112.94.252.99

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
34% Elevated
200 reports
75 reporters · latest 1 week ago
ISP
United-Communications-Network-Technology-Co-Ltd, GuangZhou
Usage Type
Fixed Line ISP
ASN
AS17622
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Guangzhou, Guangdong
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
200 from 75 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 3 🇷🇸 Serbia 2 🇺🇸 United States of America 2
Most common categories Port Scan 12 Hacking 5 Brute-Force 1 Exploited Host 1
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
denied traffic to a honeypot network. destination port 63243.
Port Scan Hacking
🇫🇷 uthul
T-Pot honeypot: 9 hits on ports [9002] (automated)
Port Scan
Anonymous
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 995) Source port: 38424 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 112.94.252.99) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: Empty payload (likely service probe); 12447 [1] TCP
Port Scan
🇫🇷 uthul
T-Pot honeypot: 8 hits on ports [49153] (automated report)
Port Scan
🇺🇸 MPL
tcp/5342 (2 or more attempts)
Port Scan
Anonymous
Honeypot hit: misc
Port Scan Hacking Exploited Host
Anonymous
Port Scan Brute-Force
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (82/tcp) [non-standard port]
Port Scan Hacking
🇷🇸 Smel
MH/MP Probe, Scan, Hack -
Port Scan Hacking
🇷🇸 Smel
MH/MP Probe, Scan, Hack -
Port Scan Hacking
🇭🇰 mutebot.net
SRC=112.94.252.99, PROTO=TCP, SPT=59011, DPT=3389
Port Scan
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇪🇸 raiolanetworks.com
Honeypot detection: port scan / service probe. 2 events observed. Reported automatically from a honeypot sensor.
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 195.178.110.232
🇺🇸 108.146.29.78
🇹🇷 193.35.153.95
🇰🇷 121.180.217.182
🇫🇷 91.231.89.230
🇱🇻 84.245.250.156
🇷🇺 83.239.84.130
🇧🇷 34.95.132.245
🇳🇱 31.58.51.225
🇸🇬 14.102.84.119
🇺🇸 13.59.32.34
🇪🇸 5.182.83.231
🇮🇳 152.59.46.140
🇬🇧 82.31.28.153
🇺🇸 70.169.11.216
🇳🇱 64.205.72.140
feedback