112.103.93.25

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
46% Elevated
62 reports
27 reporters · latest 3 weeks ago
ISP
CHINANET HEILONGJIANG PROVINCE NETWORK
Usage Type
Fixed Line ISP
ASN
AS4134
Domain Name
chinatelecom.cn
Country
🇨🇳 China
City
Harbin, Heilongjiang
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
62 from 27 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 6 🇫🇷 France 4 🇧🇾 Belarus 3
Most common categories Port Scan 23 Hacking 7 IoT Targeted 5 Brute-Force 4 SSH 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:41796 dst:23
Port Scan
🇺🇸 RAP
2026-10-17 05:42:04 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇦🇺 FEWA
Fail2Ban Ban Triggered
Hacking Brute-Force
🇦🇹 joe-abuse
Honeypot: 2 unsolicited connection attempt(s) to ports where no service is offered (23/tcp); first 2026-10-15 11:14:13 UTC, last 2026-10-15 11:14:14 UTC. Reported by ipdb-security/fitzgerald.eu
Port Scan IoT Targeted
🇦🇹 joe-abuse
Honeypot: 2 unsolicited connection attempt(s) to ports where no service is offered (23/tcp); first 2026-10-15 11:14:13 UTC, last 2026-10-15 11:14:14 UTC. Reported by ipdb-security/fitzgerald.eu
Port Scan IoT Targeted
🇺🇸 RAP
2026-10-15 11:38:31 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
Anonymous
IP & Port Scan.
SSH Port Scan Brute-Force
🇵🇱 mkey
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=23 | HITS=2 | IPSET=ADD | FIRST=2026-10-15 10:20:12 | LAST=2026-10-15 10:20:13. Last seen 2026-10-15 10:20:13.
Port Scan
🇳🇱 hxsain
Blocked by UFW [23/tcp] | SPT: 43858 | TTL: 46 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan IoT Targeted
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:34511 dst:23
Port Scan
🇳🇱 EGP Abuse Dept
Unauthorized connection to Telnet port 23
Port Scan Hacking
🇫🇷 Entalpi.net
Tried to hit sensible closed port commonly used in attacks
Port Scan Hacking
🇧🇾 stroytrest
2026-10-14T18:36:00.888078+03:00 gate kernel: [1054450.777734] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=112.103.93.25 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=26361 DF PROTO=TCP SPT=38208 DPT=23 WINDOW=29040 RES=0x00 SYN URGP=0 ...
Port Scan
🇫🇷 Altai
Telnet honeypot scan on port 23.
Port Scan Brute-Force Exploited Host IoT Targeted
🇺🇸 OceanTreasure
tcp/23; Legacy Telnet remote access probe @ 2026-10-13T21:02:59Z
IoT Targeted Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇦 207.229.32.103
🇬🇧 193.163.125.52
🇵🇱 162.158.172.128
🇺🇸 152.163.101.5
🇩🇪 109.160.32.39
🇺🇸 94.26.69.2
🇺🇸 72.215.44.72
🇬🇧 51.195.183.48
🇳🇱 45.94.39.63
🇹🇼 36.224.228.86
🇬🇧 35.203.210.62
🇻🇳 27.79.43.160
🇪🇸 188.26.192.52
🇻🇳 104.28.237.73
🇰🇷 220.122.115.9
🇩🇪 196.251.102.125
🇺🇸 175.29.134.108
🇺🇸 134.128.118.64
🇨🇳 101.96.203.141
🇧🇪 34.76.228.132
feedback