AbuseIPDB » 121.127.245.133

121.127.245.133 was found in our database!

This IP was reported 93 times. Confidence of Abuse is 100%: ?

100%

ISP	MEGA-II IDC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS152194
Domain Name	worldmailhk.com
Country	Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 121.127.245.133

Whois 121.127.245.133

IP Abuse Reports for 121.127.245.133:

This IP address has been reported a total of 93 times from 36 distinct sources. 121.127.245.133 was first reported on June 3rd 2025, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
oh.mg	2025-07-12 05:11:48 (5 hours ago)	[Sat Jul 12 07:11:46.402129 2025] [security2:error] [pid 608515:tid 608519] [client 121.127.245.133: ... show more[Sat Jul 12 07:11:46.402129 2025] [security2:error] [pid 608515:tid 608519] [client 121.127.245.133:63848] [client 121.127.245.133] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 20)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "oh.mg"] [uri "/"] [unique_id "aHHukhpAbIbaQfAiGda9VQAAAAI"], referer: https://oh.mg/?tag/index=&tag={pbohome/Indexot:if(1)(usort/*%3e*/(post/*%3e*/(/*%3e*/1),create_function/*%3e*/(/*%3e*/post/*%3e*/(/*%3e*/2),post/*%3e*/(/*%3e*/3))));//)}(123){/pbhome/Indexoot:if}&tagstpl=news.html&lnoc2tspfar1_ue [Sat Jul 12 07:11:47.161807 2025] [security2:error] [pid 608515:tid 608522] [client 121.127.245.133:63848] [client 121.127.245.133] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at ... show less	Bad Web Bot Web App Attack
masterguru	2025-07-11 17:12:51 (17 hours ago)	PHP Injection Attack: High-Risk PHP Function Name Found. Matched phrase "file_put_contents" at ARGS: ... show morePHP Injection Attack: High-Risk PHP Function Name Found. Matched phrase "file_put_contents" at ARGS:3. (933150-131) show less	Hacking
IRISIO	2025-07-11 08:12:23 (1 day ago)	scans/SQL injection/spam posts : 26 queries	SQL Injection Web App Attack
Aetherweb Ark	2025-07-10 22:49:21 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 121.127.245.133 (HK/Hong Kong/-): N in the last ... show more(mod_security) mod_security (id:949110) triggered by 121.127.245.133 (HK/Hong Kong/-): N in the last X secs show less	Web App Attack
thefoofighter	2025-07-10 11:46:23 (1 day ago)	[Thu Jul 10 11:46:14.903810 2025] [:error] [pid 326959] [client 121.127.245.133:52966] [client 121.1 ... show more[Thu Jul 10 11:46:14.903810 2025] [:error] [pid 326959] [client 121.127.245.133:52966] [client 121.127.245.133] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "93"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 38)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.2"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.sourcemodding.com"] [uri "/"] [unique_id "aG-oBhc_2N4QzHYPsclRBAAAAA4"], referer: https://www.sourcemodding.com/?tag/index=&tag={pbohome/Indexot:if(1)(usort/*%3e*/(post/*%3e*/(/*%3e*/1),create_function/*%3e*/(/*%3e*/post/*%3e*/(/*%3e*/2),post/*%3e*/(/*%3e*/3))));//)}(123){/pbhome/Indexoot:if}&tagstpl=news.html&lnoc2tspfar1_ue [Thu Jul 10 11:46:23.482039 2025] [:error] [pid 327427] [client 121.127.245.133:53384] [client 121.127.245.133] ModSecurity: Access denied with cod ... show less	Bad Web Bot Web App Attack
paissangroup	2025-07-10 06:49:14 (2 days ago)	Multiple WAF Violations	Web App Attack
Site.eu	2025-07-09 03:32:17 (3 days ago)	Excessive multi-domain requests	Brute-Force
oh.mg	2025-07-08 19:32:01 (3 days ago)	[Tue Jul 08 21:32:00.870145 2025] [security2:error] [pid 682342:tid 682344] [client 121.127.245.133: ... show more[Tue Jul 08 21:32:00.870145 2025] [security2:error] [pid 682342:tid 682344] [client 121.127.245.133:53613] [client 121.127.245.133] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 20)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "oh.mg"] [uri "/"] [unique_id "aG1yMEjoT2lNJ6shvj5_1AAAAEA"], referer: https://oh.mg/?tag/index=&tag={pbohome/Indexot:if(1)(usort/*%3e*/(post/*%3e*/(/*%3e*/1),create_function/*%3e*/(/*%3e*/post/*%3e*/(/*%3e*/2),post/*%3e*/(/*%3e*/3))));//)}(123){/pbhome/Indexoot:if}&tagstpl=news.html&lnoc2tspfar1_ue ... show less	Bad Web Bot Web App Attack
joecalibre	2025-07-08 09:40:06 (4 days ago)	Malicious activity detected by monitoring system. Attack types observed: PHP RCE.	Web App Attack
oh.mg	2025-07-08 08:53:41 (4 days ago)	[Tue Jul 08 10:53:40.465787 2025] [security2:error] [pid 1528285:tid 1528310] [client 121.127.245.13 ... show more[Tue Jul 08 10:53:40.465787 2025] [security2:error] [pid 1528285:tid 1528310] [client 121.127.245.133:64326] [client 121.127.245.133] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 20)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "www.oh.mg"] [uri "/"] [unique_id "aGzclFEN26LvOAnvydC2TwAAABc"], referer: https://www.oh.mg/?tag/index=&tag={pbohome/Indexot:if(1)(usort/*%3e*/(post/*%3e*/(/*%3e*/1),create_function/*%3e*/(/*%3e*/post/*%3e*/(/*%3e*/2),post/*%3e*/(/*%3e*/3))));//)}(123){/pbhome/Indexoot:if}&tagstpl=news.html&lnoc2tspfar1_ue ... show less	Bad Web Bot Web App Attack
IRISIO	2025-07-08 07:28:47 (4 days ago)	scans/SQL injection/spam posts : 9 queries	SQL Injection Web App Attack
tentwentyfour	2025-07-08 05:08:42 (4 days ago)	Blocked for probing for web application vulnerabilities	Brute-Force Web App Attack
VXG-NET	2025-07-08 03:16:09 (4 days ago)	port=80, indicator_type=code-execution	Hacking
oh.mg	2025-07-08 01:43:20 (4 days ago)	[Tue Jul 08 03:43:18.650272 2025] [security2:error] [pid 89365:tid 89382] [client 121.127.245.133:53 ... show more[Tue Jul 08 03:43:18.650272 2025] [security2:error] [pid 89365:tid 89382] [client 121.127.245.133:53676] [client 121.127.245.133] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 20)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "oh.mg"] [uri "/"] [unique_id "aGx3toh9ZAY2pluhWsprawAAAE8"], referer: https://oh.mg/?tag/index=&tag={pbohome/Indexot:if(1)(usort/*%3e*/(post/*%3e*/(/*%3e*/1),create_function/*%3e*/(/*%3e*/post/*%3e*/(/*%3e*/2),post/*%3e*/(/*%3e*/3))));//)}(123){/pbhome/Indexoot:if}&tagstpl=news.html&lnoc2tspfar1_ue [Tue Jul 08 03:43:19.260682 2025] [security2:error] [pid 89365:tid 89372] [client 121.127.245.133:53676] [client 121.127.245.133] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX: ... show less	Bad Web Bot Web App Attack
Site.eu	2025-07-07 15:54:16 (4 days ago)	Excessive multi-domain requests	Brute-Force

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩