111.53.18.168

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
22% Elevated
30 reports
12 reporters · latest 1 week ago
ISP
China Mobile Communications Corporation
Usage Type
Fixed Line ISP
ASN
AS56042
Domain Name
chinamobile.com
Country
🇨🇳 China
City
Taiyuan, Shanxi
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
30 from 12 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 3 🇫🇷 France 1 🇷🇸 Serbia 1
Most common categories Port Scan 6 Hacking 3
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 xmission.com
Blocked by UFW (TCP on 5900) Source port: 62572 TTL: 108 Packet length: 52 TOS: 0x08 This report (for 111.53.18.168) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 5900.
Port Scan Hacking
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:55092 dst:5900
Port Scan
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
Anonymous
denied traffic to a honeypot network. destination port 5900.
Port Scan Hacking
Anonymous
denied traffic to a non-approved destination port. destination port 5900.
Port Scan
🇷🇸 Smel
MH/MP Probe, Scan, Hack -
Port Scan Hacking
Anonymous
denied traffic to a honeypot network. destination port 5900.
Port Scan Hacking
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇳🇱 EGP Abuse Dept
Unsolicited connection to port 5900
Port Scan Hacking
🇩🇪 anycast_ac
DDoS Attack
🇩🇪 anycast_ac
DDoS Attack
Anonymous
denied traffic to a honeypot network. destination port 5900.
Port Scan Hacking
🇬🇧 PeravixGroup
Honeypot detection: VNC remote desktop brute-force authentication attempt on port 5900. Severity: MEDIUM. Aaran.cloud
Brute-Force Hacking
🇺🇸 RAP
2026-06-28 03:23:37 UTC Unauthorized activity to TCP port 5900.
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇹🇳 197.11.133.29
🇺🇸 162.216.150.211
🇨🇳 116.179.37.184
🇺🇸 65.49.20.125
🇦🇺 34.40.230.180
🇺🇸 20.118.242.5
🇰🇷 121.146.233.245
🇪🇸 37.222.149.111
🇳🇱 195.178.110.30
🇨🇳 113.24.225.36
🇩🇪 82.165.108.55
🇺🇸 67.207.84.62
🇺🇸 66.132.224.93
🇺🇸 66.132.186.132
🇺🇸 20.98.162.230
🇰🇷 218.159.144.187
🇺🇸 159.89.86.75
🇺🇸 109.105.210.27
🇫🇷 91.196.152.230
🇮🇷 79.175.176.177
feedback