180.112.65.112
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Chinanet Jiangsu Province Network
- Usage Type
- Fixed Line ISP
- ASN
- AS4134
- Domain Name
- chinatelecom.cn
- Country
- 🇨🇳 China
- City
- Nanjing, Jiangsu
No reports in the last 60 days
180.112.65.112 has been reported 67 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
67 from
25 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇨🇦 Luhte |
Unsolicited TCP connection from 180.112.65.112 to port 0 at 2026-06-11T19:23:34Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
|
Port Scan Hacking | |
| 🇳🇱 knock |
Knock-Knock honeypot brute-force: RDP (35 total hits)
|
Brute-Force | |
| 🇳🇱 knock |
Knock-Knock honeypot brute-force: RDP (39 total hits)
|
Brute-Force | |
| 🇦🇺 dyln |
Dyls honeypot brute-force: RDP (224 total hits)
|
Brute-Force | |
| 🇩🇪 Freenex1911 |
2026-06-09T06:30:12Z - RDP login from 180.112.65.112 failed multiple times.
|
Brute-Force | |
| 🇫🇮 ValtonTahiri |
Windows IPBan blocked brute-force / failed login activity. Source=RDP; Username=6; Count=; LogonType=3; SourcePort=0; Status=0xc000006d; SubStatus=0xc000006a; Auth=NTLM
|
Port Scan Brute-Force | |
| 🇫🇷 Kimax |
RdpGuard detected brute-force attempt on RDP
|
Brute-Force | |
| 🇦🇺 dyln |
Dyls honeypot brute-force: RDP (179 total hits)
|
Brute-Force | |
| 🇩🇪 Lazentis |
Unauthorized access attempt to port 3389 (tcp)
|
Brute-Force SSH | |
| Anonymous |
Trying ports that it shouldn't be.
|
Port Scan Hacking Exploited Host | |
| 🇨🇦 Luhte |
Unsolicited TCP connection from 180.112.65.112 to port 0 at 2026-06-06T04:08:52Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
|
Port Scan Hacking | |
| 🇺🇸 ShadowWhisperer |
RDP credential attempt.
|
Brute-Force Hacking | |
| 🇬🇧 skocherhan |
RDP probe cluster. Session hits: 1. Client Info: RDP Connection Request [Routing Token: [REDACTED]]
|
Port Scan Brute-Force | |
| Anonymous |
Hit honeypot r.
|
Port Scan Hacking Exploited Host | |
| 🇳🇱 knock |
Knock-Knock honeypot brute-force: RDP (23 total hits)
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown