JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 203.91.121.230

203.91.121.230 was found in our database!

This IP was reported 125 times. Confidence of Abuse is 65%: ?

65%

ISP	Network Technology Experiment Validation and Demonstration Center
Usage Type	University/College/School
ASN	AS4538
Domain Name	cernet.edu.cn
Country	🇨🇳 China
City	Beijing, Beijing

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 203.91.121.230

Whois 203.91.121.230

IP Abuse Reports for 203.91.121.230:

This IP address has been reported a total of 125 times from 41 distinct sources. 203.91.121.230 was first reported on April 8th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-08-19 10:58:13 (1 week ago)	[19/Aug/2026:13:58:13 +0300] -- 203.91.121.230 Ban reason: User-Agent python-requests	Bad Web Bot Web App Attack
🇮🇹 alessio loto	2026-08-19 00:26:19 (1 week ago)	WAF Detection: Security_Scanner_Blocked (Abusive IP). AI Confirmed Attack Payload.	Bad Web Bot
🇺🇦 URAN Publishing Service	2026-08-18 07:37:04 (1 week ago)	[18/Aug/2026:10:37:03 +0300] -- 203.91.121.230 Ban reason: User-Agent python-requests	Bad Web Bot Web App Attack
🇺🇸 1gz	2026-08-15 16:22:01 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET m ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 LRob	2026-08-15 04:23:16 (1 week ago)	Web application probing \| req: /static/static-footer-text.php \| 11 distinct paths \| UA: Mozilla/5.0 ... show more Web application probing \| req: /static/static-footer-text.php \| 11 distinct paths \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36 show less	Port Scan Web App Attack
🇮🇩 David Koswari	2026-08-14 05:09:00 (1 week ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
Anonymous	2026-08-13 14:41:02 (2 weeks ago)	Web App Attack, Hacking	Hacking Web App Attack
🇫🇷 Sklurk	2026-08-13 01:14:38 (2 weeks ago)	Web App Attack	Web App Attack
🇩🇪 bazter.pro	2026-08-12 20:56:55 (2 weeks ago)	Auto-Ban [2026-08-12 20:56:55]: CRITICAL: bot trap (soft) \| host=geofumadas.com \| route=/api/trap/in ... show more Auto-Ban [2026-08-12 20:56:55]: CRITICAL: bot trap (soft) \| host=geofumadas.com \| route=/api/trap/internal/reviews-sync \| hits=1 \| ua=Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like show less	Hacking Web App Attack
🇫🇷 conseilgouz	2026-08-12 15:32:51 (2 weeks ago)	jow-Joomla User : try to access forms...	Hacking
🇦🇺 aranguren.org	2026-08-12 08:09:21 (2 weeks ago)	203.91.121.230 - - [12/Aug/2026:18:09:20 +1000] "GET /.google-analytics.com/ga.js HTTP/1.1" 404 985 ... show more 203.91.121.230 - - [12/Aug/2026:18:09:20 +1000] "GET /.google-analytics.com/ga.js HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 203.91.121.230 - - [12/Aug/2026:18:09:20 +1000] "GET /list.htm HTTP/1.1" 200 495 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 203.91.121.230 - - [12/Aug/2026:18:09:20 +1000] "GET /cgi-bin/nph-proxy.cgi HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 203.91.121.230 - - [12/Aug/2026:18:09:20 +1000] "GET /rutorrent/ HTTP/1.1" 401 1222 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 203.91.121.230 - - [12/Aug/2026:18:09:20 +1000] "GET /cgi-bin/dsc-grapher.pl HTTP/1.1" 401 1234 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15 ... show less	Bad Web Bot
🇺🇸 stechusa	2026-08-12 04:04:32 (2 weeks ago)	[Askari] \| country=CN \| Behavior: Concurrent page load during attack, HTTP/1.1 only, Targeting speci ... show more [Askari] \| country=CN \| Behavior: Concurrent page load during attack, HTTP/1.1 only, Targeting specific pages, Inhuman browsing speed, HTTP/1.1 over TLS show less	Bad Web Bot DDoS Attack
🇺🇸 stechusa	2026-08-12 04:04:32 (2 weeks ago)	ELEVATED_THREAT \| country=CN \| ASN=China Education and Research Network Center \| 27 IPs targeting /b ... show more ELEVATED_THREAT \| country=CN \| ASN=China Education and Research Network Center \| 27 IPs targeting /brand/satco-products-inc.html \| Facet request during elevated threat (facet_ratio=0.66, unique_ips=324) \| HTTP/1.1 over TLS (elevated=True) show less	Bad Web Bot DDoS Attack
🇮🇩 securejdprop	2026-08-11 23:11:52 (2 weeks ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-crawl-non_statics.	Hacking Web App Attack Bad Web Bot
🇨🇦 polycoda	2026-08-11 11:34:24 (2 weeks ago)	📄 Probes for tons of inexistent files and/or PHP scripts	Hacking Web App Attack

Showing 1 to 15 of 125 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇿 212.154.234.9

🇬🇧 193.163.125.86

🇺🇸 152.32.235.90

🇩🇪 151.243.11.233

🇮🇩 103.160.213.217

🇿🇦 102.215.212.15

🇷🇴 92.118.39.227

🇺🇸 68.201.126.186

🇵🇪 200.121.133.27

🇦🇷 200.31.255.252

🇵🇱 195.242.233.58

🇷🇸 188.2.182.14

🇧🇷 187.120.72.114

🇧🇷 187.0.18.168

🇺🇸 136.65.160.29

🇨🇳 125.124.226.217

🇳🇱 94.154.43.43

🇫🇷 92.222.112.225

🇫🇷 91.196.152.194

🇫🇷 91.196.152.139