JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 101.91.134.4

101.91.134.4 was found in our database!

This IP was reported 5 times. Confidence of Abuse is 0%: ?

ISP	CHINANET SHANGHAI PROVINCE NETWORK
Usage Type	Fixed Line ISP
ASN	AS4811
Domain Name	online.sh.cn
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 101.91.134.4

Whois 101.91.134.4

IP Abuse Reports for 101.91.134.4:

This IP address has been reported a total of 5 times from 5 distinct sources. 101.91.134.4 was first reported on April 17th 2024, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2025-08-08 05:20:21 (11 months ago)	block ruleset 43A7B4C84F1C495B355A170A3ABE0D75374A5E0D	Bad Web Bot
🇺🇸 TPI-Abuse	2025-07-22 07:18:02 (11 months ago)	(mod_security) mod_security (id:210730) triggered by 101.91.134.4 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 101.91.134.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 22 03:17:56.627544 2025] [security2:error] [pid 14112:tid 14238] [client 101.91.134.4:43430] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|digital4z.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "digital4z.com"] [uri "/wp-content/plugins/jetpack/3rd-party/WS_FTP.LOG"] [unique_id "aH87JFFtD3jqYce-LZv8ggAAAQ4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 BSG Webmaster	2025-07-22 03:09:48 (11 months ago)	Hacking Attempt using path /ip on 2025-07-22 00:11:33	Hacking
🇮🇩 hermawan	2025-06-08 13:57:07 (1 year ago)	[Sun Jun 08 20:55:49.466084 2025] [security2:error] [pid 518217:tid 139881229571776] [client 101.91. ... show more [Sun Jun 08 20:55:49.466084 2025] [security2:error] [pid 518217:tid 139881229571776] [client 101.91.134.4:36622] ModSecurity: Access denied with code 403 (phase 1). Match of "ipMatch 103.166.156.58" against "REMOTE_ADDR" required. [file "/etc/modsecurity/coreruleset-4.14.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "350"] [id "440006"] [msg "Connection Close Header"] [data " Matched Data ARGS charset: - Matched Data TX.1: found within Content-Type multipart form Matched Data: close found within REMOTE_ADDR: 101.91.134.4 request_line = GET /ip HTTP/1.1 Request URI RAW = /ip Request Basename = ip"] [hostname "staklim-jatim.bmkg.go.id"] [uri "/ip"] [unique_id "aEWWZd1KrVs11tnmagHpvwAAAQw"] [staklim-jatim.bmkg.go.id] [staklim-jatim.bmkg.go.id] top=[518261] [FhcX0hfpEhQ] [aEWWZd1KrVs11tnmagHpvwAAAQw] keep_alive=[0] [2025-06-08 20:55:49.466089] [R:aEWWZd1KrVs11tnmagHpvwAAAQw] UA:'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0. ... show less	Hacking Web App Attack
🇸🇬 Charles	2024-04-17 23:29:58 (2 years ago)	101.91.134.4 - - [18/Apr/2024:07:29:57 +0800] "GET /osc1/product_info.php/manufacturers_id/11/produc ... show more 101.91.134.4 - - [18/Apr/2024:07:29:57 +0800] "GET /osc1/product_info.php/manufacturers_id/11/products_id/55/action/notify/osCsid/4op0i9n6edj3e4cnh1ea95td57 HTTP/1.1" 302 4308 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" ... show less	Web Spam Email Spam Brute-Force Bad Web Bot Web App Attack SSH

Showing 1 to 5 of 5 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 179.156.149.127

🇧🇷 177.212.123.160

🇿🇦 165.16.166.69

🇯🇵 139.162.117.40

🇺🇸 135.237.126.18

🇫🇷 92.167.16.19

🇰🇿 92.47.46.174

🇺🇸 91.230.168.129

🇳🇱 45.148.10.151

🇺🇸 2607:f8b0:4001:c20::122

🇧🇷 170.254.249.188

🇨🇳 120.228.38.131

🇯🇴 94.249.5.144

🇧🇷 45.180.99.218

🇰🇷 39.115.195.164

🇳🇱 20.71.254.235

🇫🇷 212.83.140.25

🇧🇷 189.50.199.160

🇺🇸 165.154.172.37

🇸🇪 158.174.210.161