JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 101.91.110.142

101.91.110.142 was found in our database!

This IP was reported 74 times. Confidence of Abuse is 0%: ?

ISP	CHINANET SHANGHAI PROVINCE NETWORK
Usage Type	Fixed Line ISP
ASN	AS4811
Domain Name	online.sh.cn
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 101.91.110.142

Whois 101.91.110.142

IP Abuse Reports for 101.91.110.142:

This IP address has been reported a total of 74 times from 49 distinct sources. 101.91.110.142 was first reported on August 27th 2025, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 David Koswari	2026-03-30 05:45:00 (2 months ago)	REQ_BLOCKED_ACL	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇺🇸 LotPhantom	2026-03-26 06:15:27 (2 months ago)	101.91.110.142 - - [26/Mar/2026:06:15:23 +0000] "GET /sitemap.xml HTTP/1.1" 404 0 "http://job-search ... show more 101.91.110.142 - - [26/Mar/2026:06:15:23 +0000] "GET /sitemap.xml HTTP/1.1" 404 0 "http://job-search-api.bridginggaps.tech/sitemap.xml" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" ... show less	Web App Attack
🇫🇷 Murazaki	2026-03-25 23:47:49 (2 months ago)	101.91.110.142 - - [25/Mar/2026:19:42:02 +0100] "\x16\x03\x01\x01\x17\x01\x00\x01\x13\x03\x03\xAE\xD ... show more 101.91.110.142 - - [25/Mar/2026:19:42:02 +0100] "\x16\x03\x01\x01\x17\x01\x00\x01\x13\x03\x03\xAE\xDB\xC6\x84@\xA4r\x5C\x84\xCA\x92P\xCC\x8B.H\xCD\xEA@\x19^\x14Y\xA2u\xE9\x14\xCB4\x80\xCDU \xBF\xFB\xD2\x0E\xA95,\xB2\xC3\xF3<\x04\xDFS\xEC\x8Eu\xD4" 500 170 "-" "-" "-" ... show less	Hacking
🇫🇷 masterguru	2026-03-23 09:04:05 (2 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 101.91.110.142 (CN/China/-): 1 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 101.91.110.142 (CN/China/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇩🇪 KI-Netzwerk	2026-03-13 16:25:05 (2 months ago)	Bad Calls: Webpage scraping, Web App Attack	Bad Web Bot Exploited Host Web App Attack
🇦🇺 afleventoffice.com.au	2026-03-12 08:24:12 (2 months ago)	GET /config.json HTTP/1.1	Web App Attack
🇳🇱 soverin	2026-03-12 03:52:47 (2 months ago)	Network scan on port 443	Email Spam
🇫🇷 gianluca.demartino75	2026-03-03 23:42:07 (3 months ago)	2026-03-04T00:41:51.241951+01:00 vps-49934a4d kernel: [1224082.789133] NFT-DROP: IN=ens3 OUT= MAC=fa ... show more 2026-03-04T00:41:51.241951+01:00 vps-49934a4d kernel: [1224082.789133] NFT-DROP: IN=ens3 OUT= MAC=fa:16:3e:3c:c3:eb:62:b6:6b:82:de:b8:08:00 SRC=101.91.110.142 DST=51.75.247.169 LEN=60 TOS=0x00 PREC=0x00 TTL=38 ID=29857 DF PROTO=TCP SPT=40892 DPT=80 WINDOW=42300 RES=0x00 SYN URGP=0 2026-03-04T00:41:52.277360+01:00 vps-49934a4d kernel: [1224083.824595] NFT-DROP: IN=ens3 OUT= MAC=fa:16:3e:3c:c3:eb:62:b6:6b:82:de:b8:08:00 SRC=101.91.110.142 DST=51.75.247.169 LEN=60 TOS=0x00 PREC=0x00 TTL=38 ID=29858 DF PROTO=TCP SPT=40892 DPT=80 WINDOW=42300 RES=0x00 SYN URGP=0 2026-03-04T00:41:54.328678+01:00 vps-49934a4d kernel: [1224085.871340] NFT-DROP: IN=ens3 OUT= MAC=fa:16:3e:3c:c3:eb:62:b6:6b:82:de:b8:08:00 SRC=101.91.110.142 DST=51.75.247.169 LEN=60 TOS=0x00 PREC=0x00 TTL=38 ID=29859 DF PROTO=TCP SPT=40892 DPT=80 WINDOW=42300 RES=0x00 SYN URGP=0 2026-03-04T00:41:58.358470+01:00 vps-49934a4d kernel: [1224089.903368] NFT-DROP: IN=ens3 OUT= MAC=fa:16:3e:3c:c3:eb:62:b6:6b:82:de:b8:08:00 SRC=101.91. ... show less	DDoS Attack
🇳🇱 jjnxpct	2026-03-03 04:53:12 (3 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /config.json (Rule ID: 930130) - Restricted File Access Attempt show less	Web App Attack Hacking
🇳🇱 jjnxpct	2026-03-02 04:46:58 (3 months ago)	Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ... show more Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /config.json (Rule ID: 930130) - Restricted File Access Attempt show less	Web App Attack Hacking
🇨🇦 Ashgrinder_00013	2026-03-01 22:07:46 (3 months ago)	inout; Ports: ; Direction: 1; Trigger: (Web_Vulnerability_Scan) LABEL: Web_Vulnerability_Scan \| DES ... show more inout; Ports: ; Direction: 1; Trigger: (Web_Vulnerability_Scan) LABEL: Web_Vulnerability_Scan \| DESC: ALERT:_Bot_scanning_for_web_vulnerabilities_on_Port_443 101.91.110.142 (CN/China/-): 1 in the last 3600 secs; Logs: show less	Port Scan
🇩🇪 Hugopvigo	2026-02-02 21:31:00 (4 months ago)	"2026-02-02 21:31:00+00:00 101.91.110.142 IP con score alto (75) detectada en el log."	Brute-Force SSH
🇳🇱 i-turnradio.nl	2026-01-30 13:42:25 (4 months ago)	2026-01-30 14:42:24 (CET) ~ Blocked by abusescan risk assessment	Web App Attack
🇷🇸 Smel	2026-01-30 11:52:05 (4 months ago)	HTTP/80/443/8080 Unauthorized Probe, Hack -	Hacking Web App Attack
🇨🇭 Ribeye375	2026-01-30 08:05:47 (4 months ago)	HIPS fake-user-agent - Block tcp/0:65535	Port Scan Bad Web Bot

Showing 1 to 15 of 74 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 203.145.143.163

🇺🇸 165.227.95.101

🇺🇸 162.216.150.211

🇺🇸 146.88.240.174

🇧🇩 103.183.62.3

🇧🇩 103.183.62.1

🇩🇪 69.5.169.98

🇩🇪 69.5.169.11

🇺🇸 216.25.89.147

🇺🇸 205.210.31.92

🇺🇸 205.210.31.57

🇺🇸 204.48.24.130

🇩🇪 185.242.3.226

🇷🇺 172.71.184.209

🇺🇸 147.185.132.40

🇦🇺 94.139.46.104

🇺🇸 66.132.195.89

🇺🇸 66.132.186.165

🇺🇸 66.132.172.212

🇧🇪 34.52.132.140