111.113.89.146
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET ningxia province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- yc.nx.cn
- Country
- 🇨🇳 China
- City
- Yinchuan, Ningxia
Abuse Reports
Total reports
182 from
65 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 Skyrider |
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
|
Bad Web Bot Web App Attack | |
| 🇷🇸 Smel |
MH/MP Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇷🇺 Agrohim |
Gate I blocked for categories:
|
DDoS Attack Ping of Death Port Scan Hacking Brute-Force | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Unauthorized traffic (16 bytes of payload); 13084 [1] TCP
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Unauthorized traffic (16 bytes of payload); 12239 [1] TCP
|
Port Scan | |
| Anonymous |
|
Port Scan Brute-Force | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 256)
Source port: 10693
TTL: 236
Packet length: 44
TOS: 0x08
This report (for 111.113.89.146) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇪🇸 raiolanetworks.com |
Honeypot detection: port scan / service probe. 2 events observed. Reported automatically from a honeypot sensor.
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 1201)
Source port: 21759
TTL: 236
Packet length: 44
TOS: 0x08
This report (for 111.113.89.146) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 2354)
Source port: 44392
TTL: 236
Packet length: 44
TOS: 0x08
This report (for 111.113.89.146) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇷🇸 Smel |
MH/MP Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=19220 dstport=995
|
Port Scan | |
| 🇮🇹 NukeDuke |
2026-10-01T23:59:54.684167+02:00 my.hidden.domain named[201515]: client @0x7758a8043468 111.113.89.146#60082 (google.com): query (cache) 'google.com/A/IN' denied (allow-query-cache did not match)
...
|
Port Scan IoT Targeted | |
| 🇺🇸 MPL |
tcp/17007 (2 or more attempts)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown