JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 112.94.252.64

112.94.252.64 was found in our database!

This IP was reported 156 times. Confidence of Abuse is 62%: ?

62%

ISP	United-Communications-Network-Technology-Co-Ltd, GuangZhou
Usage Type	Fixed Line ISP
ASN	AS17622
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 112.94.252.64

Whois 112.94.252.64

IP Abuse Reports for 112.94.252.64:

This IP address has been reported a total of 156 times from 57 distinct sources. 112.94.252.64 was first reported on September 1st 2021, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Petre 21_ip	2026-07-13 08:34:32 (5 hours ago)	2026-07-13T10:34:31.812057+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-07-13T10:34:31.812057+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=112.94.252.64 DST=155.133.26.57 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=40642 PROTO=TCP SPT=34602 DPT=11122 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇫🇮 6kilowatti	2026-07-12 09:48:22 (1 day ago)	2026-07-12T12:48:21.848661+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-07-12T12:48:21.848661+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=112.94.252.64 DST=5.61.88.83 LEN=44 TOS=0x00 PREC=0x00 TTL=229 ID=45482 PROTO=TCP SPT=43623 DPT=2112 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-07-10 18:40:52 (2 days ago)	Honeypot hit: Empty payload (likely service probe); 10198 [1] TCP	Port Scan
🇺🇸 sandra361	2026-07-07 07:29:44 (6 days ago)	Port scan detected: 5 attempts across 1 port (2082). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=112.94 ... show more Port scan detected: 5 attempts across 1 port (2082). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=112.94.252.64 LEN=56 TOS=0x00 PREC=0x00 TTL=36 ID=5373 DF PROTO=TCP SPT=17878 DPT=2082 WINDOW=29200 RES=0x00 ACK PSH URGP=0 show less	Port Scan
Anonymous	2026-07-07 01:05:44 (6 days ago)	89-nginx-x00 ...	Bad Web Bot Web App Attack
🇬🇧 sonot	2026-07-01 13:47:12 (1 week ago)	Blocked by UFW on tunneluk01 [8729/tcp] \| SPT: 39878 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: ... show more Blocked by UFW on tunneluk01 [8729/tcp] \| SPT: 39878 \| TTL: 235 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-06-30 00:35:13 (1 week ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇦🇹 centurion	2026-06-30 00:28:07 (1 week ago)	Unauthorized attempt on coresecret [5938/tcp] Source port: 18903 TTL: 236 Packet length: 44 TOS: 0x0 ... show more Unauthorized attempt on coresecret [5938/tcp] Source port: 18903 TTL: 236 Packet length: 44 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 sandra361	2026-06-27 18:24:43 (2 weeks ago)	Port scan detected: 6 attempts across 1 ports (12239). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=112. ... show more Port scan detected: 6 attempts across 1 ports (12239). \| Evidence: REAPER_TARPIT: IN=enp1s0 SRC=112.94.252.64 LEN=60 TOS=0x00 PREC=0x00 TTL=36 ID=35638 DF PROTO=TCP SPT=46677 DPT=12239 WINDOW=29200 RES=0x00 SYN URGP=0 show less	Port Scan
🇺🇸 xmission.com	2026-06-27 16:19:10 (2 weeks ago)	Blocked by UFW (TCP on 23023) Source port: 48150 TTL: 237 Packet length: 44 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 23023) Source port: 48150 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 112.94.252.64) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇩 hermawan	2026-06-21 02:46:45 (3 weeks ago)	1782009994.977199 112.94.252.64 103.166.156.58 1024_2_1400_0 2026-06-21 09:46:34 WIB ...	Email Spam Hacking
🇦🇺 LiftUp Hosting	2026-06-18 19:40:00 (3 weeks ago)	Honeypot hit: HTTP/1.1 request on 50995 GET / Accept: /; 50995 [1] TCP	Hacking Bad Web Bot
🇬🇧 sandra361	2026-06-16 12:22:03 (3 weeks ago)	Port scan detected: 5 attempts across 1 ports (59100). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=11 ... show more Port scan detected: 5 attempts across 1 ports (59100). \| Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=112.94.252.64 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=45162 DF PROTO=TCP SPT=27193 DPT=59100 WINDOW=29200 RES=0x00 SYN URGP=0 show less	Port Scan
Anonymous	2026-06-12 14:28:00 (1 month ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2026-06-12 12:39:24 (1 month ago)	Honeypot hit: Unauthorized traffic (22 bytes of payload); 9000 [1] TCP Reported by: https://github.c ... show more Honeypot hit: Unauthorized traffic (22 bytes of payload); 9000 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan

Showing 1 to 15 of 156 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 94.154.43.185

🇨🇳 61.145.56.3

🇺🇸 50.220.35.122

🇸🇬 203.116.129.55

🇨🇮 160.154.233.200

🇺🇸 154.30.78.137

🇨🇳 121.204.171.7

🇨🇳 120.52.18.19

🇮🇳 106.219.245.78

🇮🇳 103.161.92.15

🇳🇱 86.54.31.46

🇮🇳 2401:4900:7686:4dfd:e5f4:eb08:b561:138c

🇨🇳 115.60.129.163

🇮🇹 83.98.84.201

🇧🇩 2404:1c40:48b:60fb:68e3:4489:b80f:60fa

🇻🇳 125.212.217.143

🇰🇷 125.138.166.217

🇮🇳 117.200.89.125

🇷🇺 91.79.234.9

🇨🇦 85.217.149.69