JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 112.124.59.239

112.124.59.239 was found in our database!

This IP was reported 167 times. Confidence of Abuse is 51%: ?

51%

ISP	Aliyun Computing Co., LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37963
Domain Name	alibabacloud.com
Country	🇨🇳 China
City	Hangzhou, Zhejiang

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 112.124.59.239

Whois 112.124.59.239

IP Abuse Reports for 112.124.59.239:

This IP address has been reported a total of 167 times from 45 distinct sources. 112.124.59.239 was first reported on March 15th 2025, and the most recent report was 14 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 acadeova	2026-06-10 21:06:51 (14 hours ago)	🚨 Recon detected (nft drop) SRC=112.124.59.239 Observed=TCP dpt=46721 in=enp0s6 ttl=241 Time=recent( ... show more 🚨 Recon detected (nft drop) SRC=112.124.59.239 Observed=TCP dpt=46721 in=enp0s6 ttl=241 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
🇺🇸 sandra361	2026-06-08 20:10:02 (2 days ago)	Port scan detected: 83 attempts across 28 ports (10186,10242,10606,1145,11507,12035,12313,13310,1807 ... show more Port scan detected: 83 attempts across 28 ports (10186,10242,10606,1145,11507,12035,12313,13310,18070,19022,19849,2006,20082,20214,21016,2185,2349,28007,2963,3256,33110,395,39800,4088,50553,61017,7903,9413). \| Evidence: REAPER_TARPIT:IN=enp1s0 OUT= SRC=112.124.59.239 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=8676 PROTO=TCP SPT=49369 DPT=20082 WINDOW=1024 RES=0x00 SYN URGP=0 show less	Port Scan
🇬🇧 PeravixGroup	2026-06-08 14:25:19 (2 days ago)	Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aar ... show more Honeypot detection: SMB / Windows file sharing exploitation attempt on port 445. Severity: HIGH. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-07 10:38:08 (4 days ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇬🇧 PeravixGroup	2026-06-06 19:27:56 (4 days ago)	Honeypot detection: Windows Remote Management (WinRM) unauthorized access attempt on port 5986. Seve ... show more Honeypot detection: Windows Remote Management (WinRM) unauthorized access attempt on port 5986. Severity: MEDIUM. Aaran.cloud show less	Brute-Force Hacking
🇬🇧 PeravixGroup	2026-06-05 18:32:15 (5 days ago)	Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDI ... show more Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-29 21:37:42 (1 week ago)	Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ... show more Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 ISPLtd	2026-05-27 08:36:40 (2 weeks ago)	May 27 02:36:36 112.124.59.239 TCP SPT=50995 DPT=2887 SYN May 27 02:36:39 112.124.59.239 TCP SPT=509 ... show more May 27 02:36:36 112.124.59.239 TCP SPT=50995 DPT=2887 SYN May 27 02:36:39 112.124.59.239 TCP SPT=50995 DPT=37469 SYN May 27 02:36:39 112.124.59.239 TCP SPT=50995 DPT=58246 ... show less	Port Scan
🇬🇧 PeravixGroup	2026-05-23 10:30:01 (2 weeks ago)	Honeypot detection: Android Debug Bridge (ADB) unauthorized access attempt on port 5555. Severity: M ... show more Honeypot detection: Android Debug Bridge (ADB) unauthorized access attempt on port 5555. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Hacking
🇬🇧 PeravixGroup	2026-05-22 05:46:08 (2 weeks ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8080. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
Anonymous	2026-05-22 03:34:03 (2 weeks ago)	$f2bV_matches	Brute-Force SSH
Anonymous	2026-05-19 05:16:53 (3 weeks ago)	May 19 01:16:51 localhost kernel: [107513156.010934] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ... show more May 19 01:16:51 localhost kernel: [107513156.010934] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=112.124.59.239 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=233 ID=59794 PROTO=TCP SPT=47809 DPT=35614 WINDOW=1024 RES=0x00 SYN URGP=0 May 19 01:16:51 localhost kernel: [107513156.010958] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=112.124.59.239 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=233 ID=59794 PROTO=TCP SPT=47809 DPT=35614 SEQ=1112146674 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 May 19 01:16:52 localhost kernel: [107513157.094341] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=112.124.59.239 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x40 TTL=233 ID=55211 PROTO=TCP SPT=47809 DPT=49420 WINDOW=1024 RES=0x00 SYN URGP=0 May 19 01:16:52 localhost kernel: [107513157.094360] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=112.124.59.239 DST=[mungedIP2] LEN=4 show less	Port Scan
🇨🇦 Blinker73	2026-05-19 03:45:17 (3 weeks ago)	2026-05-18T23:45 kernel: OUT= SRC=112.124.59.239 LEN=40 TOS=0x00 PREC=0x00 TTL=228 ID=53508 PR ... show more 2026-05-18T23:45 kernel: OUT= SRC=112.124.59.239 LEN=40 TOS=0x00 PREC=0x00 TTL=228 ID=53508 PROTO=TCP SPT=42314 DPT=36179 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-18T23:45 kernel: OUT= SRC=112.124.59.239 LEN=40 TOS=0x00 PREC=0x00 TTL=228 ID=62197 PROTO=TCP SPT=42314 DPT=43548 WINDOW=1024 RES=0x00 SYN URGP=0 2026-05-18T23:45 kernel: OUT= SRC=112.124.59.239 LEN=40 TOS=0x00 PREC=0x00 TTL=228 ID=51954 PROTO=TCP SPT=42314 DPT=643 WINDOW=1024 RES=0x00 SYN URGP= show less	Port Scan
🇨🇳 ThreatBook.io	2026-05-19 00:25:52 (3 weeks ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/112.124.59.239 2026 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/112.124.59.239 2026-05-18 14:13:53 / 2026-05-18 10:36:58 / 2026-05-18 14:13:54 /favicon.ico show less	Web App Attack
🇨🇳 ThreatBook.io	2026-05-12 00:47:10 (4 weeks ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/112.124.59.239 2026 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/112.124.59.239 2026-05-11 00:10:52 / show less	Web App Attack

Showing 1 to 15 of 167 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 158.94.209.107

🇺🇸 142.248.80.30

🇨🇳 115.191.64.182

🇯🇲 67.213.148.55

🇯🇲 63.143.116.164

🇺🇸 47.185.92.128

🇳🇱 45.148.10.62

🇬🇭 41.139.18.233

🇮🇳 20.193.229.53

🇭🇰 199.45.154.180

🇳🇱 195.178.110.188

🇷🇴 193.32.162.60

🇲🇽 187.189.92.140

🇧🇷 187.122.57.45

🇧🇷 187.107.88.97

🇺🇸 185.191.171.17

🇹🇭 183.89.248.224

🇨🇴 179.33.186.150

🇳🇱 176.65.149.180

🇺🇸 162.243.147.237