JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.127.34.140

121.127.34.140 was found in our database!

This IP was reported 451 times. Confidence of Abuse is 0%: ?

ISP	Ryamer, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS400587
Domain Name	ryamer.com
Country	🇺🇸 United States of America
City	Chicago, Illinois

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.127.34.140

Whois 121.127.34.140

IP Abuse Reports for 121.127.34.140:

This IP address has been reported a total of 451 times from 147 distinct sources. 121.127.34.140 was first reported on May 25th 2025, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇳 ThreatBook.io	2026-03-09 22:48:04 (3 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/121.127.34.140 2026-03 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/121.127.34.140 2026-03-09 02:32:53 / show less	Web App Attack
🇬🇧 Interceptor_HQ	2026-03-09 02:29:04 (3 months ago)	request_uri: / -- automatic report --	Brute-Force Hacking
Anonymous	2026-03-08 19:27:11 (3 months ago)	121.127.34.140 - - [08/Mar/2026:20:27:05 +0100] "GET / HTTP/1.1" 403 548 "http://phpmyadmin.app6.gl- ... show more 121.127.34.140 - - [08/Mar/2026:20:27:05 +0100] "GET / HTTP/1.1" 403 548 "http://phpmyadmin.app6.gl-amf.org/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 Gabriel Camargo	2026-03-08 19:23:14 (3 months ago)	121.127.34.140 - - [08/Mar/2026:14:23:14 -0500] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linu ... show more 121.127.34.140 - - [08/Mar/2026:14:23:14 -0500] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 121.127.34.140 - - [08/Mar/2026:14:23:14 -0500] "GET /js/validators.min.js HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 121.127.34.140 - - [08/Mar/2026:14:23:14 -0500] "GET /js/email.js HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" ... show less	Brute-Force SSH
🇩🇰 RhQM	2026-03-08 08:01:42 (3 months ago)		Bad Web Bot Exploited Host Web App Attack
🇺🇸 gerensat	2026-03-08 04:52:59 (3 months ago)	2026-03-08 01:52:59 \| / \| [] \| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, ... show more 2026-03-08 01:52:59 \| / \| [] \| Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0 show less	Web App Attack
Anonymous	2026-03-07 13:18:41 (3 months ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack
🇩🇪 big-cloud.nl	2026-03-07 08:03:00 (3 months ago)	Try to access /xmlrpc.php	Web App Attack
🇫🇮 payincog	2026-03-07 08:02:46 (3 months ago)	Date: 07/Mar/2026:10:16:02.116969 +0300 \| Reported IP: 121.127.34.140 mod_security \| id: 920350 9491 ... show more Date: 07/Mar/2026:10:16:02.116969 +0300 \| Reported IP: 121.127.34.140 mod_security \| id: 920350 949110 932130 932235 932260 933135 934100 934130 942151 942550 \| US/pay.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; ; show less	SQL Injection Brute-Force Bad Web Bot
🇬🇧 consul.to	2026-03-07 05:13:06 (3 months ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇮 sw0ok	2026-03-07 03:28:20 (3 months ago)	time="2026-03-07T03:28:18Z" level=info msg="Access to https://portainer.sw0ok.dev/ (method GET) is n ... show more time="2026-03-07T03:28:18Z" level=info msg="Access to https://portainer.sw0ok.dev/ (method GET) is not authorized to user <anonymous>, responding with status code 302 with location redirect to https://auth.sw0ok.dev/?rd=https%3A%2F%2Fportainer.sw0ok.dev%2F&rm=GET" method=GET path=/api/authz/forward-auth remote_ip=121.127.34.140 time="2026-03-07T03:28:19Z" level=info msg="Access to https://portainer.sw0ok.dev/manifest.json (method GET) is not authorized to user <anonymous>, responding with status code 302 with location redirect to https://auth.sw0ok.dev/?rd=https%3A%2F%2Fportainer.sw0ok.dev%2Fmanifest.json&rm=GET" method=GET path=/api/authz/forward-auth remote_ip=121.127.34.140 time="2026-03-07T03:28:19Z" level=info msg="Access to https://portainer.sw0ok.dev/static/js/index.c_sODmls.js (method GET) is not authorized to user <anonymous>, responding with status code 302 with location redirect to https://auth.sw0ok.dev/?rd=https%3A%2F%2Fportainer.sw0ok.dev%2Fstatic%2Fjs%2Findex.c_sODmls.js ... show less	Brute-Force
🇨🇿 ddw	2026-03-07 00:56:10 (3 months ago)	WordPress XMLRPC.PHP Access Attempt.	Hacking Web App Attack
🇳🇱 BlueWire Hosting	2026-03-06 19:25:21 (3 months ago)	Probing websites for vulnerabilities	Web App Attack
🇨🇳 ThreatBook.io	2026-03-05 22:41:06 (3 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/121.127.34.140 2026-03 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/121.127.34.140 2026-03-05 12:05:06 / show less	Web App Attack
🇺🇸 MPL	2026-03-05 04:56:50 (3 months ago)	tcp/80 (14 or more attempts)	Port Scan

Showing 1 to 15 of 451 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇷 190.110.178.221

🇰🇷 118.37.214.187

🇮🇳 103.107.60.45

🇬🇧 45.198.224.46

🇺🇸 205.210.31.27

🇫🇮 147.185.133.45

🇺🇸 143.42.0.97

🇧🇷 138.94.136.100

🇭🇰 116.48.151.58

🇯🇵 103.163.220.26

🇩🇪 69.5.169.141

🇯🇵 45.32.62.47

🇬🇧 35.203.210.65

🇩🇪 212.227.187.197

🇫🇷 185.177.72.10

🇮🇳 103.98.37.176

🇬🇧 35.203.211.28

🇪🇹 196.189.237.172

🇯🇵 103.163.220.48

🇬🇧 35.203.210.56