111.113.89.71
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- CHINANET ningxia province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- yc.nx.cn
- Country
- 🇨🇳 China
- City
- Yinchuan, Ningxia
Abuse Reports
Total reports
157 from
61 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
Blocked by UFW (TCP on 8252)
Source port: 25028
TTL: 239
Packet length: 44
TOS: 0x14
This report (for 111.113.89.71) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 www.nomadomia.com |
Hack attack wp-content
|
Port Scan Hacking Bad Web Bot Web App Attack | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 12411
|
Port Scan Hacking Exploited Host | |
| 🇫🇷 Petre 21_ip |
|
Port Scan | |
| Anonymous |
Drop from IP address 111.113.89.71 to tcp-port 10423
|
Port Scan | |
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (12392/tcp) [non-standard port]
|
Port Scan Hacking | |
| 🇺🇸 sandra361 |
Port scan detected: 5 attempts across 1 port (16001). | Evidence: REAPER_TARPIT: IN=enp1s0 SRC=111.113.89.71 LEN=56 TOS=0x00 PREC=0x00 TTL=45 ID=19616 DF PROTO=TCP SPT=23373 DPT=16001 WINDOW=29200 RES=0x00 ACK PSH URGP=0
|
Port Scan | |
| 🇺🇸 SX Communications |
|
DDoS Attack Bad Web Bot Exploited Host | |
| 🇺🇸 Aurealize |
firewall port scanning detected. 2 or more observation(s) from 2026-10-03T17:50:37.000Z through 2026-10-03T17:50:37.000Z.
|
Port Scan | |
| 🇳🇱 donarev419 |
Connection to port 5111 with data transfer.
Data preview: �
|
Port Scan Hacking | |
| Anonymous |
111.113.89.71 - - [02/Oct/2026:18:52:39 +0200] "GET /assets/fire_admin/images/logo.png HTTP/1.1" 404 550 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0" ...
|
Web App Attack | |
| 🇪🇸 raiolanetworks.com |
Honeypot detection: port scan / service probe. 4 events observed. 2 distinct ports targeted. Reported automatically from a honeypot sensor.
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 8155 [1] TCP
|
Port Scan | |
| 🇩🇪 iNetWorker |
trying to access non-authorized port
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown