JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 119.249.100.217

119.249.100.217 was found in our database!

This IP was reported 105 times. Confidence of Abuse is 42%: ?

42%

ISP	China Unicom Heibei Province Network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Luancheng, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 119.249.100.217

Whois 119.249.100.217

IP Abuse Reports for 119.249.100.217:

This IP address has been reported a total of 105 times from 16 distinct sources. 119.249.100.217 was first reported on August 20th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 1gz	2026-06-15 05:46:51 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lajme/cajne-rrethimin/feed/ UA: pc This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-15 02:47:04 (2 days ago)	(mod_security) mod_security (id:949110) triggered by 119.249.100.217 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:949110) triggered by 119.249.100.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 22:46:53.930820 2026] [security2:error] [pid 5526:tid 5526] [client 119.249.100.217:6568] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.justinpenney.com"] [uri "/.git/config"] [unique_id "ai9nnS_YoK2yNEmsOlWjwQAAAAQ"], referer: http://m.baidu.com/s?wd=deeplyzs7 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 01:10:14 (4 days ago)	(mod_security) mod_security (id:210730) triggered by 119.249.100.217 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 119.249.100.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 21:09:57.688389 2026] [security2:error] [pid 15810:tid 15810] [client 119.249.100.217:62793] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|munnich.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "munnich.net"] [uri "/dump.sql"] [unique_id "aiyt5RmDRRah0IDEaE2mlwAAAAk"], referer: http://m.baidu.com/s?wd=sense2r4 show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-12 08:49:51 (5 days ago)	(mod_security) mod_security (id:210730) triggered by 119.249.100.217 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210730) triggered by 119.249.100.217 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 04:49:41.284480 2026] [security2:error] [pid 12567:tid 12725] [client 119.249.100.217:35849] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.digital4z.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.digital4z.com"] [uri "/Digital4z/wp-content/plugins/jetpack/modules/publicize/WS_FTP.LOG"] [unique_id "aivIJfnmWOfBMVw5B8qdQQAAAgo"], referer: http://m.baidu.com/s?wd=is80f show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-06-12 08:30:12 (5 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: pc This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇪🇸 librebit	2026-06-11 02:33:37 (6 days ago)	Brute force	Brute-Force
🇨🇦 1gz	2026-06-08 12:29:14 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lajme/elbasani-ne-lot-per-fatjon-bunjakun-qytetare-dhe-sportdashes-i-japin-lamtumiren-e-fundit-futbollistit-te-ndjer/884583/ UA: pc This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-06-08 04:05:08 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lajme/kandidate-per-kreun-e-shtetit-nga-ldk-ish-presidentja-osmani-thirrje-qytetareve-votoni-qe-kosova-te-dale-nga-kriza/884491/ UA: pc This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-06-07 05:10:51 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-json/wp/v2/posts/396342 UA: pc This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇪🇸 librebit	2026-06-07 00:48:20 (1 week ago)	Brute force	Brute-Force
🇨🇦 1gz	2026-06-06 05:00:15 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /showbiz/a-eshte-tradhtia-arsyeja-e-ndarjes-se-mateos-dhe-brikenes/884160/ UA: pc This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-06-05 16:44:30 (1 week ago)	119.249.100.217 - - [06/Jun/2026:00:44:29 +0800] "GET /wp-admin/shell.php HTTP/1.1" 301 251 "http:// ... show more 119.249.100.217 - - [06/Jun/2026:00:44:29 +0800] "GET /wp-admin/shell.php HTTP/1.1" 301 251 "http://m.baidu.com/s?wd=safetyld8" "pc" ... show less	Bad Web Bot Web App Attack
🇨🇦 1gz	2026-06-05 08:58:41 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lajme/pamje/page/7/ UA: pc This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-06-04 11:02:10 (1 week ago)	119.249.100.217 - - [04/Jun/2026:05:02:09 -0600] "GET /.git/config HTTP/2.0" 300 4466 "http://m.baid ... show more 119.249.100.217 - - [04/Jun/2026:05:02:09 -0600] "GET /.git/config HTTP/2.0" 300 4466 "http://m.baidu.com/s?wd=ratherrw2" "pc" ... show less	Web App Attack
🇨🇦 1gz	2026-06-03 00:50:12 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-json/wp/v2/posts/738680 UA: pc This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 105 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇹 151.115.167.48

🇳🇱 91.92.42.86

🇪🇸 46.253.45.10

🇮🇷 46.100.90.90

🇩🇪 216.25.126.4

🇿🇦 196.192.181.202

🇬🇪 188.129.248.135

🇮🇳 175.101.131.169

🇮🇳 106.194.71.89

🇺🇸 52.165.88.92

🇸🇬 43.160.212.102

🇲🇷 41.188.104.16

🇺🇸 167.71.16.88

🇮🇳 117.252.241.201

🇮🇩 117.102.86.226

🇧🇬 78.128.112.30

🇰🇷 61.84.211.107

🇵🇱 54.38.52.18

🇳🇱 45.142.193.18

🇮🇩 36.65.179.96