101.89.134.2

🇨🇳Shanghai, Shanghai, China · AS4811 China Telecom (Group)

71%

Abuse confidence: Medium

Reported 32 times by 6 reporters, most recently 7 hours ago.

What it was reported for

Reports

When	Reporter	Categories	Comment
7 hours ago	Automated feed	Brute-Force SSH Malware Distribution	Listed by raw.githubusercontent.com
13 hours ago	Automated feed	Web App Attack Command & Control	Listed by raw.githubusercontent.com
13 hours ago	Automated feed	FTP Brute-Force Phishing Open Proxy Web Spam Brute-Force Web App Attack Command & Control HTTP Flood	Listed by cinsscore.com
22 hours ago	Automated feed	Web Spam Port Scan Bad Web Bot	Listed by raw.githubusercontent.com
31 hours ago	Automated feed	Brute-Force SSH Malware Distribution	Listed by raw.githubusercontent.com
35 hours ago	Automated feed	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Listed by ThreatView.io
37 hours ago	Automated feed	Web App Attack Command & Control	Listed by raw.githubusercontent.com
47 hours ago	Automated feed	Web Spam Port Scan Bad Web Bot	Listed by raw.githubusercontent.com
2 days ago	Automated feed	Brute-Force SSH Malware Distribution	Listed by raw.githubusercontent.com
2 days ago	Automated feed	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Listed by ThreatView.io
2 days ago	Automated feed	Web App Attack Command & Control HTTP Flood	Listed by www.nubi-network.com
2 days ago	Automated feed	Web App Attack Command & Control	Listed by raw.githubusercontent.com
2 days ago	Automated feed	Web Spam Port Scan Bad Web Bot	Listed by raw.githubusercontent.com
2 days ago	Automated feed	FTP Brute-Force Phishing Open Proxy Web Spam Brute-Force Web App Attack Command & Control HTTP Flood	Listed by cinsscore.com
3 days ago	Automated feed	Brute-Force SSH Malware Distribution	Listed by raw.githubusercontent.com
3 days ago	Automated feed	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Listed by ThreatView.io
3 days ago	Automated feed	Web App Attack Command & Control	Listed by raw.githubusercontent.com
3 days ago	Automated feed	Web Spam Port Scan Bad Web Bot	Listed by raw.githubusercontent.com
3 days ago	Automated feed	FTP Brute-Force Phishing Open Proxy Web Spam Brute-Force Web App Attack Command & Control HTTP Flood	Listed by cinsscore.com
4 days ago	Automated feed	Brute-Force SSH Malware Distribution	Listed by raw.githubusercontent.com
4 days ago	Automated feed	Web App Attack Command & Control	Listed by raw.githubusercontent.com
4 days ago	Automated feed	Web Spam Port Scan Bad Web Bot	Listed by raw.githubusercontent.com
5 days ago	Automated feed	FTP Brute-Force Phishing Open Proxy Web Spam Brute-Force Web App Attack Command & Control HTTP Flood	Listed by cinsscore.com
5 days ago	Automated feed	Brute-Force SSH Malware Distribution	Listed by raw.githubusercontent.com
5 days ago	Automated feed	Web App Attack Command & Control	Listed by raw.githubusercontent.com

Details

Version: IPv4
Tor exit: no
Hostname: none
ASN: AS4811
Network: China Telecom (Group)
Country: 🇨🇳 China
Region: Shanghai
City: Shanghai (approx.)
First seen: 25 Oct 2026
Last seen: 3 Nov 2026

Location and network: IP Geolocation by DB-IP

Same lookup from a script

curl -s "https://isipsafe.com/api/v1/check?ip=101.89.134.2"

Check the surrounding /24 · API docs