JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 119.249.100.89

119.249.100.89 was found in our database!

This IP was reported 104 times. Confidence of Abuse is 47%: ?

47%

ISP	China Unicom Heibei Province Network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Luancheng, Hebei

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 119.249.100.89

Whois 119.249.100.89

IP Abuse Reports for 119.249.100.89:

This IP address has been reported a total of 104 times from 18 distinct sources. 119.249.100.89 was first reported on August 28th 2025, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇷 setupgr	2026-06-15 10:45:38 (2 hours ago)	(mod_security) mod_security (id:900001) triggered by 119.249.100.89: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:900001) triggered by 119.249.100.89: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Mon Jun 15 13:45:35.330024 2026] [security2:error] [pid 1709592:tid 1709641] [client 119.249.100.89:29779] ModSecurity: Access denied with code 403 (phase 1). Match of "rx ^(www\\\\.)?(pankoskal\\\\.gr\|sea-sound\\\\.com)$" against "REQUEST_HEADERS:Host" required. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "74"] [id "900001"] [msg "Blocked WP Login attempt on domain: villa-izabela.com"] [severity "CRITICAL"] [tag "security"] [hostname "villa-izabela.com"] [uri "/wp-login.php"] [unique_id "ai_Xz6WBS8mxmEE23cCD0wAAARQ"], referer: http://m.baidu.com/s?wd=letterk92 show less	Port Scan
🇨🇦 1gz	2026-06-15 06:46:42 (6 hours ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-json/wp/v2/tags/68499 UA: pc This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-06-14 02:53:02 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: pc This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-06-13 00:21:17 (2 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-json/wp/v2/posts/885606 UA: pc This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-12 07:30:06 (3 days ago)	(mod_security) mod_security (id:210730) triggered by 119.249.100.89 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 119.249.100.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 03:29:58.433324 2026] [security2:error] [pid 13972:tid 13989] [client 119.249.100.89:22921] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.digital4z.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.digital4z.com"] [uri "/Digital4z/wp-content/plugins/jetpack/modules/after-the-deadline/tinymce/css/WS_FTP.LOG"] [unique_id "aiu1dhn-oVU3nPWe012MewAAAA8"], referer: http://m.baidu.com/s?wd=atmosphereiga show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 1gz	2026-06-11 00:36:58 (4 days ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lifestyle/horoskopi-10-qershor-2026-cfare-kane-rezervuar-yjet-per-ju-sot/885148/ UA: pc This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-06-07 00:55:30 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: pc This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇪🇸 librebit	2026-06-07 00:11:25 (1 week ago)	Brute force	Brute-Force
🇨🇦 1gz	2026-06-06 05:55:48 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /lajme/rama-protestuesve-nuk-kam-frike-te-perballem-me-asnjeri-nuk-kerkova-negociata-se-skam-cfare-te-negocioj/884173/ UA: pc This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 SiliSoftware	2026-06-06 00:40:11 (1 week ago)	/phpBB3/viewtopic.php?t=171	Web App Attack
Anonymous	2026-06-05 16:44:30 (1 week ago)	119.249.100.89 - - [06/Jun/2026:00:44:29 +0800] "GET /wp-admin/shell.php HTTP/1.1" 404 196 "http://m ... show more 119.249.100.89 - - [06/Jun/2026:00:44:29 +0800] "GET /wp-admin/shell.php HTTP/1.1" 404 196 "http://m.baidu.com/s?wd=safetyld8" "pc" ... show less	Bad Web Bot Web App Attack
🇨🇦 1gz	2026-06-04 01:59:50 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: / UA: pc This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-06-02 01:59:51 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-json/wp/v2/posts/882960 UA: pc This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 1gz	2026-06-01 06:13:30 (2 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-json/wp/v2/tags/153971 UA: pc This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-31 05:39:15 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 119.249.100.89 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 119.249.100.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 01:39:07.232733 2026] [security2:error] [pid 3144:tid 3226] [client 119.249.100.89:62338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tomithai.com"] [uri "/wp-config.php"] [unique_id "ahvJe98fzA4wRoQwZ1trzgAAAgA"], referer: http://m.baidu.com/s?wd=pight7 show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 104 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇦 91.225.162.70

🇳🇱 77.83.39.14

🇺🇸 20.169.83.190

🇫🇷 2a02:c207:2302:6309::1

🇬🇧 198.244.226.54

🇳🇱 45.148.10.141

🇳🇱 34.34.24.223

🇺🇸 18.221.179.104

🇪🇸 196.196.150.4

🇺🇸 172.234.218.87

🇮🇳 128.185.226.14

🇰🇷 116.125.120.27

🇮🇳 103.51.139.21

🇺🇸 34.26.147.120

🇯🇵 20.153.204.5

🇧🇷 187.103.87.20

🇳🇱 172.94.9.157

🇨🇳 120.48.104.37

🇫🇮 94.159.112.56

🇺🇸 91.230.168.124