112.255.149.170
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- China Unicom Shandong province network
- Usage Type
- Fixed Line ISP
- ASN
- AS4837
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Qingdao, Shandong
No reports in the last 60 days
112.255.149.170 has been reported 99 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
99 from
41 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇧🇷 ICS Labs |
ICS Labs identified 112.255.149.170 as a malicious indicator from threat intelligence.
|
DDoS Attack Port Scan Hacking Brute-Force Exploited Host | |
| 🇮🇳 evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking Brute-Force SSH | |
| 🇮🇳 evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking Brute-Force SSH | |
| 🇺🇸 MPL |
tcp/8080 (6 or more attempts)
|
Port Scan | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Mozi IoT botnet payload delivery / infection attempt on port 8080. Severity: CRITICAL. Aaran.cloud
|
Hacking IoT Targeted | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Mozi IoT botnet payload delivery / infection attempt on port 8080. Severity: CRITICAL. Aaran.cloud
|
Hacking IoT Targeted | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud
|
IoT Targeted Brute-Force | |
| 🇫🇮 tjs |
web attack, shell command or exploit attempt
|
Hacking Web App Attack | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇺🇸 MPL |
tcp/81 (6 or more attempts)
|
Port Scan | |
| 🇫🇷 ISPLtd |
May 25 07:13:08 112.255.149.170 TCP SPT=48894 DPT=8081 SYN
May 25 07:13:09 112.255.149.170 TCP SPT=48894 DPT=8081 SYN
May 25 07:13:11 112.255.149.170 TCP SPT=48894 DPT=8081
...
|
Port Scan | |
| 🇫🇷 rayn.lol |
Honeypot: cowrie SSH brute-force login as 'support'/'support123' from 112.255.149.170 at 2026-05-25T07:39:31.964553Z
|
Brute-Force SSH | |
| 🇺🇸 MPL |
tcp/80 (6 or more attempts)
|
Port Scan | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇬🇧 PeravixGroup |
Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud
|
IoT Targeted Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown