111.113.89.185
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET ningxia province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- yc.nx.cn
- Country
- 🇨🇳 China
- City
- Yinchuan, Ningxia
Abuse Reports
Total reports
176 from
72 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇮🇹 Fusty |
Unauthorized attempt on (TCP on port 3690).
Source port: 36050
TTL: 230
Packet length: 44
Timestamp: 2026-10-28 07:48:37
|
Port Scan | |
| 🇯🇵 www.winos.me |
Shield: Layer4 Port 9 Trap
|
Port Scan Hacking | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: FTP Probe (1762/tcp) [non-standard port]
|
FTP Brute-Force Port Scan | |
| 🇺🇸 Mehmet_The_Script_Kiddie |
CloudFlare WAF REPORT: Disobey robots.txt. Suspicious web crawler.
|
Bad Web Bot Web App Attack | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1457 bytes); 10222 [1] TCP
|
Hacking | |
| 🇺🇸 1gz |
|
Bad Web Bot | |
| 🇺🇸 MPL |
tcp/80
|
Port Scan | |
| 🇺🇸 MPL |
tcp/666 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 donarev419 |
Connection to port 1031 with data transfer.
Data preview: USER anonymous
|
Port Scan Hacking | |
| 🇳🇮 elfita |
Blocked by nftables on AmneziaWG gateway (Ports: 53)
|
Port Scan Brute-Force Exploited Host | |
| 🇫🇷 Security_Whaller |
Malicious activity detected on Honeypot.
|
Brute-Force Hacking Web App Attack | |
| 🇧🇷 Host One |
T-Pot Honeypot alert: 9 malicious events (exploit_attempt, port_scan) detected.
|
Port Scan Hacking | |
| 🇺🇸 donarev419 |
Connection to port 8030 with data transfer.
Data preview: GET / HTTP/1.1
Host: 198.23.188.201:8030
Accept: */*
|
Port Scan Hacking | |
| 🇳🇱 VMHeaven.io |
Blocked by UFW [20880/tcp]
Source port: 15861
TTL: 233
Packet length: 44
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1457 bytes); 7240 [1] TCP
|
Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown