JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 111.53.168.254

111.53.168.254 was found in our database!

This IP was reported 184 times. Confidence of Abuse is 67%: ?

67%

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS56042
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Taiyuan, Shanxi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 111.53.168.254

Whois 111.53.168.254

IP Abuse Reports for 111.53.168.254:

This IP address has been reported a total of 184 times from 26 distinct sources. 111.53.168.254 was first reported on April 2nd 2021, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇸 Smel	2026-06-16 07:08:08 (3 hours ago)	SQL/MH Probe, Scan, Hack -	Port Scan Hacking SQL Injection
🇫🇮 iamxorum	2026-06-14 08:42:51 (2 days ago)	2026-06-14T08:42:50.814549+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74 ... show more 2026-06-14T08:42:50.814549+00:00 XRM-01 kernel: [HONEYPORT] IN=eth0 OUT= MAC=92:00:06:e6:da:95:d2:74:7f:6e:37:e3:08:00 SRC=111.53.168.254 DST=46.62.222.43 LEN=52 TOS=0x00 PREC=0x00 TTL=107 ID=35844 DF PROTO=TCP SPT=51952 DPT=1433 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 Axel	2026-06-14 08:04:35 (2 days ago)	Blocked by UFW on MVI [1433/tcp] \| SPT: 54709 \| TTL: 111 \| LEN: 52 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on MVI [1433/tcp] \| SPT: 54709 \| TTL: 111 \| LEN: 52 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇿 Countryman	2026-06-08 11:22:29 (1 week ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
🇩🇪 guldkage	2026-06-07 10:05:51 (1 week ago)	Unauthorized connection attempt detected from IP address 111.53.168.254 to port 1433 (ger-03) [T]	Brute-Force Exploited Host
🇭🇰 pengpeng	2026-05-31 03:45:16 (2 weeks ago)	monitor: on ser162528253480 \| port: 1433 \| ttl: 111 script: github.com/sefinek/UFW-AbuseIPDB-Report ... show more monitor: on ser162528253480 \| port: 1433 \| ttl: 111 script: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇯🇵 Kinsei Engineering Inc.	2026-05-27 11:12:57 (2 weeks ago)	DBFilter:Repeated invalid access to unused databases	SQL Injection Port Scan
Anonymous	2026-05-27 10:06:44 (2 weeks ago)	2026-05-27T11:06:44.071082+01:00 vps kernel: [41616578.015527] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-05-27T11:06:44.071082+01:00 vps kernel: [41616578.015527] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=111.53.168.254 DST=54.37.14.118 LEN=52 TOS=0x00 PREC=0x00 TTL=105 ID=36839 DF PROTO=TCP SPT=60053 DPT=1433 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇩🇪 cheatmaster.store	2026-05-26 23:23:46 (2 weeks ago)	Automatic firewall detection. Attacker IP: 111.53.168.254 Country: CN City: Taiyuan ORG: AS56042 Ch ... show more Automatic firewall detection. Attacker IP: 111.53.168.254 Country: CN City: Taiyuan ORG: AS56042 China Mobile communications corporation UFW LOGS: May 26 23:22:01 srv-23213 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=4a:63:06:71:79:3f:20:ed:47:e9:a1:42:08:00 SRC=111.53.168.254 DST=SERVER_IP_HIDDEN LEN=52 TOS=0x08 PREC=0x20 TTL=109 ID=64795 DF PROTO=TCP SPT=61874 DPT=1433 WINDOW=64240 RES=0x00 SYN URGP=0 May 26 23:22:02 srv-23213 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=4a:63:06:71:79:3f:20:ed:47:e9:a1:42:08:00 SRC=111.53.168.254 DST=SERVER_IP_HIDDEN LEN=52 TOS=0x08 PREC=0x20 TTL=109 ID=64796 DF PROTO=TCP SPT=61874 DPT=1433 WINDOW=64240 RES=0x00 SYN URGP=0 Server IP hidden for privacy. Detected repeated unauthorized connection attempts and firewall blocks. show less	Port Scan Hacking Brute-Force SSH
Anonymous	2026-05-22 04:13:43 (3 weeks ago)	2026-05-22 04:13:43 warning[3737422]: host [111.53.168.254]: unauthorized access attempted ... show more 2026-05-22 04:13:43 warning[3737422]: host [111.53.168.254]: unauthorized access attempted: / show less	Port Scan Brute-Force
🇺🇸 ISPLtd	2026-05-18 04:37:52 (4 weeks ago)	May 17 22:21:27 111.53.168.254 TCP SPT=52765 DPT=1433 SYN May 17 22:21:28 111.53.168.254 TCP SPT=527 ... show more May 17 22:21:27 111.53.168.254 TCP SPT=52765 DPT=1433 SYN May 17 22:21:28 111.53.168.254 TCP SPT=52765 DPT=1433 SYN May 17 22:37:51 111.53.168.254 TCP SPT=59211 DPT=1433 WIN ... show less	Port Scan
🇺🇸 ISPLtd	2026-05-17 09:20:22 (4 weeks ago)	May 17 03:05:03 111.53.168.254 TCP SPT=59339 DPT=1433 SYN May 17 03:05:04 111.53.168.254 TCP SPT=593 ... show more May 17 03:05:03 111.53.168.254 TCP SPT=59339 DPT=1433 SYN May 17 03:05:04 111.53.168.254 TCP SPT=59339 DPT=1433 SYN May 17 03:20:21 111.53.168.254 TCP SPT=64990 DPT=1433 W ... show less	Port Scan
🇺🇸 ISPLtd	2026-05-17 02:49:41 (4 weeks ago)	May 16 20:34:46 111.53.168.254 TCP SPT=63104 DPT=1433 SYN May 16 20:34:47 111.53.168.254 TCP SPT=631 ... show more May 16 20:34:46 111.53.168.254 TCP SPT=63104 DPT=1433 SYN May 16 20:34:47 111.53.168.254 TCP SPT=63104 DPT=1433 SYN May 16 20:49:40 111.53.168.254 TCP SPT=57036 DPT=1433 W ... show less	Port Scan
🇺🇸 Cyber Crusader	2026-05-12 02:56:37 (1 month ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇯🇵 VXG-NET	2026-04-30 08:43:06 (1 month ago)	port=1433, indicator_type=scan	Port Scan

Showing 1 to 15 of 184 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 64.226.126.224

🇬🇧 194.164.91.60

🇧🇷 177.155.133.175

🇸🇬 172.217.32.148

🇮🇳 172.69.179.164

🇬🇭 154.161.60.82

🇭🇰 103.210.238.154

🇮🇳 103.25.47.94

🇮🇱 82.102.165.200

🇺🇸 52.204.132.161

🇮🇳 49.37.26.53

🇳🇱 45.148.10.141

🇨🇳 14.103.112.56

🇳🇱 185.136.15.11

🇨🇳 180.184.84.77

🇨🇳 117.135.128.235

🇹🇷 78.189.209.156

🇨🇿 78.44.192.210

🇺🇸 66.132.195.120

🇮🇷 2.180.184.122