112.246.112.2
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- China Unicom Shandong province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Qingdao, Shandong
Abuse Reports
Total reports
31 from
19 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 RAP |
2026-11-13 19:42:15 UTC Unauthorized activity to TCP port 23. Telnet
|
Port Scan | |
| 🇺🇸 MPL |
tcp/23
|
Port Scan | |
| 🇦🇹 joe-abuse |
Honeypot: 1 unsolicited connection attempt(s) to ports where no service is offered (23/tcp); first 2026-11-11 07:24:24 UTC, last 2026-11-11 07:24:24 UTC. Reported by ipdb-security/fitzgerald.eu
|
Port Scan IoT Targeted | |
| 🇺🇸 Phil Schuyler |
Repeated probing against public honeypot services: 25 observed events targeting exposed network services.
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Activity from blacklisted IP
|
Hacking | |
| 🇮🇹 CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_tcp_issues,ndpi_probing_attempt
|
Hacking | |
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:21083 dst:23
|
Port Scan | |
| 🇺🇸 johuang92 |
Cowrie SSH honeypot: session 267816bd8100
|
SSH | |
| 🇺🇸 johuang92 |
Cowrie SSH honeypot: session 877e53dd7899
|
SSH | |
| 🇺🇸 MPL |
tcp/8443 (3 or more attempts)
|
Port Scan | |
| 🇩🇪 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Events: 1 | F2B/telnet-honeypot-scan@2026-11-05T18:21:02Z
|
Port Scan Hacking | |
| 🇫🇷 Kejult |
Honeypot Finding: repeated TCP service probing on TCP/23 (Telnet); 19 application-level events across 19 source port(s). Sensor(s): Cowrie.
|
Port Scan | |
| 🇨🇦 design2web.ca |
|
Port Scan | |
| 🇺🇸 MPL |
tcp/23
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown