JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 113.59.113.4

113.59.113.4 was found in our database!

This IP was reported 72 times. Confidence of Abuse is 0%: ?

ISP	China Unicom Hainan province network
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Haikou, Hainan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 113.59.113.4

Whois 113.59.113.4

IP Abuse Reports for 113.59.113.4:

This IP address has been reported a total of 72 times from 28 distinct sources. 113.59.113.4 was first reported on March 7th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 NoaQT	2026-04-05 22:07:42 (1 month ago)	113.59.113.4 - - [05/Apr/2026:16:32:40 +0200] "GET /web/login HTTP/1.1" 303 231 "https://www.youtube ... show more 113.59.113.4 - - [05/Apr/2026:16:32:40 +0200] "GET /web/login HTTP/1.1" 303 231 "https://www.youtube.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 113.59.113.4 - - [05/Apr/2026:17:40:45 +0200] "GET /web/login HTTP/1.1" 303 231 "https://www.bing.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 113.59.113.4 - - [05/Apr/2026:17:40:52 +0200] "GET /web/login HTTP/1.1" 303 231 "https://www.wikipedia.org/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 113.59.113.4 - - [05/Apr/2026:17:40:56 +0200] "GET /web/login HTTP/1.1" 303 231 "https://www.twitter.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 113.59.113.4 - - [05/Apr/2026:17:41:19 +0200] "GET /web/login HTTP/1.1" 303 231 "https://best.biz/home" "Mozilla/5.0 (X11; Linux x86_64) Appl ... show less	DDoS Attack
🇩🇪 NoaQT	2026-04-05 15:56:41 (1 month ago)	113.59.113.4 - - [05/Apr/2026:17:56:24 +0200] "GET /web/login HTTP/1.1" 303 231 "https://www.yahoo.c ... show more 113.59.113.4 - - [05/Apr/2026:17:56:24 +0200] "GET /web/login HTTP/1.1" 303 231 "https://www.yahoo.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 113.59.113.4 - - [05/Apr/2026:17:56:32 +0200] "GET /web/login HTTP/1.1" 303 231 "https://www.youtube.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 113.59.113.4 - - [05/Apr/2026:17:56:32 +0200] "GET /web/login HTTP/1.1" 303 231 "https://www.nextbest.net/search" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 113.59.113.4 - - [05/Apr/2026:17:56:33 +0200] "GET /web/login HTTP/1.1" 303 231 "https://www.facebook.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" 113.59.113.4 - - [05/Apr/2026:17:56:36 +0200] "GET /web/login HTTP/1.1" 303 231 "https://www.youtube.com/" "Mozilla/5. ... show less	DDoS Attack
🇺🇸 COMPLEX	2026-03-17 18:26:53 (2 months ago)	Triggered Cloudflare WAF (l7ddos) from CN. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined ... show more Triggered Cloudflare WAF (l7ddos) from CN. Action taken: MANAGED_CHALLENGE ASN: undefined (undefined) Protocol: HTTP/2 (GET method) Endpoint: / UA: Mozilla/5.0 (Android 12; Mobile; rv:143.0) Gecko/143.0 Firefox/143.0 show less	DDoS Attack Bad Web Bot
🇧🇬 cheatmaster.store	2026-02-26 05:38:51 (3 months ago)	Automated report: This IP address has been identified as an active public open proxy. Classification ... show more Automated report: This IP address has been identified as an active public open proxy. Classification: Open Proxy \| Spoofing \| VPN/Anonymizer \| Bad Web Bot. Country: China Threat level: High. This host is listed across multiple public proxy databases and poses a risk of abuse, credential stuffing, scraping, and spoofed traffic. Reported by automated threat intelligence pipeline. Do not whitelist without manual verification. show less	Web Spam Port Scan Web App Attack
🇨🇭 Modules	2025-12-17 06:53:47 (5 months ago)	Open proxy http://113.59.113.4:1088 (RT:5055ms,Loc:China,ASN:AS4837)	Open Proxy
🇵🇹 PTnet	2025-12-07 06:21:05 (5 months ago)	DDoS Attack (jail:haproxy-https-flood)	DDoS Attack Exploited Host
🇵🇹 PTnet	2025-12-06 11:58:57 (5 months ago)	DDoS Attack (jail:haproxy-https-flood)	DDoS Attack Exploited Host
🇵🇹 PTnet	2025-12-04 19:46:01 (6 months ago)	DDoS Attack (jail:haproxy-https-flood)	DDoS Attack Exploited Host
🇳🇱 MyGlobalFlowers	2025-12-04 03:13:15 (6 months ago)	Multiple WAF Violations	Web App Attack
🇩🇪 Szymekk	2025-12-02 13:52:39 (6 months ago)	Fail2Ban: SSH brute force attempt [srv01]	Brute-Force SSH
🇮🇳 Mcshield.org	2025-12-01 02:51:09 (6 months ago)	Connection closed by 113.59.113.4 [preauth] or weird packet	Brute-Force SSH
🇺🇸 COMPLEX	2025-11-29 03:58:48 (6 months ago)	Triggered Cloudflare WAF (l7ddos) from CN. Action taken: BLOCK ASN: 4837 (CHINA169-BACKBONE CHINA UN ... show more Triggered Cloudflare WAF (l7ddos) from CN. Action taken: BLOCK ASN: 4837 (CHINA169-BACKBONE CHINA UNICOM China169 Backbone) Protocol: HTTP/2 (GET method) Endpoint: / show less	DDoS Attack Bad Web Bot
🇬🇧 Silly Development	2025-11-17 01:08:29 (6 months ago)	Malicious activity detected from 4837 CHINA169-BACKBONE CHINA UNICOM China169 Backbone towards host ... show more Malicious activity detected from 4837 CHINA169-BACKBONE CHINA UNICOM China169 Backbone towards host sillydev.co.uk (GET HTTP/2) @ 2025-11-17T01:08:29Z (12 occurrences) show less	DDoS Attack Exploited Host
🇬🇧 Joe-Mark	2025-11-12 09:23:13 (6 months ago)	TCP Port: 143 . src-port=35302 Found sefinek Blocklist [ filter blocked ] (260)	Port Scan Hacking
🇺🇸 COMPLEX	2025-11-07 19:57:32 (6 months ago)	Triggered Cloudflare WAF (l7ddos) from CN. Action taken: BLOCK ASN: 4837 (CHINA169-BACKBONE CHINA UN ... show more Triggered Cloudflare WAF (l7ddos) from CN. Action taken: BLOCK ASN: 4837 (CHINA169-BACKBONE CHINA UNICOM China169 Backbone) Protocol: HTTP/2 (GET method) Endpoint: / show less	DDoS Attack Bad Web Bot

Showing 1 to 15 of 72 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.197.78.73

🇲🇳 103.50.205.131

🇺🇦 45.156.158.88

🇨🇳 183.196.144.45

🇧🇷 45.205.1.241

🇺🇦 45.156.158.223

🇨🇳 203.2.164.205

🇩🇪 193.124.20.246

🇲🇽 186.96.145.241

🇱🇧 185.206.200.223

🇮🇳 103.199.205.79

🇩🇪 78.111.67.225

🇩🇪 69.5.169.225

🇧🇷 45.177.195.116

🇷🇴 2.57.121.25

🇲🇲 202.165.89.159

🇺🇸 172.93.103.2

🇸🇬 156.245.144.121

🇵🇰 103.83.23.169

🇷🇺 80.69.186.68