AbuseIPDB » 112.204.161.202
112.204.161.202
This IP was reported 6 times. Confidence of
Abuse
is 4% : ?
ISP
IPG
Usage Type
Fixed Line ISP
ASN
AS9299
Hostname(s)
112.204.161.202.pldt.net
Domain Name
pldthome.com
Country
🇵🇭
Philippines
City
Marikina City, National Capital Region
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 112.204.161.202 :
This IP address has been reported a total of
6
times from
6 distinct
sources.
112.204.161.202 was first reported on
September 10th 2021 , and the most recent report was
13 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇨🇭
Origon
2026-07-31 02:31:17
(13 hours ago)
NOQUEUE - IP: 112.204.161.202 - Jul 31 04:31:17 plesk postfix/smtpd[783248]: NOQUEUE: reject: RCPT ...
show more
NOQUEUE - IP: 112.204.161.202 - Jul 31 04:31:17 plesk postfix/smtpd[783248]: NOQUEUE: reject: RCPT from unknown[112.204.161.202]: 554 5.7.1 Service unavailable; Client host [112.204.161.202] blocked using dnsbl-1.uceprotect.net; IP 112.204.161.202 is UCEPROTECT-Level 1 listed. See http://www.uceprotect.net/rblcheck.php?ipr=112.204.161.202; from=<REDACTED@REDACTED> to=<REDACTED@REDACTED> proto=ESMTP helo=<112.204.161.202.pldt.net>
show less
Email Spam
🇨🇳
ThreatBook.io
2026-01-11 23:34:31
(6 months ago)
ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/112.204.161.202
SSH
🇺🇸
xmission.com
2026-01-11 13:27:19
(6 months ago)
Blocked by UFW (TCP on 23)
Source port: 44679
TTL: 50
Packet length: 60
TOS: 0x08
This report (for ...
show more
Blocked by UFW (TCP on 23)
Source port: 44679
TTL: 50
Packet length: 60
TOS: 0x08
This report (for 112.204.161.202) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Hacking
Brute-Force
🇫🇷
oonux.net
2026-01-11 12:30:41
(6 months ago)
RouterOS: Scanning detected TCP 112.204.161.202:42178 > x.x.x.x:60023
Port Scan
🇺🇸
MPL
2026-01-11 09:32:53
(6 months ago)
tcp/23 (4 or more attempts)
Port Scan
🇩🇪
www.blocklist.de
2021-09-10 10:21:21
(4 years ago)
Sep 10 15:59:31 h02 sshd[16178]: Did not receive identification string from 112.204.161.202
Sep 10 1 ...
show more
Sep 10 15:59:31 h02 sshd[16178]: Did not receive identification string from 112.204.161.202
Sep 10 15:59:40 h02 sshd[16179]: reveeclipse mapping checking getaddrinfo for 112.204.161.202.pldt.net [112.204.161.202] failed - POSSIBLE BREAK-IN ATTEMPT!
Sep 10 15:59:40 h02 sshd[16179]: Invalid user admin from 112.204.161.202
Sep 10 15:59:40 h02 sshd[16179]: Connection closed by 112.204.161.202 [preauth]
Sep 10 15:59:59 h02 sshd[16181]: reveeclipse mapping checking getaddrinfo for 112.204.161.202.pldt.net [112.204.161.202] failed - POSSIBLE BREAK-IN ATTEMPT!
Sep 10 15:59:59 h02 sshd[16181]: Invalid user admin from 112.204.161.202
Sep 10 16:00:01 h02 sshd[16181]: Connection closed by 112.204.161.202 [preauth]
Sep 10 16:00:08 h02 sshd[16287]: reveeclipse mapping checking getaddrinfo for 112.204.161.202.pldt.net [112.204.161.202] failed - POSSIBLE BREAK-IN ATTEMPT!
Sep 10 16:00:08 h02 sshd[16287]: Invalid user admin from 112.204.161.202
Sep 10 16:00:08 h02 sshd[16287]: Connectio........
-------------------------------
show less
FTP Brute-Force
Hacking
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: