This IP address has been reported a total of
142
times from
53 distinct
sources.
111.113.89.72 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDI ...
show moreHoneypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDIUM. Aaran.cloud
show less
Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ...
show moreHoneypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud
show less
Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDI ...
show moreHoneypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud
show less
Honeypot detection: X11 display server unauthorized access / probing attempt on port 6000. Severity: ...
show moreHoneypot detection: X11 display server unauthorized access / probing attempt on port 6000. Severity: MEDIUM. Aaran.cloud
show less
Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDI ...
show moreHoneypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDIUM. Aaran.cloud
show less
Honeypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDI ...
show moreHoneypot detection: Redis unauthorized access / data extraction attempt on port 6379. Severity: MEDIUM. Aaran.cloud
show less
05/28/2026-13:56:16.076329 src=111.113.89.72 dst=89.144.63.232:3306 proto=6 msg=ET SCAN Suspicious i ...
show more05/28/2026-13:56:16.076329 src=111.113.89.72 dst=89.144.63.232:3306 proto=6 msg=ET SCAN Suspicious inbound to mySQL port 3306
show less
Blocked by UFW (TCP on 12445)
Source port: 62502
TTL: 238
Packet length: 44
TOS: 0x00
This report ( ...
show moreBlocked by UFW (TCP on 12445)
Source port: 62502
TTL: 238
Packet length: 44
TOS: 0x00
This report (for 111.113.89.72) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Showing 1 to
15
of 142 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩