JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 112.112.66.89

112.112.66.89 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 0%: ?

ISP	CHINANET YUNNAN PROVINCE NETWORK
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Kunming, Yunnan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 112.112.66.89

Whois 112.112.66.89

IP Abuse Reports for 112.112.66.89:

This IP address has been reported a total of 19 times from 15 distinct sources. 112.112.66.89 was first reported on September 19th 2025, and the most recent report was 11 months ago.

Old Reports: The most recent abuse report for this IP address is from 11 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 Diskominfo Lumajang	2025-09-25 19:15:05 (11 months ago)	Security Event Detected by SOC Diskominfo Lumajang: event=ssh, hits=6	Brute-Force SSH
🇬🇧 Axel	2025-09-25 08:44:02 (11 months ago)	This IP was banned by Fail2Ban. Reason: Multiple incorrect password (SSH & BRUTE-FORCE)	SSH
🇯🇵 bluecloudwork	2025-09-24 11:19:32 (1 year ago)	Fail2Ban - Brute-force SSH server ...	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-09-23 20:08:57 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇭🇰 bluecloudwork	2025-09-23 00:57:49 (1 year ago)	Fail2Ban - \[SSHD\]Brute-force SSH server ...	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-09-23 00:08:56 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-22 20:08:56 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇷 ManuLeon	2025-09-22 04:01:42 (1 year ago)	$f2bV_matches	Brute-Force SSH
Anonymous	2025-09-22 01:30:53 (1 year ago)	SSH intruder from fail2ban ...	SSH
🇨🇳 ThreatBook.io	2025-09-22 00:13:16 (1 year ago)	ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/112.112.66.89 2025-09-21 22 ... show more ThreatBook Intelligence: Gateway more details on http://threatbook.io/ip/112.112.66.89 2025-09-21 22:41:35 ["echo \"PROC:$(nproc 2> /dev/null) UNAME:$(uname -a 2> /dev/null)\"","nproc 2> /dev/null","uname -a 2> /dev/null"] show less	SSH
🇩🇪 ghostwarriors	2025-09-21 20:50:13 (1 year ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇮🇩 asrarakhair	2025-09-21 16:53:36 (1 year ago)	(sshd) Failed SSH login from 112.112.66.89 (CN/China/-): 5 in the last 3600 secs; Ports: ; Directio ... show more (sshd) Failed SSH login from 112.112.66.89 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Sep 22 00:52:18 localhost sshd[1333323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.112.66.89 user=root Sep 22 00:52:20 localhost sshd[1333323]: Failed password for root from 112.112.66.89 port 5003 ssh2 Sep 22 00:52:50 localhost sshd[1333561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.112.66.89 user=root Sep 22 00:52:52 localhost sshd[1333561]: Failed password for root from 112.112.66.89 port 4872 ssh2 Sep 22 00:53:27 localhost sshd[1333863]: Invalid user pal from 112.112.66.89 port 7637 show less	Brute-Force SSH
🇩🇪 mattk	2025-09-21 16:01:13 (1 year ago)	Sep 21 16:01:13 sshd[2689721]: Invalid user XXXX from 112.112.66.89 port 8083	Brute-Force SSH
🇩🇪 ps-center	2025-09-21 13:17:05 (1 year ago)	C2: Brutforce ssh Login	Brute-Force
🇺🇸 Ssmidge	2025-09-21 11:38:13 (1 year ago)	Sep 21 11:38:06 vps-9 sshd[986874]: Invalid user admin from 112.112.66.89 port 4849 Sep 21 11:38:06 ... show more Sep 21 11:38:06 vps-9 sshd[986874]: Invalid user admin from 112.112.66.89 port 4849 Sep 21 11:38:06 vps-9 sshd[986874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.112.66.89 Sep 21 11:38:08 vps-9 sshd[986874]: Failed password for invalid user admin from 112.112.66.89 port 4849 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 217.60.103.135

🇦🇹 213.225.33.70

🇭🇰 150.40.242.182

🇩🇪 149.102.230.136

🇫🇮 147.185.133.252

🇬🇧 141.147.64.29

🇳🇱 46.8.68.144

🇺🇸 40.124.168.107

🇧🇩 37.111.207.31

🇳🇱 34.141.158.246

🇮🇳 203.192.232.180

🇬🇧 193.163.125.32

🇺🇸 165.154.36.243

🇺🇸 162.216.149.116

🇻🇳 113.172.75.93

🇧🇷 45.5.110.214

🇪🇬 41.196.0.221

🇹🇭 203.170.192.251

🇵🇰 202.47.50.175

🇭🇰 199.45.155.43