113.89.17.22
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET Guangdong province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Gongming, Guangdong
Abuse Reports
Total reports
45 from
30 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: MSSQL traffic (on 1433) with username sa and empty password
|
Brute-Force | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 1433)
Source port: 52087
TTL: 242
Packet length: 40
TOS: 0x08
This report (for 113.89.17.22) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 wristhulk |
Honeypot: credential attempt on OpenCanary MSSQL honeypot. Username: 'sa'.
|
Brute-Force | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 1433)
Source port: 42076
TTL: 242
Packet length: 40
TOS: 0x08
This report (for 113.89.17.22) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇮 mikkopal88 |
TCP SYN port scan to database or remote admin port
|
Port Scan | |
| 🇫🇷 Petre 21_ip |
|
Port Scan | |
| Anonymous |
RdpGuard detected brute-force attempt on MS-SQL
|
Brute-Force | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 1433)
Source port: 55621
TTL: 242
Packet length: 40
TOS: 0x08
This report (for 113.89.17.22) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇺🇸 MPL |
tcp/1433 (5 or more attempts)
|
Port Scan | |
| 🇩🇪 David Ferneding |
Blocked by UFW (TCP on 1433)
Source port: 49101
TTL: 236
Packet length: 40
TOS: 0x00
This report (for 113.89.17.22) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 MPL |
tcp/1433 (9 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/1433 (11 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/1433 (4 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/1433 (8 or more attempts)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown