JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 222.138.141.12

222.138.141.12 was found in our database!

This IP was reported 2 times. Confidence of Abuse is 14%: ?

14%

ISP	China Unicom Henan province network
Usage Type	Fixed Line ISP
ASN	AS4837
Hostname(s)	hn.kd.ny.adsl
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Zhengzhou, Henan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 222.138.141.12

Whois 222.138.141.12

IP Abuse Reports for 222.138.141.12:

This IP address has been reported a total of 2 times from 2 distinct sources. 222.138.141.12 was first reported on June 28th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-06-28 19:24:43 (5 days ago)	[SunJun2821:24:41.6935342026][security2:error][pid2035340:tid2035457][client222.138.141.12:0]ModSecu ... show more [SunJun2821:24:41.6935342026][security2:error][pid2035340:tid2035457][client222.138.141.12:0]ModSecurity:Accessdeniedwithcode403$phase2$.Matchof\"rx$http://bsalsa\\\\\\\\.com\\|\^site24x7$\"against\"REQUEST_HEADERS:user-agent\"required.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"282\"][id\"330094\"][rev\"5\"][msg\"Atomicorp.comWAFRules:CompromisedUser-AgentAgentAttackblocked\"][severity\"CRITICAL\"][hostname\"www.orabonastudio.it\"][uri\"/\"][unique_id\"akF0-V7MIU7p7GYukw5DYQAAAQw\"]\,referer:https://www.orabonastudio.it/ show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-28 00:09:10 (6 days ago)	(mod_security) mod_security (id:210831) triggered by 222.138.141.12 (hn.kd.ny.adsl): 1 in the last 3 ... show more (mod_security) mod_security (id:210831) triggered by 222.138.141.12 (hn.kd.ny.adsl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 20:09:06.593454 2026] [security2:error] [pid 31740:tid 31740] [client 222.138.141.12:24306] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|www.weatherbullies.com\|F\|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.weatherbullies.com"] [uri "/"] [unique_id "akBmIrrzdK92ZXNznhKXUQAAAAY"], referer: http://www.weatherbullies.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 2 of 2 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇮 147.185.133.50

🇱🇹 77.90.185.73

🇺🇸 45.80.107.167

🇺🇸 34.197.70.90

🇫🇮 216.40.72.239

🇺🇸 216.25.89.94

🇲🇾 202.184.156.3

🇷🇺 178.207.10.91

🇺🇾 167.57.51.162

🇺🇸 136.144.42.228

🇺🇸 135.222.40.73

🇮🇳 103.104.127.211

🇸🇬 101.47.8.187

🇨🇦 85.217.149.42

🇺🇸 66.132.195.22

🇩🇪 51.75.149.221

🇭🇰 43.242.203.160

🇸🇳 41.82.50.218

🇬🇧 35.203.211.186

🇸🇪 31.134.13.201