111.113.89.87
Classification: Malicious
111.113.89.87 is a malicious IP address. Reported by 4 threat sources, last seen 2026-09-10. Network: AS4134 CHINANET ningxia province network.
Current activity
- Known attacker — Seen launching attacks over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Malicious Host | CIArmy | 2024-05-01 11:33:44 | 2026-09-10 20:02:27 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2026-05-19 03:15:25 | 2026-07-16 11:09:38 | malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2026-05-19 03:15:23 | 2026-07-16 11:09:36 | malicious-activity | |
| Suspicious Host | AbuseIPDB | 2024-12-01 15:04:11 | 2026-06-05 11:04:02 | anomalous-activity | |
| Malicious Host | HoneyDB | 2026-05-10 00:00:00 | 2026-05-10 00:00:00 | malicious-activity | |
| Port Scanner | AbuseIPDB | 2025-03-16 05:05:11 | 2025-06-08 22:08:13 | anomalous-activity | |
| Hacking | AbuseIPDB | 2025-03-11 06:00:25 | 2025-05-29 00:01:10 | malicious-activity | |
| Bruteforce | AbuseIPDB | 2025-04-13 07:41:00 | 2025-05-28 18:18:40 | malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2025-03-23 06:36:03 | 2025-05-22 06:02:37 | malicious-activity | |
| SSH Attacker | AbuseIPDB | 2025-04-13 07:41:00 | 2025-05-17 23:14:09 | malicious-activity | |
| DDoS attack | AbuseIPDB | 2025-04-07 06:22:10 | 2025-04-27 04:01:55 | malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2025-03-23 06:36:03 | 2025-04-27 04:01:55 | anomalous-activity |
Whois information
- AS name
- AS4134 CHINANET ningxia province network
- AS registry
- apnic
- AS date
- 2009-06-24 00:00:00
- AS CIDR
- 111.112.0.0/15
- CIDR
- 111.112.0.0/15
- Registrant
- CHINANET ningxia province network
- Address
- No.31 ,jingrong street,beijing 100032
- City
- Yinchuan
- Postal code
- 750000
- Country
- CN — China 🇨🇳
- Contact email
- [email protected], [email protected]
- First indexed
- 2024-05-01 11:33:44
- Last updated
- 2026-09-10 22:08:36
Malicious IPs in the same CIDR
111.113.89.77 111.113.88.174 111.113.89.12 111.113.89.8 111.113.88.247 111.113.89.87 111.113.88.228 111.113.88.185 111.113.88.251 111.113.88.75 111.113.89.185 111.113.89.5 111.113.88.33 111.113.88.57 111.113.88.143 111.113.88.104 111.113.89.2 111.113.88.211 111.113.89.94 111.113.88.209 111.113.89.232 111.113.89.16 111.113.89.207 111.113.89.242 111.113.89.89