111.201.253.96
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- China Unicom Beijing province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4808
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Beijing, Beijing
Abuse Reports
Total reports
116 from
38 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 RAP |
2026-10-13 17:34:55 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Activity from blacklisted IP
|
Hacking | |
| 🇺🇸 RAP |
2026-10-12 15:54:52 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Activity from blacklisted IP
|
Hacking | |
| 🇺🇸 mibbsdevs |
(ric-sv) CoffeePot: Connection attempt detected on closed service bait ports (22/23/3306/3389/5432).
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Activity from blacklisted IP
|
Hacking | |
| 🇺🇸 RAP |
2026-10-09 13:33:12 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇧🇷 radardatelecom |
Blocked by Radar da Telecom firewall — abuseipdb
|
Bad Web Bot Web App Attack | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 3009
TTL: 51
Packet length: 60
TOS: 0x00
This report (for 111.201.253.96) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇫🇷 security.rdmc.fr |
Activity from blacklisted IP
|
Hacking | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 2561
TTL: 51
Packet length: 60
TOS: 0x00
This report (for 111.201.253.96) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇷🇺 genokrad |
Unauthorized connection try on TCP/23 (Telnet)
|
Port Scan | |
| 🇺🇸 RAP |
2026-10-05 18:16:50 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇵🇱 Kitki30.com |
Entered Telnet Tarpit (endlessh, server 1).
Log: 2026-10-05T05:38:55.710Z ACCEPT host=::ffff:111.201.253.96 port=1747 fd=8 n=5/4096
|
IoT Targeted Port Scan Brute-Force | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=1131 dstport=23
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown