rbarw.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-03 03:16:08 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 23:16:03.532494 2026] [security2:error] [pid 24903:tid 24903] [client 119.186.216.134:52693] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.keyston.net\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.keyston.net"] [uri "/"] [unique_id "ah-cc-IixGXqk8rRqcvjagAAAAI"], referer: http://www.keyston.net/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-01 18:39:11 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 14:39:05.594943 2026] [security2:error] [pid 7438:tid 7438] [client 119.186.216.134:52097] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.images4themind.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.images4themind.com"] [uri "/"] [unique_id "ah3RyTJ9HBYQzJJh74AOfwAAAAY"], referer: http://www.images4themind.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-16 20:01:53 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 16:01:45.302718 2026] [security2:error] [pid 27816:tid 27816] [client 119.186.216.134:53418] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|forgottenvictims.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "forgottenvictims.com"] [uri "/"] [unique_id "agjNKcYwSZFcpmdJdoELJwAAAAE"], referer: http://forgottenvictims.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-05-14 19:38:07 (1 month ago)	(mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 15:38:00.730534 2026] [security2:error] [pid 19327:tid 19327] [client 119.186.216.134:53378] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|biblecalligraphy.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "biblecalligraphy.com"] [uri "/"] [unique_id "agYkmHTdLq34QgD6ue7_4QAAAAI"], referer: http://biblecalligraphy.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2026-03-30 23:07:30 (3 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/119.186.216.134 2026-03- ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/119.186.216.134 2026-03-30 02:40:53 /img/favicon.ico show less	Web App Attack
🇺🇸 TPI-Abuse	2026-03-22 11:39:06 (3 months ago)	(mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210831) triggered by 119.186.216.134 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 07:38:59.493041 2026] [security2:error] [pid 3796:tid 3796] [client 119.186.216.134:52744] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.oceanicpier.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.oceanicpier.com"] [uri "/"] [unique_id "ab_U0yhFi0gxt_ur3BTZsAAAAA0"], referer: http://www.oceanicpier.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.117

🇩🇪 193.148.56.148

🇸🇬 107.155.56.52

🇺🇸 104.21.96.38

🇧🇩 103.112.54.86

🇺🇸 67.255.206.41

🇸🇬 47.84.191.52

🇩🇪 2a09:bac5:2a96:2482::3a3:23

🇷🇺 217.78.183.212

🇩🇪 213.209.159.225

🇰🇷 211.105.129.57

🇧🇷 177.8.71.124

🇳🇱 176.65.149.182

🇩🇪 172.71.144.3

🇩🇪 167.94.146.53

🇪🇬 156.214.106.154

🇫🇷 91.231.89.228

🇫🇷 91.231.89.224

🇺🇸 65.49.1.178

🇱🇹 45.227.254.170