AbuseIPDB » 121.229.45.160
121.229.45.160
This IP was reported 8 times. Confidence of
Abuse
is 22% : ?
ISP
CHINANET jiangsu province network
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
chinatelecom.cn
Country
🇨🇳
China
City
Shanghai, Shanghai
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 121.229.45.160 :
This IP address has been reported a total of
8
times from
4 distinct
sources.
121.229.45.160 was first reported on
March 30th 2026 , and the most recent report was
40 minutes ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
mnsf
2026-06-27 20:05:11
(40 minutes ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-06-22 07:05:56
(5 days ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇫🇷
ELYAZ
2026-06-21 22:33:46
(5 days ago)
(y4) Failed scan -byebye- from 121.229.45.160 (CN/China/-): (CF_ENABLE)
Hacking
🇺🇸
TPI-Abuse
2026-06-16 21:39:32
(1 week ago)
(mod_security) mod_security (id:225170) triggered by 121.229.45.160 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 121.229.45.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 17:39:23.597780 2026] [security2:error] [pid 20421:tid 20421] [client 121.229.45.160:40502] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ubuciko.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ubuciko.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajHCiyt1ip9aNqNJh3l2QgAAAAM"], referer: https://ubuciko.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 20:07:55
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 121.229.45.160 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 121.229.45.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 16:07:50.181243 2026] [security2:error] [pid 26996:tid 26996] [client 121.229.45.160:47416] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.darkalleyproductions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.darkalleyproductions.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "agtxliKxIYbKG5a3s0KkNQAAAAA"], referer: https://www.darkalleyproductions.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-14 05:19:24
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 121.229.45.160 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 121.229.45.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 01:19:15.688047 2026] [security2:error] [pid 8114:tid 8114] [client 121.229.45.160:45874] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.hvacmechanalysis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.hvacmechanalysis.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "agVbU0YzhwhOi-ckeO_YTgAAABU"], referer: https://www.hvacmechanalysis.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-09 01:56:39
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 121.229.45.160 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 121.229.45.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 21:56:33.790670 2026] [security2:error] [pid 12801:tid 12801] [client 121.229.45.160:39026] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.fundingworkingcapital.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.fundingworkingcapital.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "af6UUZAikWG02OXMlI14RQAAAA0"], referer: https://www.fundingworkingcapital.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
octageeks.com
2026-03-30 04:07:13
(2 months ago)
Wordpress malicious attack:[octawpauthor]
Web App Attack
Showing 1 to
8
of 8 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: