JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 112.94.253.239

112.94.253.239 was found in our database!

This IP was reported 199 times. Confidence of Abuse is 66%: ?

66%

ISP	United-Communications-Network-Technology-Co-Ltd, GuangZhou
Usage Type	Fixed Line ISP
ASN	AS17622
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 112.94.253.239

Whois 112.94.253.239

IP Abuse Reports for 112.94.253.239:

This IP address has been reported a total of 199 times from 61 distinct sources. 112.94.253.239 was first reported on September 2nd 2021, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Nov	2026-10-17 06:55:33 (3 hours ago)	Unauthorized access attempt (tcp/10263)	Port Scan
🇺🇸 donarev419	2026-10-14 05:12:40 (3 days ago)	Connection to port 3097 with data transfer. Data preview: GET / HTTP/1.1 Host: 198.23.188.201:3097 ... show more Connection to port 3097 with data transfer. Data preview: GET / HTTP/1.1 Host: 198.23.188.201:3097 Accept: / show less	Port Scan Hacking
🇺🇸 donarev419	2026-10-10 08:14:56 (1 week ago)	Connection to port 10000 with data transfer. Data preview: �	Port Scan Hacking
🇫🇷 Altai	2026-10-09 22:45:03 (1 week ago)	Blocked by UFW on Jellyfin [20/tcp] Source port: 27047 TTL: 237 Packet length: 44 TOS: 0x00 This re ... show more Blocked by UFW on Jellyfin [20/tcp] Source port: 27047 TTL: 237 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇵🇱 sefinek.net	2026-10-06 05:25:18 (1 week ago)	Honeypot hit: Large payload (1457 bytes); 50000 [1] TCP Reported by: https://github.com/sefinek/T-Po ... show more Honeypot hit: Large payload (1457 bytes); 50000 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot
🇲🇳 Public CSIRT/CC of Mongolia	2026-10-05 13:29:28 (1 week ago)	Honeypot hit: Empty payload (likely service probe); 10069 [1] TCP	Port Scan
🇺🇸 1gz	2026-10-05 07:37:52 (1 week ago)	Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET m ... show more Triggered Cloudflare WAF (firewallCustom) from CN. Action taken: CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: /officialsite UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/120.0.0.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 xmission.com	2026-10-01 16:35:19 (2 weeks ago)	Blocked by UFW (TCP on 50000) Source port: 54623 TTL: 239 Packet length: 44 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 50000) Source port: 54623 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 112.94.253.239) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇰🇷 winter	2026-09-30 18:26:41 (2 weeks ago)	Connection attemp from 112.94.253.239 to port 22	Brute-Force SSH
🇷🇸 Scan	2026-09-27 03:19:29 (2 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇺🇸 MPL	2026-09-17 18:08:46 (4 weeks ago)	tcp/10099 (2 or more attempts)	Port Scan
🇺🇸 MPL	2026-09-14 22:54:29 (1 month ago)	tcp/9320	Port Scan
🇹🇷 Domainhizmetleri.com	2026-09-14 16:54:33 (1 month ago)	Source: DH Hunter (Honeypot) \| Reason: Portscan (1 ports, 1 attempts in 480h, non-TR)	Port Scan
🇵🇱 bart@	2026-09-11 15:27:08 (1 month ago)	Automated scan detection against redacted protected targets. Hits=1; port 800 proto 6 detection dark ... show more Automated scan detection against redacted protected targets. Hits=1; port 800 proto 6 detection dark_ip show less	Port Scan
🇺🇸 RAP	2026-09-10 14:16:29 (1 month ago)	2026-09-10 14:16:29 UTC Unauthorized activity to TCP port 8080. Web App	Port Scan Web App Attack

Showing 1 to 15 of 199 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 178.178.222.57

🇫🇮 147.185.133.98

🇨🇳 101.89.141.184

🇧🇷 34.95.183.234

🇦🇪 217.165.38.11

🇺🇸 205.210.31.91

🇺🇸 205.210.31.90

🇲🇽 187.190.190.58

🇸🇬 167.88.173.161

🇮🇳 162.158.235.73

🇫🇮 147.185.133.71

🇫🇮 147.185.133.63

🇬🇧 135.136.20.11

🇮🇳 103.70.82.79

🇮🇳 59.179.31.237

🇹🇼 35.234.38.100

🇳🇱 35.204.198.10

🇷🇺 31.133.61.5

🇺🇸 205.210.31.88

🇺🇸 205.210.31.80