JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.199.78.228

121.199.78.228 was found in our database!

This IP was reported 41 times. Confidence of Abuse is 0%: ?

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.199.78.228

Whois 121.199.78.228

IP Abuse Reports for 121.199.78.228:

This IP address has been reported a total of 41 times from 11 distinct sources. 121.199.78.228 was first reported on April 20th 2022, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 i-turnradio.nl	2026-02-11 16:36:05 (4 months ago)	2026-02-11 17:36:05 (CET) ~ Blocked by abusescan risk assessment	Web App Attack
🇮🇹 Progetto1	2026-02-06 05:35:02 (4 months ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇵🇱 IROK	2026-01-19 09:41:01 (4 months ago)	Firewall Blocked - Unauthorized Port Scanning ...	Port Scan
🇳🇱 homeshowdomain.nl	2026-01-15 22:59:44 (4 months ago)	Auto-ban: >3000 req/min op 2026-01-15	Hacking Web App Attack SSH
🇺🇸 TPI-Abuse	2026-01-15 10:53:12 (4 months ago)	(mod_security) mod_security (id:210492) triggered by 121.199.78.228 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 121.199.78.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jan 15 05:53:06.823727 2026] [security2:error] [pid 1449:tid 1449] [client 121.199.78.228:54186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jcommonsenseeconomics.banis-associates.com"] [uri "/.git/config"] [unique_id "aWjHEuqW72Ymz6U25S3xCwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-01-14 05:41:49 (4 months ago)	(mod_security) mod_security (id:240950) triggered by 121.199.78.228 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:240950) triggered by 121.199.78.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jan 14 00:41:42.201416 2026] [security2:error] [pid 8679:tid 8679] [client 121.199.78.228:40332] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\D" at TX:1. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "4530"] [id "240950"] [rev "2"] [msg "COMODO WAF: XSS & SQL injection vulnerability in Pragyan CMS 3.0 (CVE-2015-1471)\|\|beckersystems.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "beckersystems.net"] [uri "/beckerwiki/index.php/User:Biohypfokirk1986"] [unique_id "aWcsli8JxP_nOE3o1SMdDAAAAAg"], referer: http://beckersystems.net/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2023-05-06 01:31:59 (3 years ago)		Web App Attack
🇺🇸 odd.rip	2023-04-28 16:00:00 (3 years ago)	Found on a public proxy website on 4/28/2023	Open Proxy
🇺🇸 odd.rip	2023-04-27 20:35:00 (3 years ago)	Found on a public proxy website on 4/27/2023	Open Proxy
🇺🇸 odd.rip	2023-04-27 20:35:00 (3 years ago)	Found on a public proxy website on 4/27/2023	Open Proxy
🇺🇸 odd.rip	2023-04-26 15:10:00 (3 years ago)	Found on public proxy site	Open Proxy
🇯🇵 cat	2023-04-23 03:45:28 (3 years ago)	121.199.78.228 - - [23/Apr/2023:11:45:20 +0800] "GET / HTTP/1.0" 444 0 "-" "12_1_2" 121.199.78.228 - ... show more 121.199.78.228 - - [23/Apr/2023:11:45:20 +0800] "GET / HTTP/1.0" 444 0 "-" "12_1_2" 121.199.78.228 - - [23/Apr/2023:11:45:20 +0800] "GET / HTTP/1.0" 444 0 "-" "x64)" 121.199.78.228 - - [23/Apr/2023:11:45:20 +0800] "GET / HTTP/1.0" 444 0 "-" "like" ... show less	Bad Web Bot Web App Attack
🇯🇵 cat	2023-04-22 17:32:46 (3 years ago)	121.199.78.228 - - [23/Apr/2023:01:32:36 +0800] "GET / HTTP/1.0" 444 0 "-" "XWEB/1162" 121.199.78.22 ... show more 121.199.78.228 - - [23/Apr/2023:01:32:36 +0800] "GET / HTTP/1.0" 444 0 "-" "XWEB/1162" 121.199.78.228 - - [23/Apr/2023:01:32:44 +0800] "GET / HTTP/1.0" 444 0 "-" "OS" 121.199.78.228 - - [23/Apr/2023:01:32:45 +0800] "GET / HTTP/1.0" 444 0 "-" "OS" ... show less	Bad Web Bot Web App Attack
🇯🇵 cat	2023-04-22 07:32:22 (3 years ago)	121.199.78.228 - - [22/Apr/2023:15:32:18 +0800] "GET / HTTP/1.0" 444 0 "-" "MMWEBID/8124" 121.199.78 ... show more 121.199.78.228 - - [22/Apr/2023:15:32:18 +0800] "GET / HTTP/1.0" 444 0 "-" "MMWEBID/8124" 121.199.78.228 - - [22/Apr/2023:15:32:18 +0800] "GET / HTTP/1.0" 444 0 "-" "Safari/537.36" 121.199.78.228 - - [22/Apr/2023:15:32:18 +0800] "GET / HTTP/1.0" 444 0 "-" "MMWEBID/8078" ... show less	Bad Web Bot Web App Attack
🇯🇵 cat	2023-04-21 21:24:14 (3 years ago)	121.199.78.228 - - [22/Apr/2023:05:24:08 +0800] "GET / HTTP/1.0" 444 0 "-" "CPU" 121.199.78.228 - - ... show more 121.199.78.228 - - [22/Apr/2023:05:24:08 +0800] "GET / HTTP/1.0" 444 0 "-" "CPU" 121.199.78.228 - - [22/Apr/2023:05:24:08 +0800] "GET / HTTP/1.0" 444 0 "-" "DUB-AL00" 121.199.78.228 - - [22/Apr/2023:05:24:09 +0800] "GET / HTTP/1.0" 444 0 "-" "MMWEBID/1470" ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 41 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.110.147.58

🇨🇳 220.250.52.101

🇩🇪 103.75.196.199

🇺🇸 65.49.1.105

🇩🇪 64.226.86.7

🇺🇸 64.62.156.58

🇨🇳 36.155.132.175

🇳🇱 20.123.146.94

🇮🇩 210.79.191.221

🇺🇸 205.210.31.29

🇷🇺 194.190.153.226

🇰🇷 175.126.37.156

🇨🇦 138.197.137.119

🇮🇳 103.179.109.34

🇰🇿 79.134.37.180

🇷🇺 46.147.195.11

🇳🇱 45.141.58.145

🇨🇳 36.155.132.158

🇬🇧 35.203.211.107

🇬🇧 35.203.211.50