JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 110.189.152.166

110.189.152.166 was found in our database!

This IP was reported 92 times. Confidence of Abuse is 40%: ?

40%

ISP	CHINANET Sichuan province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Chengdu, Sichuan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 110.189.152.166

Whois 110.189.152.166

IP Abuse Reports for 110.189.152.166:

This IP address has been reported a total of 92 times from 33 distinct sources. 110.189.152.166 was first reported on February 11th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 OptimusGO	2026-07-25 05:33:11 (1 day ago)	Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Time ... show more Malicious activity detected: web_attack Server: commstackbc (185.127.18.66) Attack: web_attack Timestamp: 2026-07-25 06:33:11 UTC Log evidence: 07/25/2026-06:33:11.052656 [] [1:2010935:3] ET SCAN Suspicious inbound to MSSQL port 1433 [] [Classification: Potentially Bad Traffic] [Priority: 2] {TCP} 110.189.152.166:61681 -> 185.127.18.66:1433 show less	Port Scan Brute-Force
🇺🇸 xmission.com	2026-07-10 07:23:03 (2 weeks ago)	Blocked by UFW (TCP on 1433) Source port: 54671 TTL: 116 Packet length: 52 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 1433) Source port: 54671 TTL: 116 Packet length: 52 TOS: 0x00 This report (for 110.189.152.166) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 urnilxfgbez	2026-06-15 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 RAP	2026-06-15 15:52:25 (1 month ago)	2026-06-15 15:52:25 UTC Unauthorized activity to TCP port 1433. SQL	Port Scan
🇺🇸 RAP	2026-06-15 15:19:18 (1 month ago)	2026-06-15 15:19:18 UTC Unauthorized activity to TCP port 1433. SQL	Port Scan
🇦🇹 urnilxfgbez	2026-06-14 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇩🇪 D3RP4UL	2026-06-13 07:57:12 (1 month ago)	MSSQL traffic (on 1433) with username sa and empty password	Brute-Force
🇺🇸 xmission.com	2026-06-12 09:12:54 (1 month ago)	Blocked by UFW (TCP on 1433) Source port: 55078 TTL: 243 Packet length: 44 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 1433) Source port: 55078 TTL: 243 Packet length: 44 TOS: 0x00 This report (for 110.189.152.166) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 AS213449.net	2026-06-11 05:06:30 (1 month ago)	06/11/2026-07:06:20.102181 src=110.189.152.166 dst=5.175.170.46:1433 proto=6 msg=ET SCAN Suspicious ... show more 06/11/2026-07:06:20.102181 src=110.189.152.166 dst=5.175.170.46:1433 proto=6 msg=ET SCAN Suspicious inbound to MSSQL port 1433 show less	SQL Injection
🇩🇪 AS213449.net	2026-06-11 04:51:30 (1 month ago)	06/11/2026-06:51:23.332598 src=110.189.152.166 dst=5.175.170.38:1433 proto=6 msg=ET SCAN Suspicious ... show more 06/11/2026-06:51:23.332598 src=110.189.152.166 dst=5.175.170.38:1433 proto=6 msg=ET SCAN Suspicious inbound to MSSQL port 1433 show less	SQL Injection
🇩🇪 AS213449.net	2026-06-11 04:34:57 (1 month ago)	06/11/2026-06:34:48.072217 src=110.189.152.166 dst=5.175.170.139:1433 proto=6 msg=ET SCAN Suspicious ... show more 06/11/2026-06:34:48.072217 src=110.189.152.166 dst=5.175.170.139:1433 proto=6 msg=ET SCAN Suspicious inbound to MSSQL port 1433 show less	SQL Injection
🇩🇪 AS213449.net	2026-06-11 04:13:16 (1 month ago)	06/11/2026-06:13:13.072204 src=110.189.152.166 dst=5.175.170.32:1433 proto=6 msg=ET SCAN Suspicious ... show more 06/11/2026-06:13:13.072204 src=110.189.152.166 dst=5.175.170.32:1433 proto=6 msg=ET SCAN Suspicious inbound to MSSQL port 1433 show less	SQL Injection
🇩🇪 AS213449.net	2026-06-11 03:54:59 (1 month ago)	06/11/2026-05:54:56.483436 src=110.189.152.166 dst=5.175.170.8:1433 proto=6 msg=ET SCAN Suspicious i ... show more 06/11/2026-05:54:56.483436 src=110.189.152.166 dst=5.175.170.8:1433 proto=6 msg=ET SCAN Suspicious inbound to MSSQL port 1433 show less	SQL Injection
🇩🇪 AS213449.net	2026-06-11 03:38:26 (1 month ago)	06/11/2026-05:38:19.528281 src=110.189.152.166 dst=5.175.170.39:1433 proto=6 msg=ET SCAN Suspicious ... show more 06/11/2026-05:38:19.528281 src=110.189.152.166 dst=5.175.170.39:1433 proto=6 msg=ET SCAN Suspicious inbound to MSSQL port 1433 show less	SQL Injection
🇩🇪 AS213449.net	2026-06-11 03:18:34 (1 month ago)	06/11/2026-05:18:24.502184 src=110.189.152.166 dst=5.175.170.111:1433 proto=6 msg=ET SCAN Suspicious ... show more 06/11/2026-05:18:24.502184 src=110.189.152.166 dst=5.175.170.111:1433 proto=6 msg=ET SCAN Suspicious inbound to MSSQL port 1433 show less	SQL Injection

Showing 1 to 15 of 92 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 20.14.73.54

🇩🇪 213.209.159.235

🇫🇷 213.32.24.2

🇺🇸 192.101.68.88

🇺🇸 147.185.132.240

🇿🇦 102.64.41.151

🇦🇺 20.190.167.18

🇺🇸 172.217.41.145

🇸🇬 103.13.206.152

🇺🇸 4.246.117.137

🇮🇳 203.192.197.77

🇲🇽 177.249.173.205

🇸🇪 171.25.158.80

🇹🇷 84.247.20.20

🇵🇰 59.103.104.111

🇺🇸 20.65.194.112

🇨🇳 222.71.205.34

🇰🇭 175.100.46.100

🇫🇷 143.244.57.118

🇸🇬 103.187.147.214