This IP address has been reported a total of
4
times from
3 distinct
sources.
222.142.106.113 was first reported on
July 10th 2026 , and the most recent report was
7 hours ago Italy
with 1
report.
The only category in these recent reports was:
Web App Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇮🇹
CoreTech srl
2026-09-23 19:26:38
(7 hours ago)
cloudlinux2 fail2ban: 2026-09-23 21:15:13,690 fail2ban.filter [1603]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-23 21:15:13,690 fail2ban.filter [1603]: INFO [plesk-modsecurity] Found 47.79.206.95 - 2026-09-23 21:15:13cloudlinux2 fail2ban: 2026-09-23 21:15:28,132 fail2ban.filter [1603]: INFO [plesk-panel] Found 196.196.23.45 - 2026-09-23 21:15:27cloudlinux2 fail2ban: 2026-09-23 21:15:46,685 fail2ban.filter [1603]: INFO [plesk-modsecurity] Found 190.185.150.17 - 2026-09-23 21:15:46cloudlinux2 fail2ban: 2026-09-23 21:15:49,400 fail2ban.filter [1603]: INFO [plesk-modsecurity] Found 222.142.106.113 - 2026-09-23 21:15:49cloudlinux2 fail2ban: 2026-09-23 21:15:57,423 fail2ban.filter [1603]: INFO [plesk-modsecurity] Found 190.185.150.17 - 2026-09-23 21:15:57cloudlinux2 fail2ban: 2026-09-23 21:16:22,788 fail2ban.filter [1603]: INFO [plesk-wordpress] Found 193.36.224.37 - 2026-09-23 21:16:22cloudlinux2 fail2ban: 2026-09-23 21:16:18,716 fail2ban.filter [1603]: INFO [plesk-wordpress] Found 193.36.224.37 - 2026-09-23 21:16:17cl
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-07-11 02:11:40
(2 months ago)
(mod_security) mod_security (id:210831) triggered by 222.142.106.113 (hn.kd.ny.adsl): 1 in the last ...
show more
(mod_security) mod_security (id:210831) triggered by 222.142.106.113 (hn.kd.ny.adsl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 22:11:31.773018 2026] [security2:error] [pid 25358:tid 25358] [client 222.142.106.113:51883] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.dluxe.group|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.dluxe.group"] [uri "/"] [unique_id "alGmU9zhwsZJ4B9umu8N4gAAAAU"], referer: https://www.dluxe.group/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-10 19:19:02
(2 months ago)
(mod_security) mod_security (id:210831) triggered by 222.142.106.113 (hn.kd.ny.adsl): 1 in the last ...
show more
(mod_security) mod_security (id:210831) triggered by 222.142.106.113 (hn.kd.ny.adsl): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 10 15:18:56.944912 2026] [security2:error] [pid 24874:tid 24874] [client 222.142.106.113:52932] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.line2.biz|F|4"] [data "User-Agent"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.line2.biz"] [uri "/.403.html"] [unique_id "alFFoBzMNHHIPtXFCFvkEgAAAAA"], referer: https://www.line2.biz/.403.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇳
Peter Yu
2026-07-10 18:44:33
(2 months ago)
Bad Web Bot
Web App Attack
Showing 1 to
4
of 4 reports
