JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.113.88.239

111.113.88.239 was found in our database!

This IP was reported 116 times. Confidence of Abuse is 56%: ?

56%

ISP	CHINANET ningxia province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	yc.nx.cn
Country	🇨🇳 China
City	Wuzhong, Ningxia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.113.88.239

Whois 111.113.88.239

IP Abuse Reports for 111.113.88.239:

This IP address has been reported a total of 116 times from 40 distinct sources. 111.113.88.239 was first reported on January 19th 2024, and the most recent report was 17 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2026-07-07 02:56:03 (17 hours ago)	Blocked by UFW (TCP on 8388) Source port: 42304 TTL: 236 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8388) Source port: 42304 TTL: 236 Packet length: 44 TOS: 0x08 This report (for 111.113.88.239) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 sandra361	2026-07-06 14:21:33 (1 day ago)	Port scan detected: 8 attempts across 1 port (9000). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=111. ... show more Port scan detected: 8 attempts across 1 port (9000). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=111.113.88.239 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=53258 DF PROTO=TCP SPT=48667 DPT=9000 WINDOW=29200 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 Axel	2026-07-02 20:18:48 (4 days ago)	Blocked by UFW on LAXHH [9944/tcp] \| SPT: 12304 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [9944/tcp] \| SPT: 12304 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-07-01 07:32:53 (6 days ago)	Blocked by UFW on LAXHH [8886/tcp] \| SPT: 59264 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [8886/tcp] \| SPT: 59264 \| TTL: 234 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Cyber Crusader	2026-06-27 23:35:08 (1 week ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇵🇱 sefinek.net	2026-06-27 10:15:38 (1 week ago)	Honeypot hit: Unauthorized traffic (16 bytes of payload); 9092 [1] TCP Reported by: https://github.c ... show more Honeypot hit: Unauthorized traffic (16 bytes of payload); 9092 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 xmission.com	2026-06-26 04:09:02 (1 week ago)	Blocked by UFW (TCP on 49157) Source port: 52428 TTL: 236 Packet length: 44 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 49157) Source port: 52428 TTL: 236 Packet length: 44 TOS: 0x08 This report (for 111.113.88.239) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-23 06:14:43 (2 weeks ago)	Blocked by UFW (TCP on 5601) Source port: 51572 TTL: 239 Packet length: 44 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 5601) Source port: 51572 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 111.113.88.239) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-20 18:46:28 (2 weeks ago)	111.113.88.239 - - [20/Jun/2026:20:46:27 +0200] "GET /assets/images/logo-cn-vpnweb.png HTTP/1.1" 404 ... show more 111.113.88.239 - - [20/Jun/2026:20:46:27 +0200] "GET /assets/images/logo-cn-vpnweb.png HTTP/1.1" 404 3139 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" ... show less	Web App Attack
🇫🇷 TheHoneyPotter	2026-06-19 20:48:58 (2 weeks ago)	Honeypot [fc-honeypot]: Large payload (1457 bytes); 2763 [1] TCP Reported by: https://github.com/sef ... show more Honeypot [fc-honeypot]: Large payload (1457 bytes); 2763 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 drewf.ink	2026-06-18 13:18:48 (2 weeks ago)	[13:18] Port scanning. Port(s) scanned: TCP/9200	Port Scan
🇵🇱 sefinek.net	2026-06-18 09:15:38 (2 weeks ago)	Honeypot hit: Large payload (1457 bytes); 8086 [1] TCP Reported by: https://github.com/sefinek/T-Pot ... show more Honeypot hit: Large payload (1457 bytes); 8086 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 MPL	2026-06-04 14:02:54 (1 month ago)	tcp/1111	Port Scan
🇬🇧 PeravixGroup	2026-06-04 00:04:38 (1 month ago)	Honeypot detection: SMTP abuse / unauthorized email relay attempt on port 25. Severity: MEDIUM. Aara ... show more Honeypot detection: SMTP abuse / unauthorized email relay attempt on port 25. Severity: MEDIUM. Aaran.cloud show less	Email Spam
🇬🇧 PeravixGroup	2026-06-03 06:08:07 (1 month ago)	Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDI ... show more Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host

Showing 1 to 15 of 116 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 187.216.224.85

🇩🇪 161.35.65.86

🇧🇷 152.32.197.159

🇭🇰 118.193.44.112

🇺🇸 44.86.247.126

🇳🇱 193.176.31.205

🇮🇳 165.22.216.2

🇫🇮 147.185.133.209

🇸🇬 68.183.230.3

🇺🇸 44.98.16.251

🇺🇸 35.234.184.255

🇺🇸 13.217.154.68

🇺🇸 205.210.31.38

🇧🇪 198.235.24.205

🇺🇸 195.242.212.206

🇹🇭 101.51.239.205

🇺🇸 44.23.33.169

🇨🇳 36.132.228.167

🇬🇧 35.203.211.18

🇯🇵 20.78.157.244