JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 112.124.14.220

112.124.14.220 was found in our database!

This IP was reported 194 times. Confidence of Abuse is 61%: ?

61%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 112.124.14.220

Whois 112.124.14.220

IP Abuse Reports for 112.124.14.220:

This IP address has been reported a total of 194 times from 60 distinct sources. 112.124.14.220 was first reported on March 2nd 2025, and the most recent report was 22 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ISPLtd	2026-06-11 15:25:23 (22 hours ago)	Jun 11 09:25:19 112.124.14.220 TCP SPT=51518 DPT=37542 SYN Jun 11 09:25:20 112.124.14.220 TCP SPT=51 ... show more Jun 11 09:25:19 112.124.14.220 TCP SPT=51518 DPT=37542 SYN Jun 11 09:25:20 112.124.14.220 TCP SPT=51518 DPT=41168 SYN Jun 11 09:25:22 112.124.14.220 TCP SPT=51518 DPT=35196 ... show less	Port Scan
🇸🇪 donarev419	2026-06-11 09:15:38 (1 day ago)	Connection to port 4751 with data transfer. Data preview:	Port Scan Hacking
🇩🇪 derLoosi	2026-06-08 10:19:51 (4 days ago)	HV1.2 Blocked by UFW	Port Scan
🇮🇱 spd.co.il	2026-06-03 05:02:31 (1 week ago)	Port scan detected on multiple ports	Port Scan
🇺🇸 donarev419	2026-06-03 02:07:09 (1 week ago)	Connection to port 600 with data transfer. Data preview:	Port Scan Hacking
🇩🇪 acadeova	2026-05-28 11:24:04 (2 weeks ago)	🚨 Recon detected (nft drop) SRC=112.124.14.220 Observed=TCP dpt=46417 in=enp0s6 ttl=241 Time=recent( ... show more 🚨 Recon detected (nft drop) SRC=112.124.14.220 Observed=TCP dpt=46417 in=enp0s6 ttl=241 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
🇫🇷 centurion	2026-05-26 07:00:34 (2 weeks ago)	Unauthorized attempt on uptime [31762/tcp] Source port: 58833 TTL: 231 Packet length: 40 TOS: 0x00 h ... show more Unauthorized attempt on uptime [31762/tcp] Source port: 58833 TTL: 231 Packet length: 40 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 mutebot.net	2026-05-24 21:28:24 (2 weeks ago)	SRC=112.124.14.220, PROTO=TCP, SPT=58100, DPT=21783 SRC=112.124.14.220, PROTO=TCP, SPT=58100, DPT=37 ... show more SRC=112.124.14.220, PROTO=TCP, SPT=58100, DPT=21783 SRC=112.124.14.220, PROTO=TCP, SPT=58100, DPT=37915 SRC=112.124.14.220, PROTO=TCP, SPT=58100, DPT=37915 SRC=112.124.14.220, PROTO=TCP, SPT=58100, DPT=44637 show less	Port Scan
🇳🇱 marzzzello	2026-05-22 03:52:42 (3 weeks ago)	Ports: multiple (164), 164 attempts	Port Scan
🇰🇷 MW	2026-05-21 23:16:14 (3 weeks ago)	112.124.14.220 - - [22/May/2026:08:16:12 +0900] "GET /nmaplowercheck1779405371 HTTP/1.1" 404 3809 "- ... show more 112.124.14.220 - - [22/May/2026:08:16:12 +0900] "GET /nmaplowercheck1779405371 HTTP/1.1" 404 3809 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)" 112.124.14.220 - - [22/May/2026:08:16:12 +0900] "POST /sdk HTTP/1.1" 404 3809 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)" 112.124.14.220 - - [22/May/2026:08:16:13 +0900] "GET /evox/about HTTP/1.1" 404 3809 "-" "Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)" show less	Bad Web Bot Web App Attack
🇺🇸 mutebot.net	2026-05-21 17:33:24 (3 weeks ago)	SRC=112.124.14.220, PROTO=TCP, SPT=44790, DPT=5366 SRC=112.124.14.220, PROTO=TCP, SPT=44790, DPT=443 ... show more SRC=112.124.14.220, PROTO=TCP, SPT=44790, DPT=5366 SRC=112.124.14.220, PROTO=TCP, SPT=44790, DPT=4430 SRC=112.124.14.220, PROTO=TCP, SPT=44790, DPT=14330 SRC=112.124.14.220, PROTO=TCP, SPT=44790, DPT=5672 SRC=112.124.14.220, PROTO=TCP, SPT=44790, DPT=465 show less	Port Scan
🇸🇬 baltic-lab.com	2026-05-20 01:05:06 (3 weeks ago)	Firewall Detection, SG, Either a port scan or continued brute-force attack by a previously blocked o ... show more Firewall Detection, SG, Either a port scan or continued brute-force attack by a previously blocked offender ... show less	Brute-Force Port Scan
🇬🇧 PeravixGroup	2026-05-15 19:54:15 (3 weeks ago)	Honeypot detection: rsync unauthorized access / data sync attempt on port 873. Severity: LOW. Aaran. ... show more Honeypot detection: rsync unauthorized access / data sync attempt on port 873. Severity: LOW. Aaran.cloud show less	Port Scan
🇬🇧 PeravixGroup	2026-05-14 20:26:38 (4 weeks ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 mutebot.net	2026-05-11 17:13:47 (1 month ago)	SRC=112.124.14.220, PROTO=TCP, SPT=59618, DPT=6925 SRC=112.124.14.220, PROTO=TCP, SPT=59618, DPT=439 ... show more SRC=112.124.14.220, PROTO=TCP, SPT=59618, DPT=6925 SRC=112.124.14.220, PROTO=TCP, SPT=59618, DPT=43971 SRC=112.124.14.220, PROTO=TCP, SPT=59618, DPT=54632 SRC=112.124.14.220, PROTO=TCP, SPT=59618, DPT=32801 SRC=112.124.14.220, PROTO=TCP, SPT=59618, DPT=65174 show less	Port Scan

Showing 1 to 15 of 194 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 217.216.107.145

🇺🇸 207.46.13.150

🇺🇸 162.243.228.110

🇨🇳 117.57.205.36

🇨🇳 106.225.199.17

🇫🇷 91.231.89.219

🇺🇸 66.132.172.212

🇮🇳 4.240.82.91

🇨🇳 146.56.229.214

🇷🇺 81.222.188.223

🇺🇸 47.41.207.40

🇺🇸 34.170.72.28

🇦🇷 179.0.180.252

🇺🇸 172.191.94.172

🇺🇸 162.231.207.251

🇷🇺 93.77.187.140

🇺🇸 76.38.7.148

🇩🇪 69.5.169.193

🇨🇴 179.33.186.150

🇶🇦 176.202.87.38