JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 113.101.246.194

113.101.246.194 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 113.101.246.194

Whois 113.101.246.194

IP Abuse Reports for 113.101.246.194:

This IP address has been reported a total of 28 times from 25 distinct sources. 113.101.246.194 was first reported on July 14th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-07-15 15:50:33 (2 hours ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇺🇸 anon333	2026-07-15 13:33:13 (4 hours ago)	Hacker syslog review 1784122393	Hacking
🇺🇸 RAP	2026-07-15 12:38:12 (5 hours ago)	2026-07-15 12:38:12 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇺🇸 anon333	2026-07-15 10:58:01 (7 hours ago)	Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-07-15T10:55:11Z and 2026-07-1 ... show more Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-07-15T10:55:11Z and 2026-07-15T10:58:00Z show less	Brute-Force SSH
Anonymous	2026-07-15 09:27:58 (8 hours ago)	2026-07-15T12:27:14.594727+03:00 vm635618.cloud.nuxt.network sshd-session[4566]: pam_unix(sshd:auth) ... show more 2026-07-15T12:27:14.594727+03:00 vm635618.cloud.nuxt.network sshd-session[4566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.101.246.194 2026-07-15T12:27:17.145390+03:00 vm635618.cloud.nuxt.network sshd-session[4566]: Failed password for invalid user admin from 113.101.246.194 port 42336 ssh2 2026-07-15T12:27:58.417369+03:00 vm635618.cloud.nuxt.network sshd-session[4569]: Invalid user orangepi from 113.101.246.194 port 45088 ... show less	Brute-Force SSH
🇺🇸 xmission.com	2026-07-15 09:01:53 (9 hours ago)	Blocked by UFW (TCP on 2375) Source port: 62327 TTL: 53 Packet length: 40 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 2375) Source port: 62327 TTL: 53 Packet length: 40 TOS: 0x00 This report (for 113.101.246.194) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇦 internetworld	2026-07-15 07:06:38 (11 hours ago)	113.101.246.194 - - [15/Jul/2026:07:06:36 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdi ... show more 113.101.246.194 - - [15/Jul/2026:07:06:36 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 200 513 "-" "libredtail-http" ... show less	Bad Web Bot Web App Attack
🇦🇱 router.al	2026-07-15 05:32:24 (12 hours ago)	07/15/2026-05:32:23.780427 113.101.246.194 Protocol: 6 ET WEB_SERVER /bin/sh In URI Possible Shell C ... show more 07/15/2026-05:32:23.780427 113.101.246.194 Protocol: 6 ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt show less	Hacking
🇭🇰 amyriad	2026-07-15 04:53:24 (13 hours ago)	113.101.246.194 - - [15/Jul/2026:12:53:23 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdi ... show more 113.101.246.194 - - [15/Jul/2026:12:53:23 +0800] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 380 "-" "libredtail-http" 113.101.246.194 - - [15/Jul/2026:12:53:23 +0800] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 380 "-" "libredtail-http" 113.101.246.194 - - [15/Jul/2026:12:53:23 +0800] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 380 "-" "libredtail-http" ... show less	DDoS Attack Hacking Brute-Force
🇦🇺 electronico	2026-07-15 04:49:24 (13 hours ago)	2026-07-15T15:48:38.735285+11:00 mail1 sshd[2055553]: pam_unix(sshd:auth): authentication failure; l ... show more 2026-07-15T15:48:38.735285+11:00 mail1 sshd[2055553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.101.246.194 2026-07-15T15:48:40.516531+11:00 mail1 sshd[2055553]: Failed password for invalid user admin from 113.101.246.194 port 44010 ssh2 2026-07-15T15:49:23.844645+11:00 mail1 sshd[2055593]: Invalid user orangepi from 113.101.246.194 port 41262 ... show less	Brute-Force SSH
🇬🇧 Interceptor_HQ	2026-07-15 04:34:19 (13 hours ago)	request_uri: /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input -- automat ... show more request_uri: /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input -- automatic report -- show less	Brute-Force Hacking
🇺🇸 RAP	2026-07-15 03:50:45 (14 hours ago)	2026-07-15 03:50:45 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇺🇸 TPI-Abuse	2026-07-15 03:35:41 (14 hours ago)	(mod_security) mod_security (id:218420) triggered by 113.101.246.194 (-): 1 in the last 300 secs; Po ... show more (mod_security) mod_security (id:218420) triggered by 113.101.246.194 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 23:35:37.868016 2026] [security2:error] [pid 1257:tid 1257] [client 113.101.246.194:55026] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.63:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.63"] [uri "/hello.world"] [unique_id "alcACY-9BW201GOGOEBiCgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇹🇷 Threat.live	2026-07-15 03:30:03 (14 hours ago)	Suspicious Connection Attempts	Brute-Force
Anonymous	2026-07-15 03:26:32 (14 hours ago)	Http Port:443 (http_status:400) - Agent:libredtail-http	Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 219.78.63.235

🇨🇳 210.16.168.11

🇹🇼 111.70.34.60

🇨🇳 110.82.42.202

🇦🇿 89.40.30.219

🇮🇩 43.157.203.234

🇺🇦 194.156.249.154

🇳🇱 185.212.129.205

🇺🇸 174.138.40.30

🇺🇸 152.32.183.22

🇮🇳 122.176.122.24

🇲🇾 121.122.86.115

🇮🇩 114.141.59.195

🇭🇰 101.36.107.65

🇺🇸 91.230.168.255

🇳🇱 91.92.40.31

🇹🇿 41.59.128.27

🇨🇳 14.155.251.174

🇺🇸 207.90.244.25

🇧🇷 191.53.128.107