112.94.253.142
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- United-Communications-Network-Technology-Co-Ltd, GuangZhou
- Usage Type
- Fixed Line ISP
- ASN
- AS17622
- Domain Name
- chinaunicom.cn
- Country
- π¨π³ China
- City
- Guangzhou, Guangdong
Abuse Reports
Total reports
208 from
61 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| πΊπΈ xmission.com |
Blocked by UFW (TCP on 6699)
Source port: 48984
TTL: 238
Packet length: 44
TOS: 0x00
This report (for 112.94.253.142) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| π¦πΉ hxsain |
Blocked by UFW on fr2 [47777/tcp] | SPT: 51053 | TTL: 234 | LEN: 44 | TOS: 0x00 β’ Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| π²π³ Public CSIRT/CC of Mongolia |
Honeypot hit: Empty payload (likely service probe); 10150 [1] TCP
|
Port Scan | |
| π΅π± sefinek.net |
Honeypot hit: Unauthorized traffic (16 bytes of payload); 2421 [1] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Port Scan | |
| π¦πΊ Klaverstyn |
Excessive HTTP request rate
|
Web App Attack | |
| π«π· Petre 21_ip |
|
Port Scan | |
| πΊπΈ RAP |
2026-10-21 22:21:46 UTC Unauthorized activity to TCP port 5900.
|
Port Scan | |
| πΉπ· Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (2166/tcp) [non-standard port]
|
Port Scan Hacking | |
| πͺπΈ raiolanetworks.com |
Honeypot detection: port scan / service probe. 3 events observed. 2 distinct ports targeted. Reported automatically from a honeypot sensor.
|
Port Scan | |
| π©πͺ 33three |
Fail2Ban jail WebAttack triggered
|
Brute-Force | |
| π΅π± sefinek.net |
Triggered Cloudflare WAF (firewallCustom) from CN.
Action: MANAGED_CHALLENGE | Protocol: HTTP/1.1 (GET) | Endpoint: /1 | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0 β’ Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
|
Bad Web Bot | |
| πΊπΈ donarev419 |
Connection to port 5000 with data transfer.
Data preview: οΏ½
|
Port Scan Hacking | |
| π©πͺ Skyrider |
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
|
Bad Web Bot Web App Attack | |
| π·πΈ Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| π¦πΊ PetePK |
Probed 1 time(s): TCP/5984
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown