111.113.89.68

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
40% Elevated
134 reports
47 reporters · latest 1 week ago
ISP
CHINANET ningxia province network
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
yc.nx.cn
Country
🇨🇳 China
City
Yinchuan, Ningxia
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
134 from 47 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 5 🇺🇸 United States of America 3 🇦🇺 Australia 1
Most common categories Port Scan 8 Hacking 4 Web App Attack 2 Bad Web Bot 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 ValtonTahiri
Port Scan
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
Anonymous
denied traffic to a honeypot network. destination port 63243.
Port Scan Hacking
🇩🇪 pltcldvlpr
Bogus Useragent: 111.113.89.68 - - [28/Oct/2026:12:27:48 +0100] "GET /favicon.ico HTTP/1.1" 444 0 "-" "Mozilla/4.066686748 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" asn=4134 org="Chinanet" country=CN ...
Bad Web Bot
🇦🇺 paulshipley.com.au
talentaymerch.com.au:443 111.113.89.68 - - [27/Oct/2026:16:45:14 +1100] "GET /ipfs/bafkreicyqcbhpicbos7ev4mrxofwqx6hvvge7pahpta6xuspr44crai5by HTTP/1.1" 404 94267 "-" "Mozilla/4.054101423 Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)" ...
Web App Attack
Anonymous
111.113.89.68 - - [03/Oct/2026:18:32:00 +0200] "GET /Alvin9999/https/fanfan1.net/daohang/ HTTP/1.1" 404 527 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" ...
Web App Attack
🇺🇸 OceanTreasure
tcp/4000; Unsolicited SYN to a port that has never been offered on this address (closed, no service ever) @ 2026-10-01T17:28:50Z
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 17129.
Port Scan Hacking
🇺🇸 MPL
tcp/443
Port Scan
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-hive]: Empty payload (likely service probe); 5010 [1] TCP
Port Scan
🇺🇸 donarev419
Connection to port 10135 with data transfer. Data preview: GET / HTTP/1.1 Host: 167.253.66.144:10135 Accept: */*
Port Scan Hacking
🇦🇺 paulshipley.com.au
Web App Attack
🇺🇸 MPL
tcp/7547
Port Scan
🇺🇸 MPL
tcp ports: 2967,7547 (4 or more attempts)
Port Scan
🇺🇸 Axel
Blocked by UFW on LAXHH [12240/tcp] | SPT: 35247 | TTL: 236 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 148.153.56.170
🇧🇪 198.235.24.178
🇦🇷 179.41.166.84
🇦🇷 179.36.218.222
🇲🇽 177.247.48.40
🇮🇹 109.52.39.204
🇨🇦 85.217.149.22
🇺🇸 57.141.6.74
🇨🇳 49.235.155.190
🇳🇱 45.148.10.141
🇦🇷 45.65.224.150
🇮🇩 36.67.80.244
🇺🇸 172.234.222.168
🇩🇪 87.189.154.43
🇷🇴 193.32.162.84
🇨🇿 185.87.121.1
feedback