112.103.205.66
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- CHINANET HEILONGJIANG PROVINCE NETWORK
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Harbin, Heilongjiang
Abuse Reports
Total reports
48 from
29 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇮🇳 evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking Brute-Force SSH | |
| 🇮🇳 evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking Brute-Force SSH | |
| Anonymous |
IP & Port Scan.
|
SSH Port Scan Brute-Force | |
| 🇺🇸 RAP |
2026-07-22 10:40:51 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇳🇱 donarev419 |
Port scan detected on port 23 (connection without data transfer)
|
Port Scan | |
| 🇮🇳 Parth Maniar |
This IP address carried out 2 port scanning attempts on 21-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
|
Port Scan SSH | |
| 🇩🇪 andorin |
SSH/Telnet honeypot (endlessh) on habith.eu: 2 connection attempts trapped, total tarpit time 1.7min. Automated report.
|
Port Scan Brute-Force SSH | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:40938 dst:23
|
Port Scan | |
| 🇺🇸 cybsecaoccol |
unauthorized connection or malicious port scan attempted on tcp port - corp
|
Port Scan Hacking | |
| 🇺🇸 sumnone |
Port probing on unauthorized port 23
|
Port Scan Hacking Exploited Host | |
| 🇩🇪 _ArminS_ |
SP-Scan 36577:23 detected 2026.07.21 17:35:56
blocked until 2026.09.09 10:38:43
|
Port Scan | |
| 🇰🇷 2048 |
Telnet credential brute-force observed by honeypot.
Source IP: 112.103.205.66
Targeted device: Ubuntu server
First seen: 21 Jul 2026 13:59:38 UTC
Last seen: 21 Jul 2026 13:59:44 UTC
Attempts: 2
Sample credentials: epuser:epuser, root:wabjtam
|
Brute-Force | |
| 🇺🇸 RAP |
2026-07-21 10:13:46 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 40897
TTL: 53
Packet length: 60
TOS: 0x00
This report (for 112.103.205.66) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇬🇧 knock |
Knock-Knock honeypot brute-force: Telnet (2 total hits)
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown