AbuseIPDB » 111.113.89.221
111.113.89.221 was found in our database!
This IP was reported 159 times. Confidence of Abuse is 82%: ?
| ISP | CHINANET ningxia province network |
|---|---|
| Usage Type | Fixed Line ISP |
| ASN | AS4134 |
| Domain Name | yc.nx.cn |
| Country | 🇨🇳 China |
| City | Wuzhong, Ningxia |
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 111.113.89.221:
This IP address has been reported a total of 159 times from 61 distinct sources. 111.113.89.221 was first reported on , and the most recent report was .
Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇩🇪 iNetWorker |
firewall-block, port(s): 2074/tcp
|
Port Scan | ||
| 🇩🇪 polido |
[debian-4gb-nbg1-1] Unauthorized connection attempt to port 1494 from 111.113.89.221
|
Port Scan | ||
| 🇺🇸 Axel |
|
Port Scan | ||
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 6089 [1] TCP
|
Port Scan | ||
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: HTTP/1.1 request on 2510
GET /
Accept: */*; 2510 [1] TCP
|
Web App Attack | ||
| 🇺🇸 Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | ||
| 🇨🇦 Slackin' Jack |
Triggered honeypot on port 20. (111.113.89.221)
|
Port Scan | ||
| 🇦🇩 bakunin1848 |
Firewall IPS Detection on 12-07-2026 at 11:06:04
|
Port Scan Exploited Host | ||
| 🇩🇪 heyzg |
HTTP Defense Evasion (observed): 1 cmds, 1 HTTP, 2s; attempted command obfuscation
|
Hacking SSH | ||
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1457 bytes); 10157 [1] TCP
|
Hacking | ||
| 🇺🇸 MPL |
tcp/5051 (2 or more attempts)
|
Port Scan | ||
| 🇺🇸 MPL |
tcp/16097
|
Port Scan | ||
| 🇺🇸 Axel |
|
Port Scan FTP Brute-Force | ||
| 🇺🇸 MPL |
tcp/2395 (2 or more attempts)
|
Port Scan | ||
| 🇳🇱 BIV |
|
Port Scan Hacking Brute-Force SSH |
Showing 1 to 15 of 159 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩