111.113.89.21

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse confidence score ?
47% Elevated
191 reports
71 reporters ยท latest 2 weeks ago
ISP CHINANET ningxia province network
Usage Type Fixed Line ISP
ASN AS4134
Domain Name yc.nx.cn
Country ๐Ÿ‡จ๐Ÿ‡ณ China
City Yinchuan, Ningxia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 111.113.89.21

This IP address has been reported a total of 191 times from 71 distinct sources. 111.113.89.21 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 12 reports; Germany with 5 reports; Mongolia with 4 reports. The most common categories in these recent reports were: Port Scan 22 times; Hacking 6 times; Web App Attack 2 times; Brute-Force 2 times; SSH 1 time; Other 1 time.

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฒ๐Ÿ‡ณ Public CSIRT/CC of Mongolia
Honeypot hit: Large payload (1457 bytes); 10287 [1] TCP
Hacking
๐Ÿ‡ท๐Ÿ‡ธ Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
๐Ÿ‡ฌ๐Ÿ‡ง Andrew
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/50050 (2 or more attempts)
Port Scan
๐Ÿ‡ฒ๐Ÿ‡ณ Public CSIRT/CC of Mongolia
Honeypot hit: Large payload (1457 bytes); 52230 [1] TCP
Hacking
Anonymous
Port Scan Brute-Force SSH
๐Ÿ‡ฒ๐Ÿ‡ณ Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 6561 [1] TCP
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ Axel
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ xmission.com
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ MPL
tcp/1521
Port Scan
Anonymous
unsolicited connect TCP dport 7077 (sport 22523)
Hacking
๐Ÿ‡ฉ๐Ÿ‡ช iNetWorker
firewall-block, port(s): 12379/tcp
Port Scan
Anonymous
denied traffic to a non-approved destination port. destination port 1194.
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ xmission.com
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ RAP
2026-09-10 09:49:26 UTC Unauthorized activity to TCP port 8089. Web App
Port Scan Web App Attack

Showing 1 to 15 of 191 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡ง๐Ÿ‡ช 207.175.82.167
๐Ÿ‡ณ๐Ÿ‡ฑ 204.76.203.219
๐Ÿ‡ท๐Ÿ‡บ 178.214.245.228
๐Ÿ‡ต๐Ÿ‡ฑ 145.239.89.124
๐Ÿ‡บ๐Ÿ‡ธ 129.121.142.174
๐Ÿ‡ฎ๐Ÿ‡ณ 122.165.56.162
๐Ÿ‡ฎ๐Ÿ‡ณ 113.193.128.226
๐Ÿ‡บ๐Ÿ‡ธ 109.105.210.92
๐Ÿ‡ฐ๐Ÿ‡ฟ 92.47.27.174
๐Ÿ‡ฉ๐Ÿ‡ช 63.176.8.218
๐Ÿ‡จ๐Ÿ‡ณ 60.214.154.254
๐Ÿ‡ป๐Ÿ‡ณ 58.186.20.143
๐Ÿ‡บ๐Ÿ‡ธ 54.211.223.207
๐Ÿ‡บ๐Ÿ‡ธ 45.156.129.191
๐Ÿ‡ณ๐Ÿ‡ฑ 45.156.87.186
๐Ÿ‡น๐Ÿ‡ผ 35.229.213.165
๐Ÿ‡บ๐Ÿ‡ธ 34.86.15.76
๐Ÿ‡ต๐Ÿ‡ช 200.106.63.121
๐Ÿ‡ซ๐Ÿ‡ฎ 128.1.198.78
๐Ÿ‡ฟ๐Ÿ‡ฒ 102.23.122.235