111.113.89.28
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- CHINANET ningxia province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- yc.nx.cn
- Country
- 🇨🇳 China
- City
- Yinchuan, Ningxia
Abuse Reports
Total reports
225 from
76 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 seajaydaboi36 |
Automated detection: unsolicited connection to Pterodactyl Wings server.
|
Port Scan Hacking Brute-Force | |
| 🇭🇰 sandra361 |
Port scan detected: 6 packets across 1 port (8688). | Evidence: REAPER_TARPIT: IN=eth0 SRC=111.113.89.28 LEN=40 TOS=0x14 PREC=0x00 TTL=46 ID=42768 DF PROTO=TCP SPT=24270 DPT=8688 WINDOW=29200 RES=0x00 ACK FIN URGP=0
|
Port Scan | |
| 🇬🇧 sandra361 |
Port scan detected: 6 packets across 1 port (9711). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=111.113.89.28 LEN=40 TOS=0x00 PREC=0x00 TTL=33 ID=4693 DF PROTO=TCP SPT=47844 DPT=9711 WINDOW=29200 RES=0x00 ACK FIN URGP=0
|
Port Scan | |
| 🇷🇴 abuse_IP_reporter |
Nov 9 20:40:33 server UFW BLOCK SRC=111.113.89.28 PROTO=TCP SPT=24046 DPT=8086
|
Port Scan | |
| 🇺🇸 MPL |
tcp/8159 (2 or more attempts)
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 3523 [1] TCP
|
Port Scan | |
| 🇫🇮 6kilowatti |
|
Port Scan | |
| 🇫🇷 EDSL |
[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)
|
Port Scan | |
| 🇩🇪 iNetWorker |
trying to access non-authorized port
|
Port Scan | |
| 🇮🇹 Fusty |
Unauthorized attempt on (TCP on port 8884).
Source port: 22537
TTL: 230
Packet length: 44
Timestamp: 2026-11-04 14:56:14
|
Port Scan | |
| 🇨🇦 design2web.ca |
[UniFi FW] Inbound network intrusion attempt on port 21242 | Policy: Region Blocking | Proto: TCP | Src: 111.113.89.28:27798 | SrcRegion: CN | Detected: 2026-11-03 08:15:28 UTC | ISP: Chinanet | D2W UniFi AbuseIPDB Reporter v2
|
Port Scan | |
| 🇭🇰 sandra361 |
Port scan detected: 7 attempts across 1 port (995). | Evidence: REAPER_TARPIT: IN=eth0 SRC=111.113.89.28 LEN=40 TOS=0x14 PREC=0x00 TTL=46 ID=13282 DF PROTO=TCP SPT=55002 DPT=995 WINDOW=29200 RES=0x00 ACK FIN URGP=0
|
Port Scan | |
| 🇫🇷 EvoX |
🛡️ Honeypot [bsts-tpot-hive]: Large payload (1457 bytes); 18102 [1] TCP
|
Bad Web Bot | |
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1457 bytes); 8931 [1] TCP
|
Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown