JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.2.199.31

111.2.199.31 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 81%: ?

81%

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS56041
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Shanghai, Shanghai

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.2.199.31

Whois 111.2.199.31

IP Abuse Reports for 111.2.199.31:

This IP address has been reported a total of 24 times from 12 distinct sources. 111.2.199.31 was first reported on June 27th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-06-28 12:00:32 (1 hour ago)	tcp ports: 28188,8188 (8 or more attempts)	Port Scan
Anonymous	2026-06-28 11:40:55 (2 hours ago)	2026-06-28T12:40:54.228682+01:00 vps kernel: [44386996.608850] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-06-28T12:40:54.228682+01:00 vps kernel: [44386996.608850] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=111.2.199.31 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x00 TTL=230 ID=48343 PROTO=TCP SPT=3632 DPT=38188 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇺🇸 MPL	2026-06-28 10:58:06 (2 hours ago)	tcp/48188	Port Scan
🇺🇸 MPL	2026-06-28 10:20:00 (3 hours ago)	tcp/48188 (11 or more attempts)	Port Scan
🇦🇩 bakunin1848	2026-06-28 08:53:04 (4 hours ago)	Firewall IPS Detection on 28-06-2026 at 10:53:04	Port Scan Exploited Host
🇩🇪 Admins@FBN	2026-06-28 07:38:27 (6 hours ago)	FW-PortScan: Traffic Blocked srcport=3240 dstport=18188	Port Scan
🇺🇸 xmission.com	2026-06-28 07:10:42 (6 hours ago)	Blocked by UFW (TCP on 8189) Source port: 3273 TTL: 238 Packet length: 44 TOS: 0x14 This report (fo ... show more Blocked by UFW (TCP on 8189) Source port: 3273 TTL: 238 Packet length: 44 TOS: 0x14 This report (for 111.2.199.31) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-28 06:52:26 (6 hours ago)	Blocked by UFW (TCP on 8088) Source port: 3436 TTL: 237 Packet length: 44 TOS: 0x14 This report (fo ... show more Blocked by UFW (TCP on 8088) Source port: 3436 TTL: 237 Packet length: 44 TOS: 0x14 This report (for 111.2.199.31) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-28 06:36:43 (7 hours ago)	Blocked by UFW (TCP on 8189) Source port: 3206 TTL: 237 Packet length: 44 TOS: 0x14 This report (fo ... show more Blocked by UFW (TCP on 8189) Source port: 3206 TTL: 237 Packet length: 44 TOS: 0x14 This report (for 111.2.199.31) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-28 06:20:44 (7 hours ago)	Blocked by UFW (TCP on 8189) Source port: 4621 TTL: 237 Packet length: 44 TOS: 0x14 This report (fo ... show more Blocked by UFW (TCP on 8189) Source port: 4621 TTL: 237 Packet length: 44 TOS: 0x14 This report (for 111.2.199.31) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 terraforge.fun	2026-06-28 05:33:53 (8 hours ago)	Blocked by on honeypot1-terraforge [18188/tcp] \| SPT: 3181 \| TTL: 237 \| LEN: 44 \| TOS: 0x14 • Report ... show more Blocked by on honeypot1-terraforge [18188/tcp] \| SPT: 3181 \| TTL: 237 \| LEN: 44 \| TOS: 0x14 • Reported by: abuse.terraforge.fun show less	Port Scan
🇩🇪 zupan	2026-06-28 05:11:26 (8 hours ago)	Blocked by UFW on vps [8088/tcp] \| SPT: 3082 \| TTL: 236 \| LEN: 44 \| TOS: 0x00 • Reported by: github. ... show more Blocked by UFW on vps [8088/tcp] \| SPT: 3082 \| TTL: 236 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-28 04:58:46 (8 hours ago)	Blocked by UFW (TCP on 7860) Source port: 3224 TTL: 235 Packet length: 44 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 7860) Source port: 3224 TTL: 235 Packet length: 44 TOS: 0x08 This report (for 111.2.199.31) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Petre 21_ip	2026-06-28 04:50:11 (8 hours ago)	2026-06-28T06:50:10.913363+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-06-28T06:50:10.913363+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=111.2.199.31 DST=155.133.26.57 LEN=44 TOS=0x00 PREC=0x00 TTL=236 ID=62299 PROTO=TCP SPT=3411 DPT=18188 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 cwytech	2026-06-28 03:01:24 (10 hours ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.	Hacking

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 35.203.210.60

🇮🇩 128.14.233.253

🇭🇰 103.158.29.100

🇯🇵 54.238.159.96

🇻🇳 27.79.40.210

🇺🇸 3.131.220.121

🇨🇴 190.145.240.7

🇨🇴 186.146.235.58

🇩🇪 185.242.3.195

🇽🇰 178.175.119.234

🇺🇸 172.67.165.206

🇺🇸 34.134.93.184

🇺🇸 18.232.54.55

🇨🇳 222.137.92.76

🇹🇭 202.29.232.118

🇭🇰 172.253.5.24

🇺🇸 161.0.2.206

🇺🇸 147.185.132.214

🇺🇸 147.185.132.145

🇻🇳 103.159.51.70