111.113.89.37
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- CHINANET ningxia province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- yc.nx.cn
- Country
- 🇨🇳 China
- City
- Yinchuan, Ningxia
Abuse Reports
Total reports
187 from
56 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
denied traffic to a honeypot network. destination port 12379.
|
Port Scan Hacking | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 11255 [1] TCP
|
Port Scan | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: Portscan (1 ports, 1 attempts in 480h, non-TR)
|
Port Scan | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (10107/tcp) [non-standard port]
|
Port Scan Hacking | |
| 🇺🇸 ras07 |
Brute force SSH login attempts.
|
Brute-Force SSH | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 2027)
Source port: 31533
TTL: 236
Packet length: 44
TOS: 0x08
This report (for 111.113.89.37) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1457 bytes); 8838 [1] TCP
|
Hacking | |
| 🇦🇺 LiftUp Hosting |
Honeypot hit: Unauthorized traffic (16 bytes of payload); 8112 [1] TCP
|
Port Scan | |
| 🇧🇷 Host One |
T-Pot Honeypot alert: 7 malicious events (exploit_attempt, port_scan) detected.
|
Port Scan Hacking | |
| 🇨🇳 cybsecaoccol |
unauthorized connection or malicious port scan attempted on tcp port - njng
|
Port Scan Hacking | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: HTTP/1.1 request on 8515
GET /
Accept: */*; 8515 [1] TCP
|
Web App Attack | |
| 🇺🇸 sargetun |
Honeypot: RDP probe on port 3389 at 2026-09-28 05:38:33.474519. Automated report from VPS honeypot.
|
Port Scan | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 1200
|
Port Scan Hacking Exploited Host | |
| 🇺🇸 OceanTreasure |
tcp/5342; Unsolicited SYN to a dark IP that has never hosted any service (darknet, no DNS name) @ 2026-09-28T02:06:06Z
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown