111.113.89.161

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
30% Elevated
171 reports
60 reporters · latest 2 hours ago
ISP
CHINANET ningxia province network
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
yc.nx.cn
Country
🇨🇳 China
City
Yinchuan, Ningxia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
171 from 60 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 5 🇺🇸 United States of America 4 🇷🇸 Serbia 1
Most common categories Port Scan 8 Hacking 3 Web App Attack 1 Exploited Host 1 Email Spam 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
Anonymous
denied traffic to a non-approved destination port. destination port 2552.
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 81.
Port Scan Hacking
🇺🇸 sumnone
Port probing on unauthorized port 9307
Port Scan Hacking Exploited Host
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇺🇸 MPL
tcp/9999 (2 or more attempts)
Port Scan
🇺🇸 MPL
tcp/6007 (2 or more attempts)
Port Scan
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: HTTP Probe (5038/tcp) [non-standard port]
Web App Attack
Anonymous
Blocked by firewall on hugin [1056/tcp] | Rule: UFW | SPT: 38813 | TTL: 238 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇩🇪 iNetWorker
firewall-block, port(s): 12292/tcp
Port Scan
🇺🇸 MPL
tcp/19800 (2 or more attempts)
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 10194 [1] TCP
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 4440) Source port: 38616 TTL: 236 Packet length: 44 TOS: 0x08 This report (for 111.113.89.161) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇺🇸 MPL
tcp/16102
Port Scan
Anonymous
Blocked by firewall on hugin [10004/tcp] | Rule: UFW | SPT: 59373 | TTL: 237 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇬 47.79.207.241
🇺🇸 4.249.18.80
🇳🇱 204.76.203.40
🇲🇽 189.194.140.170
🇨🇳 180.106.138.157
🇵🇱 162.158.103.126
🇺🇸 146.70.166.180
🇩🇪 139.59.143.102
🇺🇸 103.251.26.107
🇺🇸 103.81.231.218
🇺🇸 73.136.182.75
🇺🇸 73.102.20.4
🇩🇪 69.5.169.253
🇭🇺 37.220.132.13
🇧🇪 35.210.24.61
🇧🇪 34.53.147.106
🇧🇪 34.38.248.210
🇶🇦 34.18.188.203
🇺🇸 23.234.104.117
🇺🇸 23.234.82.29
feedback