112.94.252.91
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- United-Communications-Network-Technology-Co-Ltd, GuangZhou
- Usage Type
- Fixed Line ISP
- ASN
- AS17622
- Domain Name
- chinaunicom.cn
- Country
- 🇨🇳 China
- City
- Guangzhou, Guangdong
Abuse Reports
Total reports
220 from
70 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇲🇳 Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 2336 [1] TCP
|
Port Scan | |
| Anonymous |
Drop from IP address 112.94.252.91 to tcp-port 12381
|
Port Scan | |
| 🇺🇸 cybsecaoccol |
unauthorized connection or malicious port scan attempted on tcp port - corp
|
Port Scan Hacking | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇩🇪 guldkage |
Unauthorized connection attempt detected from IP address 112.94.252.91 to port 8443 (ger-03) [U]
|
Brute-Force Exploited Host | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (2310/tcp) [non-standard port]
|
Port Scan Hacking | |
| 🇬🇧 Nov |
Unauthorized access attempt (udp/3478)
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=60013 dstport=40000
|
Port Scan | |
| Anonymous |
denied traffic to a honeypot network. destination port 2103.
|
Port Scan Hacking | |
| 🇳🇵 radheykrishna.com.np |
Oct 6 03:26:59 kernel: [141665.644488] [UFW BLOCK] IN=ens160 OUT= SRC=112.94.252.91 LEN=44 TOS=0x00 PREC=0x20 TTL=235 ID=1542 PROTO=TCP SPT=28957 DPT=49672 WINDOW=1024 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇺🇸 MPL |
tcp/1833
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=13765 dstport=2127
|
Port Scan | |
| 🇺🇸 MPL |
tcp/5900
|
Port Scan | |
| 🇺🇸 MPL |
tcp/8181 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/6050
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown