JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.113.88.251

111.113.88.251 was found in our database!

This IP was reported 163 times. Confidence of Abuse is 41%: ?

41%

ISP	CHINANET ningxia province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	yc.nx.cn
Country	🇨🇳 China
City	Wuzhong, Ningxia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.113.88.251

Whois 111.113.88.251

IP Abuse Reports for 111.113.88.251:

This IP address has been reported a total of 163 times from 56 distinct sources. 111.113.88.251 was first reported on January 22nd 2024, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Axel	2026-07-05 00:56:48 (3 days ago)	Blocked by UFW on LAXHH [7014/tcp] \| SPT: 50733 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [7014/tcp] \| SPT: 50733 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 zupan	2026-07-03 06:54:20 (5 days ago)	Blocked by UFW on vps [7443/tcp] \| SPT: 64995 \| TTL: 236 \| LEN: 44 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on vps [7443/tcp] \| SPT: 64995 \| TTL: 236 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-07-03 01:09:54 (5 days ago)	Honeypot hit: Unauthorized traffic (16 bytes of payload); 1801 [1] TCP Reported by: https://github.c ... show more Honeypot hit: Unauthorized traffic (16 bytes of payload); 1801 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 Axel	2026-07-01 02:38:49 (1 week ago)	Blocked by UFW on LAXHH [49668/tcp] \| SPT: 58490 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: git ... show more Blocked by UFW on LAXHH [49668/tcp] \| SPT: 58490 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-06-30 00:30:25 (1 week ago)	Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. ... show more Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud show less	Brute-Force Hacking
🇺🇸 Axel	2026-06-29 07:50:36 (1 week ago)	Blocked by UFW on LAXHH [7911/tcp] \| SPT: 15586 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [7911/tcp] \| SPT: 15586 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-06-28 00:47:21 (1 week ago)	Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. ... show more Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud show less	Brute-Force Hacking
🇺🇸 MPL	2026-06-08 16:59:26 (4 weeks ago)	tcp/16113	Port Scan
🇺🇸 xmission.com	2026-06-07 21:14:41 (1 month ago)	Blocked by UFW (TCP on 50580) Source port: 64928 TTL: 238 Packet length: 44 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 50580) Source port: 64928 TTL: 238 Packet length: 44 TOS: 0x00 This report (for 111.113.88.251) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-06 22:51:43 (1 month ago)	tcp/59100	Port Scan
🇫🇮 6kilowatti	2026-06-06 16:55:58 (1 month ago)	2026-06-06T19:55:58.146533+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-06-06T19:55:58.146533+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=111.113.88.251 DST=5.61.88.83 LEN=44 TOS=0x00 PREC=0x00 TTL=236 ID=5841 PROTO=TCP SPT=19310 DPT=5984 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇬🇧 PeravixGroup	2026-06-05 23:57:24 (1 month ago)	Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ... show more Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇨🇳 ThreatBook.io	2026-05-16 23:56:49 (1 month ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/111.113.88.251 2026-05-1 ... show more ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/111.113.88.251 2026-05-16 17:49:14 / show less	Web App Attack
Anonymous	2026-05-15 05:51:07 (1 month ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇯🇵 mkaraki	2026-05-15 04:42:12 (1 month ago)	1778820130 # Service_probe # SIGNATURE_SEND # source_ip:111.113.88.251 # dst_port:8083 ...	Port Scan

Showing 1 to 15 of 163 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.156.211.207

🇧🇪 104.155.123.79

🇮🇩 103.165.139.145

🇲🇩 77.235.123.193

🇫🇷 51.91.156.22

🇿🇦 41.181.156.205

🇸🇳 41.82.50.218

🇺🇸 20.245.71.147

🇰🇷 20.214.165.150

🇧🇷 2800:1e0:1080:9:9999::3

🇹🇳 197.238.187.218

🇳🇱 195.178.110.228

🇺🇸 172.202.104.166

🇺🇸 157.245.243.118

🇧🇩 103.115.117.186

🇦🇪 94.204.92.105

🇲🇽 38.22.170.10

🇻🇳 36.50.134.129

🇹🇼 34.81.72.185

🇭🇰 23.91.97.170