202.112.47.116

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
77% Critical
57 reports
34 reporters · latest 1 day ago
ISP
China Education and Research Network
Usage Type
University/College/School
ASN
AS4538
Domain Name
cernet.edu.cn
Country
🇨🇳 China
City
Beijing, Beijing
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
57 from 34 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇬🇧 United Kingdom of Great Britain and Northern Ireland 13 🇺🇸 United States of America 3 🇫🇷 France 2
Most common categories Email Spam 15 Phishing 13 Brute-Force 10 Hacking 3 Port Scan 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
Phishing email; Email spam
Phishing Email Spam
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-11-13 UTC.
Hacking
Anonymous
Phishing email; Email spam
Phishing Email Spam
🇺🇸 xmission.com
Blocked 11 connection attempts due to Spamhaus RBL (RJCT05) in the past 4 hours. To request delisting, visit https://www.spamhaus.org/lookup/ to check your IP status and submit a delist request if eligible.
Email Spam
Anonymous
Phishing email; Email spam
Phishing Email Spam
🇫🇷 GabrielJST
*Port Scan* detected from 202.112.47.116 (CN/China/-).
Port Scan
Anonymous
Phishing email; Email spam
Phishing Email Spam
🇺🇸 mnogoweb
Port Scan
🇮🇹 CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
Hacking
Anonymous
Phishing email; Email spam
Phishing Email Spam
🇹🇷 Jova
Part of a distributed password attack on a mail account (IMAP logins from many IPs).
Brute-Force
Anonymous
Phishing email; Email spam
Phishing Email Spam
🇸🇰 iplusv
Automatic report from IV firewall log.
Port Scan Hacking Brute-Force
🇫🇷 UM3
Exim Auth Failed
Brute-Force
Anonymous
Nov 8 13:48:33 m postfix/smtpd[17549]: warning: unknown[202.112.47.116]: SASL PLAIN authentication failed: (reason unavailable), [email protected] ...
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇭 209.99.190.186
🇺🇸 195.184.76.206
🇲🇽 187.190.35.163
🇰🇷 123.212.9.122
🇺🇸 100.29.192.122
🇰🇷 43.155.140.157
🇺🇸 195.184.76.205
🇫🇷 194.99.24.39
🇺🇸 192.0.82.238
🇩🇪 157.90.244.86
🇺🇸 152.32.208.9
🇨🇳 120.48.33.69
🇮🇳 117.213.130.184
🇮🇳 103.159.35.94
🇳🇵 103.89.157.25
🇸🇬 101.32.240.127
🇳🇱 77.239.124.65
🇳🇱 45.148.10.157
🇺🇸 18.145.191.34
🇵🇰 203.128.10.201
feedback