JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 176.120.110.161

176.120.110.161 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 35%: ?

35%

ISP	Gigabit-Online LLC
Usage Type	Fixed Line ISP
ASN	AS43633
Domain Name	gigabit.ua
Country	🇺🇦 Ukraine
City	Kyiv, Kyiv City

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 176.120.110.161

Whois 176.120.110.161

IP Abuse Reports for 176.120.110.161:

This IP address has been reported a total of 8 times from 8 distinct sources. 176.120.110.161 was first reported on February 22nd 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-18 19:03:14 (2 days ago)	(mod_security) mod_security (id:210350) triggered by 176.120.110.161 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:210350) triggered by 176.120.110.161 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 15:03:06.185936 2026] [security2:error] [pid 23110:tid 23110] [client 176.120.110.161:58414] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.otraes.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.otraes.com"] [uri "/contact/"] [unique_id "aq2K6iDCCsVEXvlUnMhZNQAAABM"], referer: https://otraes.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇵🇱 mkey	2026-09-14 19:45:03 (6 days ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS=23 \| HITS=2 \| IPSET=ADD \| FIRST=2026-09-14 21:39:12 \| LAST=2026-09-14 21:39:13. Last seen 2026-09-14 21:39:13. show less	Port Scan
🇫🇷 security.rdmc.fr	2026-09-14 17:18:59 (6 days ago)	Port Scan Attack proto:TCP src:26070 dst:23	Port Scan
🇺🇸 RAP	2026-08-31 07:38:11 (2 weeks ago)	2026-08-31 07:38:11 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇫🇷 Zkillu	2026-08-19 22:11:53 (1 month ago)	UDP flood (DDoS) vs AS215599: 256 pkts / 0.37 MB to UDP 80/8443 across 187 dst IP(s), 2026-08-19 21: ... show more UDP flood (DDoS) vs AS215599: 256 pkts / 0.37 MB to UDP 80/8443 across 187 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇫🇷 dmallet	2026-08-19 22:11:53 (1 month ago)	UDP flood (DDoS) vs AS215599: 256 pkts / 0.37 MB to UDP 80/8443 across 187 dst IP(s), 2026-08-19 21: ... show more UDP flood (DDoS) vs AS215599: 256 pkts / 0.37 MB to UDP 80/8443 across 187 dst IP(s), 2026-08-19 21:46 to 2026-08-20 00:36 CEST. No legitimate service on these UDP ports (7-day baseline 0 GB/day). Carpet-bombing of a /24, likely botnet-compromised host. Evidence: sFlow + hardware ACL counters. show less	DDoS Attack Exploited Host
🇩🇪 Vegascosmetics	2026-06-15 05:35:20 (3 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
Anonymous	2026-02-22 13:42:13 (6 months ago)	DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: a ... show more DDoS botnet 510.000+ IPs; URL with bing/trustpilot/githubhelp and %C2%A4 or \xc2\xa4. NEW 09/2025: amplification attacks via third-parties e.g. HTTP_USER_AGENT facebookexternalhit/meta-externalagent/meta-externalfetcher or IPs from googleusercontent.com with fake HTTP_REFERER foxnews.com/newsweek.com/upwork.com/activision.com/... Port 443. show less	DDoS Attack Bad Web Bot Web App Attack

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 200.223.196.90

🇷🇺 194.154.92.163

🇵🇰 153.117.1.1

🇨🇳 111.57.17.167

🇺🇸 109.105.209.15

🇬🇧 35.242.168.101

🇺🇸 34.186.131.93

🇮🇳 34.180.20.66

🇶🇦 34.18.160.145

🇮🇳 8.234.95.85

🇨🇳 120.48.28.60

🇭🇰 118.193.34.74

🇧🇫 98.97.175.185

🇨🇦 34.95.61.66

🇭🇰 34.92.80.233

🇮🇹 5.88.119.21

🇭🇰 2406:da1e:4b7:e600:908c:25d9:a0c:a55e

🇦🇷 181.87.115.47

🇸🇬 161.118.254.28

🇵🇰 153.117.68.225