This IP address has been reported a total of
149
times from
52 distinct
sources.
111.113.89.104 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-06-20T10:13:33.329967+02:00 myserver sshd[2171673]: banner exchange: Connection from 111.113.89 ...
show more2026-06-20T10:13:33.329967+02:00 myserver sshd[2171673]: banner exchange: Connection from 111.113.89.104 port 20558: invalid format
2026-06-20T10:13:33.329967+02:00 myserver sshd[2171673]: banner exchange: Connection from 111.113.89.104 port 20558: invalid format
...
show less
Blocked by UFW (TCP on 21)
Source port: 33892
TTL: 238
Packet length: 44
TOS: 0x00
This report (for ...
show moreBlocked by UFW (TCP on 21)
Source port: 33892
TTL: 238
Packet length: 44
TOS: 0x00
This report (for 111.113.89.104) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Blocked by UFW (TCP on 10323)
Source port: 25083
TTL: 238
Packet length: 44
TOS: 0x00
This report ( ...
show moreBlocked by UFW (TCP on 10323)
Source port: 25083
TTL: 238
Packet length: 44
TOS: 0x00
This report (for 111.113.89.104) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Suricata Detected 31 attacks from 111.113.89.104.; GPL DNS named version attempt; IP: 111.113.89.104 ...
show moreSuricata Detected 31 attacks from 111.113.89.104.; GPL DNS named version attempt; IP: 111.113.89.104; Ports: 52276; Direction: to_server; Trigger: DNS; Category: Attempted Information Leak; Severity: 2
show less
Honeypot detection: SSH brute-force authentication attempt on port 22 (2 or more attempts) - Logs: 2 ...
show moreHoneypot detection: SSH brute-force authentication attempt on port 22 (2 or more attempts) - Logs: 2026-06-13T11:22:15.794Z ACCEPT host=::ffff:111.113.89.104 port=25768 fd=6 n=3/4096
...
show less
Blocked by UFW (TCP on 2194)
Source port: 21813
TTL: 239
Packet length: 44
TOS: 0x00
This report (f ...
show moreBlocked by UFW (TCP on 2194)
Source port: 21813
TTL: 239
Packet length: 44
TOS: 0x00
This report (for 111.113.89.104) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Honeypot detection: TR-069 CWMP router management protocol abuse attempt on port 7547. Severity: MED ...
show moreHoneypot detection: TR-069 CWMP router management protocol abuse attempt on port 7547. Severity: MEDIUM. Aaran.cloud
show less
IoT Targeted
Hacking
Showing 1 to
15
of 149 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩