JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 101.227.222.142

101.227.222.142 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 36%: ?

36%

ISP	CHINANET SHANGHAI PROVINCE NETWORK
Usage Type	Fixed Line ISP
ASN	AS4811
Domain Name	online.sh.cn
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 101.227.222.142

Whois 101.227.222.142

IP Abuse Reports for 101.227.222.142:

This IP address has been reported a total of 11 times from 7 distinct sources. 101.227.222.142 was first reported on June 25th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇷 setupgr	2026-07-22 13:07:08 (4 hours ago)	(mod_security) mod_security (id:100011) triggered by 101.227.222.142 (CN/China/Shanghai/Shanghai/-/[ ... show more (mod_security) mod_security (id:100011) triggered by 101.227.222.142 (CN/China/Shanghai/Shanghai/-/[AS4811 CHINANET-SHANGHAI-MAN China Telecom Group]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Jul 22 16:07:06.320956 2026] [security2:error] [pid 28504:tid 28615] [client 101.227.222.142:51539] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CN" at GEO:COUNTRY_CODE. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "100011"] [msg "Traffic from CN/SG blocked for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/2019/12/%CE%9A%CE%BF%CF%85%CF%84%CE%AF-osb-2-scaled.jpg"] [unique_id "amDAeqtf_LHMe1T-loQm3AAAARA"] show less	Port Scan
🇩🇪 4server	2026-07-16 03:17:12 (6 days ago)	[ThuJul1605:17:07.9155182026][security2:error][pid3836977:tid3837063][client101.227.222.142:0]ModSec ... show more [ThuJul1605:17:07.9155182026][security2:error][pid3836977:tid3837063][client101.227.222.142:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"orabonastudio.it\"][uri\"/wp-content/uploads/2014/09/1_intero4.jpg\"][unique_id\"alhNM6iAZc5tfXwk9M70swAAAdU\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 4server	2026-07-05 20:00:01 (2 weeks ago)	[SunJul0521:59:55.4980202026][security2:error][pid3247685:tid3247756][client101.227.222.142:0]ModSec ... show more [SunJul0521:59:55.4980202026][security2:error][pid3247685:tid3247756][client101.227.222.142:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\\|wget\\|python\\|nikto\\|sqlmap\\|acunetix\\|fimap\\|dirbuster\\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"orabonastudio.it\"][uri\"/wp-content/uploads/2014/09/Depositphotos_3274370_original-650x400.jpg\"][unique_id\"akq3u2-XUyy36_0DntXjoQAAAII\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 Sklurk	2026-07-05 12:31:20 (2 weeks ago)	Web App Attack	Web App Attack
🇫🇷 Sklurk	2026-07-04 09:22:32 (2 weeks ago)	Web App Attack	Web App Attack
🇬🇷 setupgr	2026-07-01 09:46:10 (3 weeks ago)	(mod_security) mod_security (id:100011) triggered by 101.227.222.142 (CN/China/Shanghai/Shanghai/-/[ ... show more (mod_security) mod_security (id:100011) triggered by 101.227.222.142 (CN/China/Shanghai/Shanghai/-/[AS4811 CHINANET-SHANGHAI-MAN China Telecom Group]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Jul 01 12:46:10.027311 2026] [security2:error] [pid 2924765:tid 2924889] [client 101.227.222.142:17955] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "CN" at GEO:COUNTRY_CODE. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "62"] [id "100011"] [msg "Traffic from CN/SG blocked for ftiaxtomonosou.gr"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/2020/02/dark-pine-table-1-scaled-scaled.jpg"] [unique_id "akTh4iMh6wG-MSvzmYTubAAAAsk"] show less	Port Scan
🇬🇧 thetomtaylor.co.uk	2026-07-01 01:06:02 (3 weeks ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,wa01,wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-27 06:12:40 (3 weeks ago)	Image scraping bot bypassing firewall/robots.txt restrictions in getImage.asp	Bad Web Bot
🇦🇺 MAGIC	2026-06-27 04:07:15 (3 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇫🇷 Sklurk	2026-06-26 17:33:46 (3 weeks ago)	Web App Attack	Web App Attack
🇩🇪 Ba-Yu	2026-06-25 08:12:53 (3 weeks ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇾 201.217.12.57

🇻🇳 171.244.199.47

🇩🇪 167.94.146.42

🇩🇪 164.92.140.160

🇩🇿 129.45.84.119

🇷🇴 92.118.39.64

🇨🇦 85.217.149.58

🇧🇪 198.235.24.152

🇲🇦 196.92.7.246

🇨🇳 114.223.90.90

🇷🇴 92.118.39.231

🇨🇦 72.251.5.158

🇺🇸 3.89.170.186

🇰🇷 220.93.167.144

🇺🇸 216.180.246.80

🇺🇸 178.128.178.209

🇫🇷 163.172.143.147

🇸🇬 152.42.164.200

🇨🇳 118.178.85.109

🇺🇸 104.28.246.113