JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 101.89.150.168

101.89.150.168 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 29%: ?

29%

ISP	CHINANET SHANGHAI PROVINCE NETWORK
Usage Type	Fixed Line ISP
ASN	AS4811
Domain Name	online.sh.cn
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 101.89.150.168

Whois 101.89.150.168

IP Abuse Reports for 101.89.150.168:

This IP address has been reported a total of 23 times from 17 distinct sources. 101.89.150.168 was first reported on January 23rd 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 el-brujo	2026-08-13 16:23:00 (1 week ago)	HTTP DDoS Attack Layer 7	DDoS Attack
🇵🇱 stareradia.pl	2026-08-09 17:41:07 (2 weeks ago)	[Sun Aug 09 19:40:38.806756 2026] [php:error] [pid 2646451:tid 2646451] [client 101.89.150.168:0] sc ... show more [Sun Aug 09 19:40:38.806756 2026] [php:error] [pid 2646451:tid 2646451] [client 101.89.150.168:0] script '/var/www/html/profile.php' not found or unable to stat, referer: https://forum-trioda.pl/ [Sun Aug 09 19:40:48.500855 2026] [php:error] [pid 2646683:tid 2646683] [client 101.89.150.168:0] script '/var/www/html/profile.php' not found or unable to stat, referer: https://forum-trioda.pl/ [Sun Aug 09 19:40:58.245482 2026] [php:error] [pid 2643627:tid 2643627] [client 101.89.150.168:0] script '/var/www/html/login.php' not found or unable to stat, referer: https://forum-trioda.pl/ [Sun Aug 09 19:41:07.083938 2026] [php:error] [pid 2646080:tid 2646080] [client 101.89.150.168:0] script '/var/www/html/profile.php' not found or unable to stat, referer: https://forum-trioda.pl/viewtopic.php?t=35735 ... show less	Web App Attack
🇺🇸 Vano Ganzzz	2026-07-30 23:51:50 (3 weeks ago)	Triggered Cloudflare WAF (l7ddos) from CN. Action taken: BLOCK ASN: 4811 (China Telecom (Group)) Pro ... show more Triggered Cloudflare WAF (l7ddos) from CN. Action taken: BLOCK ASN: 4811 (China Telecom (Group)) Protocol: HTTP/2 (POST method) Endpoint: / Timestamp: 2026-07-30T23:51:50Z Ray ID: a238460fbfe2fe3c UA: Mozilla/5.0 (Linux; Android 14; SM-G998B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Mobile Safari/537.36 show less	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-29 09:05:34 (3 weeks ago)	(mod_security) mod_security (id:217200) triggered by 101.89.150.168 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:217200) triggered by 101.89.150.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 05:05:25.702582 2026] [security2:error] [pid 954707:tid 954707] [client 101.89.150.168:59572] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header\|\|www.benissan.com\|F\|2"] [data "/contactformulier/files/mailer.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.benissan.com"] [uri "/contactformulier/files/mailer.php"] [unique_id "amnCVct2itjnWczzbkr6CQAAAAk"], referer: https://www.benissan.com/contactformulier/index.php show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Vano Ganzzz	2026-07-28 18:37:18 (3 weeks ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK ASN: 4811 (China Telecom (Gro ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: BLOCK ASN: 4811 (China Telecom (Group)) Protocol: HTTP/2 (GET method) Endpoint: / Timestamp: 2026-07-28T18:37:18Z Ray ID: a225fe8cbbec0d28 UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.8733.0 Safari/537.36 show less	Bad Web Bot
🇵🇱 mscode.pl	2026-07-20 16:11:16 (1 month ago)	Triggered Cloudflare WAF (l7ddos) from CN. Action taken: MANAGED_CHALLENGE ASN: 4811 (China Telecom ... show more Triggered Cloudflare WAF (l7ddos) from CN. Action taken: MANAGED_CHALLENGE ASN: 4811 (China Telecom (Group)) Protocol: HTTP/2 (GET method) Zone: mscode.pl Endpoint: /services UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	DDoS Attack Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2026-07-18 07:15:44 (1 month ago)	HTTP flood against /retreat-corp on Apache webserver	Brute-Force
Anonymous	2026-07-01 18:20:24 (1 month ago)	\| [Dangerous/China] Aggressive IP 101.89.150.168 (~30 hits). Type: DoS Defender- Web server 400 erro ... show more \| [Dangerous/China] Aggressive IP 101.89.150.168 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇫🇷 fastwarp	2026-06-29 12:01:22 (1 month ago)	DDoS / HTTP flood to hosting server from nginx access logs	DDoS Attack
🇪🇸 el-brujo	2026-04-18 10:59:21 (4 months ago)	Cloudflare WAF: Request Path: /hh123 Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (X11; ... show more Cloudflare WAF: Request Path: /hh123 Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Action: block Source: l7ddos ASN Description: CHINANET-SHANGHAI-MAN China Telecom Group Country: CN Method: GET Timestamp: 2026-04-18T10:59:21Z ruleId: 6e3ccc23900c428e8ec0fb8a3a679c52. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2026-04-03 18:53:24 (4 months ago)	Cloudflare WAF: Request Path: / Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Windows N ... show more Cloudflare WAF: Request Path: / Request Query: Host: elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Action: block Source: l7ddos ASN Description: CHINANET-SHANGHAI-MAN China Telecom Group Country: CN Method: GET Timestamp: 2026-04-03T18:53:24Z ruleId: 6e3ccc23900c428e8ec0fb8a3a679c52. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB). show less	Hacking SQL Injection Web App Attack
🇳🇱 Cloud86 B.V.	2026-03-26 09:13:05 (4 months ago)	categories: DDoS Attack	DDoS Attack
🇧🇪 cmbplf	2026-03-23 23:20:17 (5 months ago)	800 limiting connections by zone (2w5d21h)	DDoS Attack
🇧🇪 cmbplf	2026-03-18 07:10:18 (5 months ago)	514 limiting connections by zone (1d21h43m)	DDoS Attack
🇨🇦 1gz	2026-03-02 23:16:21 (5 months ago)	Triggered Cloudflare WAF (l7ddos) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoin ... show more Triggered Cloudflare WAF (l7ddos) from CN. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	DDoS Attack Bad Web Bot

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 172.253.209.150

🇺🇸 172.236.103.8

🇹🇼 125.231.164.116

🇺🇸 100.27.121.171

🇸🇬 97.74.87.152

🇺🇸 91.230.168.177

🇳🇱 91.92.40.29

🇬🇧 62.60.130.253

🇰🇷 61.111.250.85

🇦🇿 37.32.77.142

🇸🇬 152.32.218.149

🇺🇸 137.184.27.190

🇨🇳 123.245.84.253

🇨🇳 106.12.151.23

🇹🇳 102.107.192.60

🇨🇳 49.7.233.99

🇮🇳 47.247.73.99

🇺🇸 45.79.145.34

🇺🇸 34.67.90.238

🇰🇷 14.49.178.33