112.172.47.8

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
49% Elevated
12 reports
10 reporters · latest 10 hours ago
ISP
Korea Telecom
Usage Type
Fixed Line ISP
ASN
AS4766
Domain Name
kt.com
Country
🇰🇷 Korea (the Republic of)
City
Incheon, Incheon
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
12 from 10 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 8 🇧🇷 Brazil 1 🇩🇪 Germany 1
Most common categories Brute-Force 6 Port Scan 5 Hacking 3 SSH 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇵 radheykrishna.com.np
Nov 13 16:18:54 kernel: [3471269.848732] [UFW BLOCK] IN=ens160 OUT= SRC=112.172.47.8 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=25973 DF PROTO=TCP SPT=35860 DPT=2 WINDOW=29200 RES=0x00 SYN URGP=0 ...
Port Scan
🇺🇸 MPL
tcp/2
Port Scan
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-10-29 UTC.
Hacking
Anonymous
denied traffic to a non-approved destination port. destination port 2.
Port Scan
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: Portscan (1 ports, 2 attempts in 480h)
Port Scan
🇺🇸 LSPCCU
TSEC Honeypot Network report. Threat score: 70/100. Categories: Hacking. Honeypot: beelzebub. Context: 112.172.47.8 classified as commodity attacker using automated exploitation tooling (high confidence).
Hacking
🇺🇸 psh-ack
Brute-Force SSH
🇺🇸 psh-ack
Brute-Force SSH
🇺🇸 slish
SSH honeypot: ssh_auth
Brute-Force SSH
🇺🇸 ryzenx3d
Automated report from an SSH honeypot: successful password authentication
Brute-Force
🇺🇸 ryzenx3d
Automated report from an SSH honeypot: successful password authentication
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 222.210.35.197
🇺🇸 20.25.87.141
🇧🇷 205.210.31.164
🇫🇷 194.163.167.3
🇨🇦 172.69.130.171
🇨🇳 124.174.19.195
🇨🇳 123.54.215.74
🇨🇳 122.152.221.135
🇳🇱 77.239.124.64
🇺🇸 70.167.235.215
🇺🇸 45.156.129.154
🇺🇸 38.248.63.42
🇺🇸 34.226.249.229
🇮🇳 20.219.139.13
🇩🇪 20.218.73.251
🇨🇳 202.46.62.12
🇲🇽 201.140.96.190
🇺🇸 198.98.54.3
🇳🇱 195.178.110.104
🇺🇸 162.216.150.9
feedback