JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 112.124.52.69

112.124.52.69 was found in our database!

This IP was reported 224 times. Confidence of Abuse is 72%: ?

72%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 112.124.52.69

Whois 112.124.52.69

IP Abuse Reports for 112.124.52.69:

This IP address has been reported a total of 224 times from 69 distinct sources. 112.124.52.69 was first reported on March 18th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 baltic-lab.com	2026-09-02 14:20:21 (1 hour ago)	2026-09-02T16:17:05.351731+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b: ... show more 2026-09-02T16:17:05.351731+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=112.124.52.69 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=10960 PROTO=TCP SPT=58620 DPT=8216 WINDOW=1024 RES=0x00 SYN URGP=0 2026-09-02T16:17:41.388028+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=112.124.52.69 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=3700 PROTO=TCP SPT=58620 DPT=8215 WINDOW=1024 RES=0x00 SYN URGP=0 2026-09-02T16:18:38.223160+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=112.124.52.69 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=59512 PROTO=TCP SPT=58620 DPT=4011 WINDOW=1024 RES=0x00 SYN URGP=0 2026-09-02T16:18:58.884423+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=112.124.52.69 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=30450 PROTO=TCP SPT=58620 DPT=8505 WINDOW=102 ... show less	Brute-Force Hacking
🇺🇸 Nova Reed	2026-09-02 14:10:36 (2 hours ago)	Sep 2 22:09:46 racknerd-df72780 kernel: [4789897.490678] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:e8:9 ... show more Sep 2 22:09:46 racknerd-df72780 kernel: [4789897.490678] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:e8:95:3e:20:d8:0b:13:e1:41:08:00 SRC=112.124.52.69 DST=67.215.241.238 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=12567 PROTO=TCP SPT=58151 DPT=3023 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 2 22:10:06 racknerd-df72780 kernel: [4789917.455832] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:e8:95:3e:20:d8:0b:13:e1:41:08:00 SRC=112.124.52.69 DST=67.215.241.238 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=34177 PROTO=TCP SPT=58151 DPT=15006 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 2 22:10:36 racknerd-df72780 kernel: [4789947.015325] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:e8:95:3e:20:d8:0b:13:e1:41:08:00 SRC=112.124.52.69 DST=67.215.241.238 LEN=40 TOS=0x00 PREC=0x00 TTL=236 ID=1200 PROTO=TCP SPT=58151 DPT=12504 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Brute-Force SSH
Anonymous	2026-09-02 06:38:37 (9 hours ago)	Sep 2 02:38:34 localhost kernel: [116676248.953829] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more Sep 2 02:38:34 localhost kernel: [116676248.953829] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=112.124.52.69 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=229 ID=7277 PROTO=TCP SPT=51112 DPT=34500 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 2 02:38:34 localhost kernel: [116676248.953851] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=112.124.52.69 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=229 ID=7277 PROTO=TCP SPT=51112 DPT=34500 SEQ=42597079 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 2 02:38:36 localhost kernel: [116676250.954940] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=112.124.52.69 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=229 ID=22496 PROTO=TCP SPT=51112 DPT=11206 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 2 02:38:36 localhost kernel: [116676250.954958] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=112.124.52.69 DST=[mungedIP2] LEN=40 TOS=0x show less	Port Scan
🇺🇸 schematics.cc	2026-09-01 14:51:09 (1 day ago)	Blocked by on honeypot2 [30937/tcp] \| SPT: 54253 \| TTL: 239 \| LEN: 40 \| TOS: 0x00 • Reported by: abu ... show more Blocked by on honeypot2 [30937/tcp] \| SPT: 54253 \| TTL: 239 \| LEN: 40 \| TOS: 0x00 • Reported by: abuse.terraforge.fun show less	Port Scan
🇹🇷 neron	2026-09-01 13:02:41 (1 day ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-08-29 19:02:41 (3 days ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
Anonymous	2026-08-28 19:31:15 (4 days ago)	$f2bV_matches	Brute-Force SSH
🇹🇷 neron	2026-08-28 13:09:09 (5 days ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇩🇪 LRob	2026-08-28 11:50:43 (5 days ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| ua: Mozilla/5.0 (com ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| ua: Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html) \| 2026-08-28 11:50 UTC show less	Hacking Web App Attack
🇹🇷 neron	2026-08-23 19:21:50 (1 week ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-08-22 19:21:50 (1 week ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-08-21 14:25:58 (1 week ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇨🇳 PrivateLiu	2026-08-20 02:28:02 (1 week ago)	[AbuseIPDB auto-report] Rules: Rule4. Region: CN. Unsupported/malformed requests: HTTP 400 responses ... show more [AbuseIPDB auto-report] Rules: Rule4. Region: CN. Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: /. Statuses: 301, 400. Methods: GET. UA: N/A show less	Bad Web Bot Web App Attack
🇹🇷 neron	2026-08-17 07:23:12 (2 weeks ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack
🇹🇷 neron	2026-08-16 07:06:48 (2 weeks ago)	CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall	Hacking Web App Attack

Showing 1 to 15 of 224 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 106.115.100.138

🇨🇳 106.15.238.36

🇷🇴 89.121.255.194

🇺🇸 71.62.71.151

🇶🇦 34.18.205.136

🇨🇦 20.104.49.130

🇬🇧 5.226.140.18

🇮🇳 2404:6800:4013:804::127

🇫🇮 157.22.72.191

🇲🇾 149.118.158.8

🇺🇸 137.184.179.158

🇨🇳 115.231.78.11

🇫🇷 85.217.140.29

🇳🇱 62.93.178.66

🇳🇬 41.207.248.198

🇧🇩 27.147.249.147

🇨🇦 24.244.93.239

🇦🇷 191.103.51.11

🇨🇳 175.9.220.17

🇳🇱 172.253.95.214