111.53.96.126

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
23% Elevated
21 reports
13 reporters · latest 1 week ago
ISP
China Mobile Communications Corporation
Usage Type
Fixed Line ISP
ASN
AS56042
Domain Name
chinamobile.com
Country
🇨🇳 China
City
Taiyuan, Shanxi
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
21 from 13 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 7 🇺🇸 United States of America 3 🇦🇺 Australia 1
Most common categories Port Scan 11 Hacking 2 Brute-Force 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇸🇰 ivarady
Automaticky blokovany pokus o Brute-Force utok na port 445 (Windows Firewall DROP).
Brute-Force
🇺🇸 RAP
2026-10-28 04:36:41 UTC Unauthorized activity to TCP port 1433. SQL
Port Scan
🇺🇸 RAP
2026-10-28 00:57:11 UTC Unauthorized activity to TCP port 1433. SQL
Port Scan
🇺🇸 RAP
2026-10-27 06:00:09 UTC Unauthorized activity to TCP port 1433. SQL
Port Scan
🇳🇱 EGP Abuse Dept
Unauthorized connection to MSSQL port 1433
Port Scan Hacking
🇩🇪 HoneyPot-FrPri
1789854178 - 09/19/2026 23:42:58 Host: 111.53.96.126/111.53.96.126 Port: 445 TCP Blocked ...
Port Scan
🇦🇺 LiftUp Hosting
Honeypot hit: SMB traffic on port 445
Hacking
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=55571 dstport=445
Port Scan
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=54351 dstport=445
Port Scan
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=49267 dstport=445
Port Scan
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=64430 dstport=445
Port Scan
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=53039 dstport=445
Port Scan
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=60090 dstport=445
Port Scan
🇵🇱 sefinek.net
Honeypot hit: MSSQL traffic (on 1433) with credentials sa:123456 Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Brute-Force
🇩🇪 Honeypot-EU-Fru
1786329457 - 08/10/2026 04:37:37 Host: 111.53.96.126/111.53.96.126 Port: 445 TCP Blocked ...
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 184.105.139.82
🇮🇳 182.76.115.214
🇷🇺 94.29.126.250
🇺🇸 72.219.214.236
🇺🇸 45.76.225.172
🇺🇸 172.236.102.190
🇮🇳 172.70.219.252
🇦🇺 134.199.170.194
🇨🇳 114.217.10.60
🇳🇱 94.102.49.193
🇳🇱 93.174.95.106
🇺🇸 71.235.27.139
🇧🇪 35.210.202.130
🇫🇷 141.255.130.182
🇸🇳 104.28.88.111
🇪🇸 79.117.241.5
🇳🇱 77.239.124.78
🇺🇸 70.93.48.229
🇺🇸 64.227.27.220
🇪🇸 62.106.67.20
feedback