112.111.39.220

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
69% Elevated
16 reports
14 reporters · latest 5 hours ago
ISP
Fuzhou city, fujian provincial network of CNCGROUP
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
wo.com.cn
Country
🇨🇳 China
City
Fuzhou, Fujian

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV
Total reports
16 from 14 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 8 🇫🇷 France 3 🇧🇷 Brazil 1
Most common categories SSH 15 Brute-Force 15 Port Scan 3 Web App Attack 1 Exploited Host 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Log in to search reports. Log In
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 Like Ma
Nov 7 06:20:02 newage sshd[20562]: Failed password for root from 112.111.39.220 port 38142 ssh2 ...
Brute-Force SSH
🇧🇷 fcsz
Fail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detected and correlated by Wazuh SIEM (rule 100110, level 10). Reported automatically.
Brute-Force SSH
🇫🇷 blackynet
Brute-Force SSH
🇩🇪 ghostwarriors
Unauthorized connection attempt detected, SSH Brute-Force
Brute-Force Port Scan SSH
🇩🇪 Ma3X Ma3X
Brute-Force SSH
🇫🇷 YF
SSH brute force — 15 failed attempts detected by fail2ban (sshd) — 2026-11-04 02:13:36
Brute-Force SSH
🇫🇷 Baking333
Brute-Force SSH
🇩🇪 ghostwarriors
Unauthorized connection attempt detected, SSH Brute-Force
Brute-Force Port Scan SSH
🇩🇪 5 mark
Brute-Force SSH
🇩🇪 hserv
Brute-Force SSH
🇩🇪 derLoosi
HV1.2 sshd Bruteforce
Brute-Force SSH
🇩🇪 PepeHost.pl
SSH brute-force: repeated failed login attempts (fail2ban)
Brute-Force SSH
🇩🇪 ghostwarriors
Unauthorized connection attempt detected, SSH Brute-Force
Brute-Force Port Scan SSH
🇨🇦 SSH-Admin
Probing for Exploits on ns200
Exploited Host Web App Attack
🇮🇩 digitalsekuriti.id
Brute-Force SSH

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇮🇹 151.26.29.83
🇫🇷 144.91.74.145
🇺🇸 136.113.179.141
🇹🇭 124.156.243.156
🇹🇭 118.27.148.5
🇨🇳 101.96.202.48
🇳🇱 94.102.49.190
🇳🇱 85.11.167.7
🇺🇸 64.92.91.63
🇦🇲 46.36.123.37
🇺🇸 43.166.214.243
🇨🇳 39.164.94.190
🇨🇳 39.74.103.159
🇺🇸 20.120.108.52
🇿🇦 20.87.24.214
🇺🇸 162.216.149.84
🇷🇴 92.118.39.14
🇳🇱 86.38.187.184
🇺🇸 69.164.205.196
🇮🇷 62.220.104.155
feedback