112.124.27.119

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
54% Elevated
12 reports
11 reporters · latest 1 day ago
ISP
Aliyun Computing Co., LTD
Usage Type
Data Center/Web Hosting/Transit
ASN
AS37963
Domain Name
alibabacloud.com
Country
🇨🇳 China
City
Hangzhou, Zhejiang
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
12 from 11 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 3 🇫🇷 France 3 🇳🇱 Netherlands 2
Most common categories Port Scan 7 SSH 6 Brute-Force 5 Hacking 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇱 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 6379/Redis | Proto: TCP(1) | Flags: all SYN | TTL: 106 | Len: 44B | Win: 14197(1) | F2B/ufw-honeypot@2026-11-13T04:37:03Z
Port Scan Hacking
🇨🇿 lp
anomaly: tcp_port_scan, 501 > threshold 500, repeats 7677 times
Port Scan
🇨🇦 pinolallo
SSH brute-force detected by watch-ssh. 198 attempts in 24h. rDNS: Host 119.27.124.112.in-addr.arpa. not found: 3(NXDOMAIN). Auto-blocked for 1h.
SSH
🇳🇱 EndCore Group
Brute-Force SSH
🇩🇪 ZeroAttackVector
Brute-Force SSH
Anonymous
Blocked by firewall on hugin [6379/tcp] | Rule: UFW | SPT: 26306 | TTL: 110 | LEN: 40 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇫🇷 uthul
T-Pot honeypot: 45 hits on ports [22, 6379] (automated)
Port Scan Brute-Force SSH
🇫🇷 uthul
T-Pot honeypot: 45 hits on ports [22, 6379] (automated)
Port Scan Brute-Force SSH
🇫🇷 Kejult
Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity observed.
Hacking SSH
🇺🇸 donarev419
Connection to port 6379 with data transfer. Data preview: info server
Port Scan Hacking
🇰🇷 ds2bkp
Port Scan
🇩🇪 jonkoping
...
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇩🇪 194.88.98.113
🇨🇭 179.43.153.18
🇭🇰 168.76.131.178
🇸🇬 149.129.36.70
🇫🇮 147.185.133.190
🇮🇩 103.24.212.42
🇺🇸 43.153.47.201
🇭🇰 5.187.38.30
🇧🇪 198.235.24.251
🇺🇸 193.56.28.58
🇨🇴 190.146.181.250
🇧🇷 179.48.18.42
🇺🇸 142.93.86.170
🇸🇬 136.85.73.139
🇺🇸 98.174.37.196
🇨🇦 85.217.149.29
🇵🇭 58.69.56.44
🇬🇧 35.203.211.188
🇩🇪 31.70.113.190
🇺🇸 2.57.168.29
feedback