AbuseIPDB » 113.222.189.221
113.222.189.221 was found in our database!
This IP was reported 3 times. Confidence of
Abuse
is 2% : ?
ISP
CHINANET HUNAN PROVINCE NETWORK
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
chinatelecom.cn
Country
๐จ๐ณ
China
City
Changsha, Hunan
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 113.222.189.221 :
This IP address has been reported a total of
3
times from
3 distinct
sources.
113.222.189.221 was first reported on
June 16th 2025 , and the most recent report was
3 weeks ago .
Old Reports:
The most recent abuse report for this IP address is from
3 weeks ago
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐บ๐ธ
TPI-Abuse
2026-06-29 20:15:51
(3 weeks ago)
(mod_security) mod_security (id:210831) triggered by 113.222.189.221 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210831) triggered by 113.222.189.221 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 16:15:47.213932 2026] [security2:error] [pid 7756:tid 7756] [client 113.222.189.221:23872] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||aquatech-ind.com|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "aquatech-ind.com"] [uri "/index.html"] [unique_id "akLScybbHQNIoXngcRnXEQAAABc"], referer: https://aquatech-ind.com/index.html
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
www.elivecd.org
2025-07-21 03:47:02
(11 months ago)
113.222.189.221 - - [21/Jul/2025:04:47:02 +0100] "GET /newsletters/?reflect_133_month=9&reflect_133_ ...
show more
113.222.189.221 - - [21/Jul/2025:04:47:02 +0100] "GET /newsletters/?reflect_133_month=9&reflect_133_year=2011&reflect_133_day=false&reflect_133_start=0&reflect_127_year=2011&reflect_127_month=false&reflect_127_day=false&reflect_127_start=0 HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; CentOS Ubuntu 19.04) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5957.0 Safari/537.36"
...
show less
DDoS Attack
๐ณ๐ฑ
Mangelot Hosting
2025-06-16 22:02:50
(1 year ago)
(bad_user_agent) srv101 Bad User-Agent 113.222.189.221 (CN/China/-): 2 in the last 3600 secs; Ports: ...
show more
(bad_user_agent) srv101 Bad User-Agent 113.222.189.221 (CN/China/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
Showing 1 to
3
of 3 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: