2.112.231.21

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
98% Critical
23 reports
20 reporters · latest 16 hours ago
ISP
ESSE ZETA GLACES S.N.C. DI SCOCOZZA G. & ZANNINO V.
Usage Type
Fixed Line ISP
ASN
AS3269
Hostname(s)
host-2-112-231-21.business.telecomitalia.it
Domain Name
tim.it
Country
🇮🇹 Italy
City
Turin, Piedmont
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
23 from 20 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 6 🇺🇸 United States of America 4 🇫🇷 France 3
Most common categories Brute-Force 18 SSH 18 Port Scan 5 Hacking 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 zulzeen
[incypit-web] Banned by Fail2ban (Jail: syswarden-portscan)
Port Scan
Anonymous
Repeated SSH brute force and user enumeration attempts against a secured web server. Multiple failed authentication attempts from this IP across an extended period.
Brute-Force SSH
🇵🇱 sefinek.net
Honeypot hit: SSH handshake/banner (23 bytes of payload); 12850 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
SSH
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: SSH handshake/banner (23 bytes of payload); 12342 [1] TCP
Brute-Force SSH
🇫🇷 uthul
T-Pot honeypot: 13 hits on ports [12850] (automated)
Port Scan
🇲🇳 Public CSIRT/CC of Mongolia
Honeypot hit: SSH handshake/banner (23 bytes of payload); 12342 [1] TCP
Brute-Force SSH
🇳🇱 ShxneEXE
SSH honeypot honeypot-01: login attempt as 'root' from 2.112.231.21 port 39138 to dst port 14387 at 2026-11-03 07:54:43 UTC. No legitimate users on this host - any login is brute-force/scanning.
Brute-Force SSH
🇩🇪 _ArminS_
Bad SSHAUTH 2026.11.03 06:08:35 blocked until 2026.11.06 06:08:35 by HoneyPot US-EAST_ashburn01
SSH Brute-Force Hacking
🇬🇧 KTSTechnology
Repeated connection attempts to firewalled ports, detected by our ISP firewall Interconnect WL
Port Scan
🇩🇪 Ilop
[hp-100] 4 unsolicited packets to honeypot ports 12850 (OCI DShield sensor)
Port Scan
🇫🇷 tecnicorioja
Failed password for root Nov 02 17:08:28 port 59926
Brute-Force SSH
Anonymous
Repeated SSH brute force and user enumeration attempts against a secured web server. Multiple failed authentication attempts from this IP across an extended period.
Brute-Force SSH
🇫🇮 Phish.gg
Brute-Force SSH
Anonymous
Brute-Force SSH
🇨🇿 lp
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇷 84.17.60.251
🇸🇬 47.128.120.207
🇸🇬 47.128.120.185
🇧🇷 45.229.91.2
🇺🇸 44.220.188.47
🇨🇦 144.217.61.131
🇧🇩 116.206.253.60
🇨🇳 106.13.38.13
🇫🇷 85.217.140.11
🇺🇸 52.71.46.142
🇮🇷 5.232.14.158
🇺🇸 3.130.168.2
🇺🇸 216.180.246.46
🇺🇸 147.185.132.55
🇺🇸 85.239.151.34
🇺🇸 85.208.96.204
feedback