JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 112.90.2.228

112.90.2.228 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 29%: ?

29%

ISP	China Unicom Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS136958
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 112.90.2.228

Whois 112.90.2.228

IP Abuse Reports for 112.90.2.228:

This IP address has been reported a total of 9 times from 4 distinct sources. 112.90.2.228 was first reported on August 11th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-17 13:15:17 (3 hours ago)	(mod_security) mod_security (id:210730) triggered by 112.90.2.228 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210730) triggered by 112.90.2.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 09:15:11.302619 2026] [security2:error] [pid 19188:tid 19188] [client 112.90.2.228:40515] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.nancyscafeandcatering.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nancyscafeandcatering.com"] [uri "/wp-content/themes/eatery/indian-links.com"] [unique_id "atN03zdsJLT57epWv0rZmwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mutebot.net	2026-10-15 18:30:29 (1 day ago)	SRC=112.90.2.228, PROTO=TCP, SPT=40165, DPT=8443 SRC=112.90.2.228, PROTO=TCP, SPT=40165, DPT=8443 SR ... show more SRC=112.90.2.228, PROTO=TCP, SPT=40165, DPT=8443 SRC=112.90.2.228, PROTO=TCP, SPT=40165, DPT=8443 SRC=112.90.2.228, PROTO=TCP, SPT=40165, DPT=8443 SRC=112.90.2.228, PROTO=TCP, SPT=40165, DPT=8443 show less	Port Scan
🇺🇸 mutebot.net	2026-10-13 22:59:29 (3 days ago)	SRC=112.90.2.228, PROTO=TCP, SPT=44341, DPT=8443 SRC=112.90.2.228, PROTO=TCP, SPT=44341, DPT=8443 SR ... show more SRC=112.90.2.228, PROTO=TCP, SPT=44341, DPT=8443 SRC=112.90.2.228, PROTO=TCP, SPT=44341, DPT=8443 SRC=112.90.2.228, PROTO=TCP, SPT=44341, DPT=8443 SRC=112.90.2.228, PROTO=TCP, SPT=44341, DPT=8443 SRC=112.90.2.228, PROTO=TCP, SPT=38795, DPT=8443 show less	Port Scan
🇺🇸 kosada.com	2026-10-10 15:25:57 (1 week ago)	Repeated requests classified as pathological web bot behavior, for example: /composition/?f%5B0%5D=i ... show more Repeated requests classified as pathological web bot behavior, for example: /composition/?f%5B0%5D=im_field_vuo_feature_component%3A98&f%5B1%5D=im_field_vuo_feature_component%3A133&f%5B2%5D=im_field_vuo_feature_component%3A169 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇳🇱 Traffxxx	2026-10-01 09:19:09 (2 weeks ago)	Automated bulk scraping / bad web bot. This IP issued 2731 anonymous requests to the API and content ... show more Automated bulk scraping / bad web bot. This IP issued 2731 anonymous requests to the API and content endpoints of a public web application over an observed multi-hour window, without authentication. Part of a rotating proxy pool. show less	Bad Web Bot
🇺🇸 kosada.com	2026-09-26 12:31:09 (3 weeks ago)	Repeated requests classified as pathological web bot behavior, for example: /composition/?f%5B0%5D=i ... show more Repeated requests classified as pathological web bot behavior, for example: /composition/?f%5B0%5D=im_field_vuo_feature_component%3A117&f%5B1%5D=im_field_vuo_feature_component%3A156&f%5B2%5D=im_field_vuo_feature_component%3A124 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.5112.81 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-09-16 06:50:03 (1 month ago)	Repeated requests classified as pathological web bot behavior, for example: /composition/?f%5B0%5D=i ... show more Repeated requests classified as pathological web bot behavior, for example: /composition/?f%5B0%5D=im_field_vuo_feature_component%3A271&f%5B1%5D=im_field_vuo_composition_tags%3A68&f%5B2%5D=im_field_vuo_feature_component%3A122 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36") show less	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-08-21 17:03:22 (1 month ago)	Web bot: denial-of-service flood: ["Access denied with code 406 (phase 1)", "Failed to lock global m ... show more Web bot: denial-of-service flood: ["Access denied with code 406 (phase 1)", "Failed to lock global mutex: Invalid argument"] show less	DDoS Attack Bad Web Bot
🇺🇸 kosada.com	2026-08-11 18:39:27 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇹 68.210.120.110

🇺🇦 213.139.213.36

🇵🇱 194.180.49.123

🇻🇳 164.52.105.37

🇵🇰 119.152.199.92

🇧🇬 79.124.59.130

🇺🇸 68.10.56.55

🇺🇸 20.98.155.9

🇰🇷 222.110.147.56

🇺🇸 172.178.16.179

🇷🇺 46.191.181.252

🇺🇸 40.119.44.153

🇭🇰 34.92.114.141

🇨🇳 14.103.48.24

🇬🇧 200.138.46.72

🇺🇦 194.44.251.115

🇳🇱 109.160.32.112

🇳🇱 109.160.32.104

🇧🇬 79.124.49.158

🇯🇵 64.34.94.207