AbuseIPDB » 112.170.3.96

112.170.3.96 was found in our database!

This IP was reported 85 times. Confidence of Abuse is 81%: ?

81%

ISP	Korea Telecom
Usage Type	Fixed Line ISP
ASN	AS4766
Domain Name	kt.com
Country	Korea (the Republic of)
City	Hanam, Gyeonggi-do

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 112.170.3.96

Whois 112.170.3.96

IP Abuse Reports for 112.170.3.96:

This IP address has been reported a total of 85 times from 33 distinct sources. 112.170.3.96 was first reported on March 16th 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
DumaNet	2025-04-07 04:44:00 (2 weeks ago)	Blocked for port scanning (Port 23 / Telnet brute-force). Time: Fri Apr 4. 21:22:24 2025 +020 ... show moreBlocked for port scanning (Port 23 / Telnet brute-force). Time: Fri Apr 4. 21:22:24 2025 +0200 IP: 112.170.3.96 (KR/South Korea/-) Sample of block hits: Apr 4 21:22:02 vserv kernel: [52872234.374176] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=112.170.3.96 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=62169 PROTO=TCP SPT=40507 DPT=23 WINDOW=21921 RES=0x00 SYN URGP=0 Apr 4 21:22:02 vserv kernel: [52872234.376598] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=112.170.3.96 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=62169 PROTO=TCP SPT=40507 DPT=23 WINDOW=21921 RES=0x00 SYN URGP=0 Apr 4 21:22:02 vserv kernel: [52872234.378916] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=112.170.3.96 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=62169 PROTO=TCP SPT=40507 DPT=23 WINDOW=21921 RES=0x00 SYN URGP=0 Apr 4 21:22:02 vserv kernel: [52872234.382471] Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC= SRC=112.170.3.96 DST=[removed] LEN=40 TOS=0x00 PREC=0x00 TTL=45 ID=62169 PROTO=TCP SPT=40507 show less	Port Scan Brute-Force
urnilxfgbez	2025-04-06 22:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)	Port Scan
Grizzlytools	2025-04-06 05:05:35 (3 weeks ago)	Kingcopy(AI-IDS)RouterOS: Portscanner detected.	Port Scan
rtbh.com.tr	2025-04-06 00:05:55 (3 weeks ago)	list.rtbh.com.tr report: tcp/23	Brute-Force
urnilxfgbez	2025-04-05 22:45:00 (3 weeks ago)	Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)	Port Scan
diego	2025-04-05 22:24:48 (3 weeks ago)	Events: TCP SYN Discovery or Flooding, Seen 12 times in the last 10800 seconds	DDoS Attack
ThreatBook.io	2025-04-05 22:24:19 (3 weeks ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/112.170.3.96	SSH
MPL	2025-04-05 20:19:00 (3 weeks ago)	tcp ports: 2323,23 (30 or more attempts)	Port Scan
rtbh.com.tr	2025-04-05 16:05:55 (3 weeks ago)	list.rtbh.com.tr report: tcp/23	Brute-Force
Yepngo	2025-04-05 13:37:08 (3 weeks ago)	2025-04-05T14:36:29.916746+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00 ... show more2025-04-05T14:36:29.916746+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=112.170.3.96 DST=151.80.47.9 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=38603 PROTO=TCP SPT=5000 DPT=23 WINDOW=1267 RES=0x00 SYN URGP=0 2025-04-05T14:42:59.131008+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=112.170.3.96 DST=151.80.47.9 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=38603 PROTO=TCP SPT=5000 DPT=23 WINDOW=1267 RES=0x00 SYN URGP=0 2025-04-05T14:51:02.567488+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=112.170.3.96 DST=151.80.47.9 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=38603 PROTO=TCP SPT=5000 DPT=23 WINDOW=1267 RES=0x00 SYN URGP=0 2025-04-05T15:16:25.331418+02:00 ns3006402 kernel: [UFW BLOCK] IN=eno1 OUT= MAC=f0:79:59:6e:bf:2b:00:ff:ff:ff:ff:fb:08:00 SRC=112.170.3.96 DST=151.80.47.9 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=38603 PROTO=TCP SPT=5000 DPT=23 WINDOW=12 ... show less	Port Scan
RAP	2025-04-05 12:35:27 (3 weeks ago)	2025-04-05 12:35:27 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
RAP	2025-04-05 10:45:51 (3 weeks ago)	2025-04-05 10:45:51 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
MPL	2025-04-05 09:40:52 (3 weeks ago)	tcp/23	Port Scan
MPL	2025-04-05 08:46:36 (3 weeks ago)	tcp ports: 2323,23 (12 or more attempts)	Port Scan
MPL	2025-04-05 07:42:32 (3 weeks ago)	tcp ports: 23,2323 (34 or more attempts)	Port Scan

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩