JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 119.29.21.101

119.29.21.101 was found in our database!

This IP was reported 25 times. Confidence of Abuse is 0%: ?

ISP	Tencent cloud computing (Beijing) Co., Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45090
Domain Name	tencent.com
Country	🇨🇳 China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 119.29.21.101

Whois 119.29.21.101

IP Abuse Reports for 119.29.21.101:

This IP address has been reported a total of 25 times from 24 distinct sources. 119.29.21.101 was first reported on August 28th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 COMAITE	2024-08-30 00:45:22 (1 year ago)	Multiple web server 400 error codes from same source ip 119.29.21.101.	Web App Attack
🇳🇱 EGP Abuse Dept	2024-08-29 17:01:45 (1 year ago)	Unauthorized connection to Telnet port 23	Port Scan Hacking
🇩🇪 Admins@FBN	2024-08-29 15:07:25 (1 year ago)	FW-PortScan: Traffic Blocked srcport=22573 dstport=22	Port Scan Hacking SSH
🇧🇷 diego	2024-08-29 09:35:02 (1 year ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack
🇺🇸 RAP	2024-08-29 08:46:37 (1 year ago)	2024-08-29 08:46:37 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇺🇸 MPL	2024-08-29 07:09:32 (1 year ago)	tcp/22 (2 or more attempts)	Port Scan
🇳🇱 majo-it.nl	2024-08-29 00:59:46 (1 year ago)	Aug 29 00:59:42 fail2ban sshd[386638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show more Aug 29 00:59:42 fail2ban sshd[386638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.21.101 user=root Aug 29 00:59:45 fail2ban sshd[386638]: Failed password for root from 119.29.21.101 port 52000 ssh2 ... show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2024-08-29 00:26:26 (1 year ago)	(mod_security) mod_security (id:218420) triggered by 119.29.21.101 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:218420) triggered by 119.29.21.101 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 28 20:26:21.295058 2024] [security2:error] [pid 32524:tid 32524] [client 119.29.21.101:54388] [client 119.29.21.101] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.181:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.181"] [uri "/hello.world"] [unique_id "Zs_ALUnviYaN4ohlQDnagAAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 xor.st	2024-08-28 22:43:05 (1 year ago)	SSH bruteforce attempt from IP 119.29.21.101 for username root at 2024-08-28T22:43:05Z	Brute-Force SSH
🇩🇪 tg_de	2024-08-28 22:39:14 (1 year ago)	41 attempts since 28.08.2024 22:38:50 UTC - last search for: /public/index.php?s=/index/\\think\\app ... show more 41 attempts since 28.08.2024 22:38:50 UTC - last search for: /public/index.php?s=/index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=Hello show less	Web App Attack
🇨🇿 lp	2024-08-28 19:49:52 (1 year ago)	SSH Brute force: 5 attempts were recorded from 119.29.21.101 2024-08-28T21:37:01+02:00 Connection cl ... show more SSH Brute force: 5 attempts were recorded from 119.29.21.101 2024-08-28T21:37:01+02:00 Connection closed by authenticating user root 119.29.21.101 port 49224 [preauth] 2024-08-28T21:37:11+02:00 Connection closed by authenticating user root 119.29.21.101 port 51852 [preauth] 2024-08-28T21:37:26+02:00 Connection closed by authenticating user root 119.29.21.101 port 53368 [preauth] 2024-08-28T21:37:44+02:00 Connection closed by authenticating user root 119.29.21.101 port 55970 [preauth] 2024-08-28T21:37:58+02:00 Connection closed by authenticating user root 119.29.21.101 port 58674 [preauth] show less	Brute-Force SSH
🇨🇿 Countryman	2024-08-28 18:20:33 (1 year ago)	IPS detection: Apache.HTTP.Server.cgi-bin.Path.Traversal	Hacking
🇺🇸 amit177	2024-08-28 17:05:15 (1 year ago)		Brute-Force SSH
🇺🇸 RAP	2024-08-28 16:37:28 (1 year ago)	2024-08-28 16:37:28 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
Anonymous	2024-08-28 15:11:11 (1 year ago)	2024-08-28T17:10:46.107251+02:00 hvs sshd-session[33098]: Invalid user install from 119.29.21.101 po ... show more 2024-08-28T17:10:46.107251+02:00 hvs sshd-session[33098]: Invalid user install from 119.29.21.101 port 41302 2024-08-28T17:10:46.425366+02:00 hvs sshd-session[33098]: Connection closed by invalid user install 119.29.21.101 port 41302 [preauth] 2024-08-28T17:10:56.197724+02:00 hvs sshd-session[33101]: Invalid user plexuser from 119.29.21.101 port 42116 2024-08-28T17:10:56.518326+02:00 hvs sshd-session[33101]: Connection closed by invalid user plexuser 119.29.21.101 port 42116 [preauth] 2024-08-28T17:11:08.640914+02:00 hvs sshd-session[33104]: Connection closed by authenticating user root 119.29.21.101 port 43052 [preauth] ... show less	Brute-Force SSH

Showing 1 to 15 of 25 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 195.206.182.213

🇺🇸 104.21.1.204

🇺🇸 91.230.168.130

🇳🇱 45.148.10.147

🇺🇸 20.9.4.9

🇰🇷 221.156.126.1

🇯🇵 182.171.90.17

🇺🇸 162.216.150.130

🇺🇸 156.229.21.54

🇰🇷 125.139.87.30

🇻🇳 113.163.201.151

🇺🇸 104.210.140.128

🇮🇳 103.44.14.22

🇪🇸 79.116.216.220

🇰🇷 59.12.212.38

🇻🇳 58.186.20.101

🇮🇪 51.37.186.206

🇳🇱 45.148.10.152

🇬🇧 45.82.76.130

🇮🇩 36.95.127.51