112.94.252.112
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- United-Communications-Network-Technology-Co-Ltd, GuangZhou
- Usage Type
- Fixed Line ISP
- ASN
- AS17622
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Guangzhou, Guangdong
Abuse Reports
Total reports
208 from
70 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: Portscan (1 ports, 1 attempts in 480h, non-TR)
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1457 bytes); 4400 [1] TCP
|
Hacking | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇺🇸 RAP |
2026-11-06 16:34:24 UTC Unauthorized activity to TCP port 9200.
|
Port Scan | |
| 🇪🇸 librebit |
Brute force
|
Brute-Force | |
| 🇳🇱 donarev419 |
Connection to port 10048 with data transfer.
Data preview: GET / HTTP/1.1
Host: 109.110.170.76:10048
Accept: */*
|
Port Scan Hacking | |
| 🇧🇷 Host One |
T-Pot Honeypot alert: 5 malicious events (exploit_attempt, port_scan) detected.
|
Port Scan Hacking | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Unauthorized traffic (16 bytes of payload); 7701 [1] TCP
|
Port Scan | |
| 🇺🇸 Phil Schuyler |
Repeated probing against public honeypot services: 6 observed events targeting P0F/7800, TCP/7800.
|
Port Scan | |
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Large payload (1388 bytes); 20092 [1] TCP
|
Hacking | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 9011)
Source port: 60386
TTL: 239
Packet length: 44
TOS: 0x00
This report (for 112.94.252.112) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇦🇺 sel |
UFW blocked 1 connection attempts. Ports targeted:
|
Port Scan Bad Web Bot | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: HTTP Probe (995/tcp) [non-standard port]
|
Web App Attack | |
| 🇺🇸 Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 17877)
Source port: 48679
TTL: 239
Packet length: 44
TOS: 0x00
This report (for 112.94.252.112) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown