218.112.28.52

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
27 reports
24 reporters · latest 1 hour ago
ISP
Japan Nation-wide Network of SoftBank Corp.
Usage Type
Fixed Line ISP
ASN
AS17676
Hostname(s)
softbank218112028052.bbtec.net
Domain Name
bbtec.net
Country
🇯🇵 Japan
City
Tokyo, Tokyo
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
27 from 24 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 6 🇫🇷 France 6 🇺🇸 United States of America 5
Most common categories Port Scan 20 Hacking 10 Web App Attack 4 Brute-Force 3 Bad Web Bot 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇦🇹 joe-abuse
Honeypot: 1 unsolicited connection attempt(s) to ports where no service is offered (23/tcp); first 2026-11-15 22:02:21 UTC, last 2026-11-15 22:02:21 UTC. Reported by ipdb-security/fitzgerald.eu
Port Scan IoT Targeted
🇺🇸 RAP
2026-11-15 20:45:01 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇩🇪 bescared
F2B - Malicious activity detected. Unauthorized connection attempt: Telnet. -1ce9a8a2-
Port Scan
🇧🇷 radardatelecom
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot Web App Attack
🇨🇦 Slackin' Jack
Triggered honeypot on port 22. (218.112.28.52)
Port Scan
🇹🇭 Sawasdee
Port Scan ...
Port Scan
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:41346 dst:23
Port Scan
🇩🇪 EGP Abuse Dept
Scanning for port/service exploits on tpc-052.mach3builders.nl
Port Scan Hacking
🇳🇱 EGP Abuse Dept
Unauthorized connection to Telnet port 23
Port Scan Hacking
🇺🇸 RAP
2026-11-14 01:44:38 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇫🇷 EvoX
Hacking Bad Web Bot
🇩🇪 NetReportsGermany
2026-11-13 16:53:19 UTC - Suricata: ET EXPLOIT MVPower DVR Shell UCE - ports: 80
Hacking
Anonymous
Command Injection Over HTTP Payload.
Web App Attack
🇫🇷 id2i
2026-11-13T01:11:31.101017+01:00 coraza-spoa[262622]: [client "218.112.28.52"] Coraza: Access denied (phase 2). Inbound Anomaly Score Exceeded (Total Score: 18)
Hacking Web App Attack
🇺🇸 Cyber Crusader
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan Hacking Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.25.90.84
🇪🇹 196.188.93.169
🇳🇱 193.176.31.202
🇳🇱 193.176.31.149
🇺🇸 174.68.42.195
🇻🇺 138.226.239.234
🇮🇶 65.20.175.6
🇨🇳 60.16.196.58
🇬🇧 35.203.210.60
🇬🇧 193.176.29.26
🇬🇧 193.176.29.23
🇻🇪 190.89.30.117
🇺🇸 143.55.141.170
🇨🇳 125.84.251.144
🇩🇪 109.160.32.126
🇮🇳 106.216.82.156
🇸🇪 104.23.217.86
🇺🇸 98.41.155.85
🇮🇶 65.20.134.110
🇨🇳 58.19.143.133
feedback