JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.113.88.225

111.113.88.225 was found in our database!

This IP was reported 138 times. Confidence of Abuse is 58%: ?

58%

ISP	CHINANET ningxia province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	yc.nx.cn
Country	🇨🇳 China
City	Wuzhong, Ningxia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.113.88.225

Whois 111.113.88.225

IP Abuse Reports for 111.113.88.225:

This IP address has been reported a total of 138 times from 58 distinct sources. 111.113.88.225 was first reported on February 7th 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇳 Public CSIRT/CC of Mongolia	2026-06-24 10:23:56 (1 hour ago)	Honeypot hit: Empty payload (likely service probe); 8089 [1] TCP	Port Scan
🇺🇸 MPL	2026-06-22 14:38:02 (1 day ago)	tcp/9092 (2 or more attempts)	Port Scan
🇺🇸 MPL	2026-06-22 11:32:42 (2 days ago)	tcp/12310 (2 or more attempts)	Port Scan
🇬🇧 sandra361	2026-06-22 05:24:03 (2 days ago)	Port scan detected: 7 attempts across 1 ports (49154). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=11 ... show more Port scan detected: 7 attempts across 1 ports (49154). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=111.113.88.225 LEN=60 TOS=0x00 PREC=0x00 TTL=40 ID=11803 DF PROTO=TCP SPT=56384 DPT=49154 WINDOW=29200 RES=0x00 SYN URGP=0 show less	Port Scan
🇵🇱 pshost.pl	2026-06-22 04:05:31 (2 days ago)	2026-06-22T04:05:30.936Z, an unauthorized access attempt was detected on port 22 (SSH) from source I ... show more 2026-06-22T04:05:30.936Z, an unauthorized access attempt was detected on port 22 (SSH) from source IP address 111.113.88.225. show less	Port Scan Brute-Force SSH
🇺🇸 xmission.com	2026-06-19 20:22:31 (4 days ago)	Blocked by UFW (TCP on 10162) Source port: 65123 TTL: 236 Packet length: 44 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 10162) Source port: 65123 TTL: 236 Packet length: 44 TOS: 0x08 This report (for 111.113.88.225) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-06-09 15:31:10 (2 weeks ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇫🇷 TheHoneyPotter	2026-06-08 22:37:13 (2 weeks ago)	Honeypot [fc-honeypot]: Unauthorized traffic (16 bytes of payload); 30015 [1] TCP Reported by: https ... show more Honeypot [fc-honeypot]: Unauthorized traffic (16 bytes of payload); 30015 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
Anonymous	2026-06-08 07:12:15 (2 weeks ago)	Honeypot hit: Unauthorized traffic (16 bytes of payload); 11210 [1] TCP Reported by: https://github. ... show more Honeypot hit: Unauthorized traffic (16 bytes of payload); 11210 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇬🇧 PeravixGroup	2026-06-07 20:14:08 (2 weeks ago)	Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDI ... show more Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇩🇪 zupan	2026-06-05 19:45:24 (2 weeks ago)	Blocked by UFW on vps [5432/tcp] \| SPT: 60486 \| TTL: 236 \| LEN: 44 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on vps [5432/tcp] \| SPT: 60486 \| TTL: 236 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-05 04:12:10 (2 weeks ago)	Honeypot hit: Large payload (1457 bytes); 2353 [1] TCP Reported by: https://github.com/sefinek/T-Pot ... show more Honeypot hit: Large payload (1457 bytes); 2353 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 xmission.com	2026-06-01 05:20:18 (3 weeks ago)	Blocked by UFW (TCP on 11211) Source port: 43020 TTL: 238 Packet length: 44 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 11211) Source port: 43020 TTL: 238 Packet length: 44 TOS: 0x00 This report (for 111.113.88.225) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-06-01 04:05:39 (3 weeks ago)	Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ... show more Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-31 01:10:55 (3 weeks ago)	Honeypot detection: IMAP email brute-force authentication attempt on port 143. Severity: MEDIUM. Aar ... show more Honeypot detection: IMAP email brute-force authentication attempt on port 143. Severity: MEDIUM. Aaran.cloud show less	Brute-Force

Showing 1 to 15 of 138 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 211.101.237.84

🇩🇪 87.106.29.151

🇺🇸 205.210.31.5

🇷🇺 188.162.72.130

🇱🇹 185.227.50.117

🇬🇧 185.187.119.176

🇧🇪 185.83.51.56

🇸🇬 165.154.200.214

🇺🇸 107.175.253.172

🇺🇸 44.186.211.254

🇺🇸 20.84.101.167

🇺🇸 20.29.23.166

🇺🇸 18.217.163.190

🇺🇸 2602:80d:1007::55

🇧🇷 179.124.10.170

🇺🇸 173.236.20.194

🇺🇸 173.44.180.59

🇺🇸 172.210.53.228

🇮🇳 169.148.137.12

🇺🇸 165.227.52.109