JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 112.124.56.197

112.124.56.197 was found in our database!

This IP was reported 180 times. Confidence of Abuse is 55%: ?

55%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 112.124.56.197

Whois 112.124.56.197

IP Abuse Reports for 112.124.56.197:

This IP address has been reported a total of 180 times from 54 distinct sources. 112.124.56.197 was first reported on March 12th 2025, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 xela_uvas	2026-06-15 04:14:40 (3 days ago)	SSH attack	Brute-Force SSH
🇩🇪 mattk	2026-06-09 10:08:34 (1 week ago)	port scan	Port Scan
🇫🇷 Fasetech	2026-06-09 01:18:47 (1 week ago)	SecLedge detected suspicious activity. Score: 240.48. Sensor: T-Pot.	Brute-Force
🇫🇷 Fasetech	2026-06-05 02:16:22 (1 week ago)	SecLedge detected suspicious activity. Score: 240.48. Sensor: T-Pot.	Brute-Force
🇳🇿 Antinson	2026-06-05 00:54:19 (1 week ago)	High error rate and elevated request volume targeting cPanel servers	Bad Web Bot
🇲🇾 Rizzy	2026-05-30 18:18:27 (2 weeks ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇫🇷 Petre 21_ip	2026-05-29 13:39:03 (2 weeks ago)	2026-05-29T15:39:02.656610+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-05-29T15:39:02.656610+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=112.124.56.197 DST=155.133.26.57 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=36372 PROTO=TCP SPT=41941 DPT=64182 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 ISPLtd	2026-05-28 04:29:19 (3 weeks ago)	May 28 01:29:15 112.124.56.197 TCP SPT=42554 DPT=45364 SYN May 28 01:29:16 112.124.56.197 TCP SPT=42 ... show more May 28 01:29:15 112.124.56.197 TCP SPT=42554 DPT=45364 SYN May 28 01:29:16 112.124.56.197 TCP SPT=42554 DPT=13507 SYN May 28 01:29:18 112.124.56.197 TCP SPT=42554 DPT=65377 ... show less	Port Scan
Anonymous	2026-05-27 18:49:21 (3 weeks ago)	May 27 14:49:20 localhost kernel: [108253088.395988] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more May 27 14:49:20 localhost kernel: [108253088.395988] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=112.124.56.197 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=233 ID=1675 PROTO=TCP SPT=47760 DPT=2699 WINDOW=1024 RES=0x00 SYN URGP=0 May 27 14:49:20 localhost kernel: [108253088.396008] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=112.124.56.197 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=233 ID=1675 PROTO=TCP SPT=47760 DPT=2699 SEQ=3626265726 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 May 27 14:49:20 localhost kernel: [108253088.809350] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=112.124.56.197 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=233 ID=34805 PROTO=TCP SPT=47760 DPT=15097 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 baltic-lab.com	2026-05-27 04:10:45 (3 weeks ago)	2026-05-27T06:09:48.270411+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b: ... show more 2026-05-27T06:09:48.270411+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=112.124.56.197 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=23407 PROTO=TCP SPT=54974 DPT=32791 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-27T06:10:05.133171+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=112.124.56.197 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=11044 PROTO=TCP SPT=54974 DPT=16773 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-27T06:10:05.418208+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=112.124.56.197 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=26671 PROTO=TCP SPT=54974 DPT=50897 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-27T06:10:09.815937+02:00 us kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:57:66:9b:c8:08:8b:ff:ce:a1:08:00 SRC=112.124.56.197 DST=89.117.22.226 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=39520 PROTO=TCP SPT=54974 DPT=65212 W ... show less	Brute-Force Hacking
🇫🇷 Little Iguana	2026-05-26 00:41:35 (3 weeks ago)	trying to access non-authorized port	Port Scan
🇬🇧 PeravixGroup	2026-05-22 23:22:16 (3 weeks ago)	Honeypot detection: Windows Remote Management (WinRM) unauthorized access attempt on port 5985. Seve ... show more Honeypot detection: Windows Remote Management (WinRM) unauthorized access attempt on port 5985. Severity: MEDIUM. Aaran.cloud show less	Brute-Force Hacking
Anonymous	2026-05-22 05:51:57 (3 weeks ago)	Port Scan detected from 112.124.56.197 (CN/China/-). 16 hits in the last 60 seconds	Web App Attack
Anonymous	2026-05-20 23:19:37 (4 weeks ago)	Port Scan detected from 112.124.56.197 (CN/China/-). 16 hits in the last 40 seconds	Web App Attack
🇺🇸 ISPLtd	2026-05-19 11:00:23 (4 weeks ago)	May 19 05:00:21 112.124.56.197 TCP SPT=48418 DPT=64454 SYN May 19 05:00:22 112.124.56.197 TCP SPT=48 ... show more May 19 05:00:21 112.124.56.197 TCP SPT=48418 DPT=64454 SYN May 19 05:00:22 112.124.56.197 TCP SPT=48418 DPT=28546 SYN May 19 05:00:22 112.124.56.197 TCP SPT=48418 DPT=57852 ... show less	Port Scan

Showing 1 to 15 of 180 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 152.53.53.142

🇺🇸 143.110.227.196

🇨🇦 199.167.138.45

🇬🇧 193.104.58.60

🇺🇸 173.255.192.244

🇮🇳 168.144.151.238

🇺🇸 147.185.132.208

🇭🇰 144.48.241.162

🇺🇸 136.144.43.197

🇮🇳 112.133.200.102

🇻🇳 103.63.108.25

🇫🇮 77.105.130.18

🇺🇸 69.55.60.174

🇺🇸 49.51.69.100

🇸🇬 47.82.13.1

🇸🇬 47.79.15.117

🇺🇸 45.79.109.4

🇧🇪 34.78.189.165

🇧🇩 210.4.68.72

🇺🇸 198.2.184.176