112.254.12.116

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
94 reports
77 reporters · latest 57 minutes ago
ISP
China Unicom Shandong province network
Usage Type
Fixed Line ISP
ASN
AS4837
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Weifang, Shandong
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
94 from 77 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 26 🇩🇪 Germany 17 🇫🇷 France 8
Most common categories SSH 71 Brute-Force 67 Port Scan 26 Hacking 8 Web App Attack 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇨🇦 Psycho Solutions LLC
SSH Brute-Force
🇳🇱 Tsumugi Kotobuki
Port Scan on Honeypot | Ports: 22/SSH | Proto: TCP(1) | Flags: all SYN | TTL: 32 | Len: 44B | Win: 1024(1) | F2B/ufw-honeypot@2026-11-07T00:01:20Z
Port Scan Hacking
🇧🇷 noconex
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) de 112.254.12.116 [TCP]
Port Scan
🇦🇹 urnilxfgbez
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
Port Scan
🇩🇪 Mr-Money
scenario: crowdsecurity/ssh-bf - events: 6
SSH Brute-Force
🇳🇱 fynndows.de
Brute-Force SSH
🇨🇦 Psycho Solutions LLC
SSH Brute-Force
🇺🇸 NetVexor
Attack source identified and submitted via NetVexor BGP Blackhole Network
Port Scan Hacking Brute-Force
🇦🇷 Bruno
Port Scanner: 112.254.12.116
Port Scan
🇺🇸 paradoxnetworks
Brute-Force SSH
Anonymous
SSH honeypot: repeated failed logins (10+ attempts), auto-banned
Brute-Force SSH
🇺🇸 RAP
2026-11-06 13:42:28 UTC Unauthorized activity to TCP port 22. SSH
SSH
Anonymous
Knocking on port 22 (endlessh-go)
SSH
🇫🇷 EvoX
🛡️ Honeypot [bsts-tpot-hive]: Unauthorized connection attempt detected on 22/SSH
SSH Port Scan
🇺🇸 MPL
tcp/22
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 192.42.116.62
🇳🇱 185.226.197.27
🇩🇪 185.220.101.137
🇺🇦 178.216.231.238
🇻🇳 171.243.149.187
🇭🇰 156.225.1.10
🇺🇸 154.198.15.139
🇺🇸 87.87.158.111
🇺🇸 66.132.195.15
🇺🇸 66.132.186.238
🇸🇬 43.159.39.203
🇮🇩 27.112.79.53
🇺🇸 24.106.43.27
🇯🇵 8.216.8.194
🇺🇸 3.131.220.121
🇷🇴 2.57.122.150
🇺🇸 199.165.159.76
🇹🇼 198.235.24.64
🇧🇷 189.113.8.254
🇧🇷 189.52.52.162
feedback