JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 113.101.246.190

113.101.246.190 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 61%: ?

61%

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 113.101.246.190

Whois 113.101.246.190

IP Abuse Reports for 113.101.246.190:

This IP address has been reported a total of 27 times from 22 distinct sources. 113.101.246.190 was first reported on May 26th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇽 octageeks.com	2026-06-06 04:17:54 (3 weeks ago)	Wordpress malicious attack:[sshd]	Web App Attack
Anonymous	2026-06-05 19:32:06 (3 weeks ago)	"POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1"	Hacking Web App Attack
🇩🇪 FunyMails	2026-06-05 14:35:41 (3 weeks ago)	2026-06-05T14:35:35.020711+00:00 localhost sshd[493601]: pam_unix(sshd:auth): authentication failure ... show more 2026-06-05T14:35:35.020711+00:00 localhost sshd[493601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.101.246.190 2026-06-05T14:35:37.209902+00:00 localhost sshd[493601]: Failed password for invalid user admin from 113.101.246.190 port 41212 ssh2 2026-06-05T14:35:40.863638+00:00 localhost sshd[493601]: Connection closed by invalid user admin 113.101.246.190 port 41212 [preauth] ... show less	Brute-Force
🇺🇸 TPI-Abuse	2026-06-05 14:10:35 (3 weeks ago)	(mod_security) mod_security (id:218420) triggered by 113.101.246.190 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:218420) triggered by 113.101.246.190 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 10:10:31.835979 2026] [security2:error] [pid 27779:tid 27779] [client 113.101.246.190:37050] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.149:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.149"] [uri "/hello.world"] [unique_id "aiLY16_ovUgBgO135dGe4wAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 sefinek.net	2026-06-05 12:50:29 (3 weeks ago)	Blocked by UFW on NY01 [22/tcp] \| SPT: 62570 \| TTL: 45 \| LEN: 40 \| TOS: 0x08 • Reported by: github.c ... show more Blocked by UFW on NY01 [22/tcp] \| SPT: 62570 \| TTL: 45 \| LEN: 40 \| TOS: 0x08 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH
🇻🇳 edata-vn	2026-06-05 11:25:31 (3 weeks ago)	2026-06-05T18:17:29.708081+07:00 euxcvn124025 sshd[2368444]: Invalid user admin from 113.101.246.190 ... show more 2026-06-05T18:17:29.708081+07:00 euxcvn124025 sshd[2368444]: Invalid user admin from 113.101.246.190 port 44684 2026-06-05T18:18:13.557546+07:00 euxcvn124025 sshd[2368452]: Invalid user orangepi from 113.101.246.190 port 58970 2026-06-05T18:23:11.061426+07:00 euxcvn124025 sshd[2368494]: Invalid user test from 113.101.246.190 port 38646 2026-06-05T18:23:53.225091+07:00 euxcvn124025 sshd[2368504]: Invalid user user from 113.101.246.190 port 42344 2026-06-05T18:25:30.477166+07:00 euxcvn124025 sshd[2368521]: Invalid user admin from 113.101.246.190 port 51038 ... show less	Brute-Force SSH
Anonymous	2026-06-05 09:32:17 (3 weeks ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-05 08:02:04 (3 weeks ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇬🇧 PeravixGroup	2026-06-05 04:53:55 (3 weeks ago)	Honeypot detection: SSH brute-force authentication attempt on port 22. Severity: MEDIUM. Aaran.cloud	SSH Brute-Force
Anonymous	2026-06-05 04:38:37 (3 weeks ago)	Port scan and brute force attack	Port Scan Brute-Force
🇺🇸 FurrIX vIX	2026-06-05 03:24:27 (3 weeks ago)	[FurrIX NOC, Automated, PHY TWO]: Bonked into empty SSH door. Whatcha looking for in there, eh?!	Brute-Force SSH
🇺🇸 xmission.com	2026-06-05 03:08:38 (3 weeks ago)	Blocked by UFW (TCP on 22) Source port: 46208 TTL: 53 Packet length: 40 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 22) Source port: 46208 TTL: 53 Packet length: 40 TOS: 0x00 This report (for 113.101.246.190) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan SSH Brute-Force
Anonymous	2026-06-04 21:41:59 (3 weeks ago)	sshd	Brute-Force SSH
🇺🇸 kathanp	2026-06-04 21:10:57 (3 weeks ago)	Jun 4 21:06:03 atlas sshd[143329]: Invalid user admin from 113.101.246.190 port 39094 Jun 4 21:06: ... show more Jun 4 21:06:03 atlas sshd[143329]: Invalid user admin from 113.101.246.190 port 39094 Jun 4 21:06:38 atlas sshd[143338]: Invalid user orangepi from 113.101.246.190 port 42378 Jun 4 21:10:56 atlas sshd[143462]: Invalid user test from 113.101.246.190 port 37388 show less	Brute-Force SSH
🇦🇹 urnilxfgbez	2026-05-27 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇺 223.27.18.80

🇺🇸 205.210.31.58

🇮🇳 203.200.74.18

🇬🇧 193.163.125.60

🇨🇴 190.108.76.113

🇺🇸 161.35.232.200

🇹🇭 147.50.231.135

🇺🇸 134.122.122.202

🇨🇳 112.94.252.229

🇱🇻 81.30.98.158

🇨🇱 34.176.82.254

🇺🇸 20.65.194.112

🇲🇽 187.216.224.85

🇸🇪 185.246.130.20

🇱🇹 185.237.185.137

🇦🇷 181.20.210.174

🇩🇪 159.195.39.90

🇭🇰 119.237.113.134

🇰🇷 112.216.129.27

🇫🇷 85.217.140.4