JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 182.119.231.121

182.119.231.121 was found in our database!

This IP was reported 54 times. Confidence of Abuse is 39%: ?

39%

ISP	China Unicom Henan province network
Usage Type	Fixed Line ISP
ASN	AS4837
Hostname(s)	hn.kd.ny.adsl
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Zhengzhou, Henan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 182.119.231.121

Whois 182.119.231.121

IP Abuse Reports for 182.119.231.121:

This IP address has been reported a total of 54 times from 25 distinct sources. 182.119.231.121 was first reported on May 2nd 2021, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-10 12:23:11 (12 hours ago)	(mod_security) mod_security (id:949110) triggered by 182.119.231.121 (hn.kd.ny.adsl): 1 in the last ... show more (mod_security) mod_security (id:949110) triggered by 182.119.231.121 (hn.kd.ny.adsl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 08:23:06.886911 2026] [security2:error] [pid 12010:tid 12010] [client 182.119.231.121:41792] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "web239.dnchosting.com"] [uri "/setup.cgi"] [unique_id "alDkKs6bHaaQwUBiUmQ9HQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇸 Scan	2026-07-10 01:50:28 (22 hours ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
Anonymous	2026-06-28 02:23:50 (1 week ago)	182.119.231.121 - - [28/Jun/2026:04:23:49 +0200] "GET / HTTP/1.1" 403 5711 "-" "Mozilla/5.0 (Windows ... show more 182.119.231.121 - - [28/Jun/2026:04:23:49 +0200] "GET / HTTP/1.1" 403 5711 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" ... show less	Web App Attack
🇬🇧 PeravixGroup	2026-06-28 01:35:27 (1 week ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇵🇱 sefinek.net	2026-06-04 10:33:50 (1 month ago)	Honeypot hit: Large payload (1457 bytes); 9080 [1] TCP Reported by: https://github.com/sefinek/T-Pot ... show more Honeypot hit: Large payload (1457 bytes); 9080 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot
🇬🇧 PeravixGroup	2026-06-04 00:04:06 (1 month ago)	Honeypot detection: SMTP abuse / unauthorized email relay attempt on port 25. Severity: MEDIUM. Aara ... show more Honeypot detection: SMTP abuse / unauthorized email relay attempt on port 25. Severity: MEDIUM. Aaran.cloud show less	Email Spam
Anonymous	2026-06-03 12:20:10 (1 month ago)	Honeypot hit: Unauthorized traffic (100 bytes of payload); 11310 [1] TCP Reported by: https://github ... show more Honeypot hit: Unauthorized traffic (100 bytes of payload); 11310 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇬🇧 PeravixGroup	2026-06-03 11:20:00 (1 month ago)	Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ... show more Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 MPL	2026-06-03 03:41:36 (1 month ago)	tcp/8125 (2 or more attempts)	Port Scan
🇷🇸 Scan	2026-06-03 02:51:20 (1 month ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇬🇧 PeravixGroup	2026-06-02 11:10:58 (1 month ago)	Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ... show more Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 MPL	2026-06-02 07:47:08 (1 month ago)	tcp/20121	Port Scan
🇬🇧 PeravixGroup	2026-06-02 02:45:37 (1 month ago)	Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ... show more Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇲🇳 Public CSIRT/CC of Mongolia	2026-06-01 23:03:53 (1 month ago)	Honeypot hit: Large payload (1457 bytes); 9042 [1] TCP	Hacking
🇺🇸 MPL	2026-06-01 21:02:32 (1 month ago)	tcp/8090 (2 or more attempts)	Port Scan

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.154.143.136

🇩🇪 213.209.159.113

🇺🇸 205.210.31.103

🇦🇪 176.204.4.160

🇺🇸 162.217.100.201

🇩🇪 159.69.248.113

🇬🇧 154.16.44.64

🇹🇭 152.32.247.23

🇬🇧 150.228.9.187

🇺🇸 146.70.211.75

🇸🇬 139.59.234.233

🇺🇸 100.51.6.16

🇧🇬 91.92.47.208

🇫🇷 85.217.140.33

🇺🇸 66.132.195.71

🇨🇦 62.169.135.110

🇨🇳 58.59.233.161

🇨🇳 58.33.101.190

🇺🇸 54.90.247.162

🇷🇺 46.236.165.36