112.94.252.87

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
40% Elevated
186 reports
63 reporters · latest 1 week ago
ISP
United-Communications-Network-Technology-Co-Ltd, GuangZhou
Usage Type
Fixed Line ISP
ASN
AS17622
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Guangzhou, Guangdong
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
186 from 63 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇷🇸 Serbia 4 🇩🇪 Germany 3 🇧🇷 Brazil 2
Most common categories Port Scan 13 Hacking 7 Exploited Host 3 Brute-Force 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
Anonymous
denied traffic to a honeypot network. destination port 10059.
Port Scan Hacking
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇺🇸 sumnone
Port probing on unauthorized port 12411
Port Scan Hacking Exploited Host
🇫🇷 uthul
T-Pot honeypot: 8 hits on ports [6095] (automated)
Port Scan
🇵🇱 sefinek.net
Honeypot hit: Unauthorized traffic (16 bytes of payload); 1066 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
Port Scan
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Exploited Host. Last observed 2026-10-13 UTC.
Exploited Host
🇫🇮 6kilowatti
Port Scan
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇧🇷 Host One
T-Pot Honeypot alert: 5 malicious events (exploit_attempt, port_scan) detected.
Port Scan Hacking
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇫🇮 mikkopal88
TCP SYN port scan to database or remote admin port
Port Scan
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=60217 dstport=7687
Port Scan
🇩🇪 Admins@Storch
IPS:drop <match> dstport=5038
Brute-Force Exploited Host
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 16003 [1] TCP
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇺 194.190.192.88
🇺🇸 136.144.43.13
🇺🇸 136.144.43.11
🇫🇷 85.204.70.92
🇺🇸 68.225.62.138
🇮🇳 49.207.182.187
🇮🇱 2.55.107.129
🇻🇳 1.52.214.166
🇵🇭 202.69.171.60
🇷🇺 193.232.101.245
🇺🇦 193.161.14.134
🇹🇼 172.68.87.235
🇩🇪 167.94.146.49
🇺🇸 161.35.139.31
🇮🇳 103.123.53.88
🇨🇦 85.217.149.10
🇳🇱 45.148.10.141
🇨🇳 221.180.47.59
🇳🇱 213.209.159.209
🇹🇼 210.71.231.91
feedback