87.252.111.47
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- Hadara Technologies Private Shareholding Company
- Usage Type
- Fixed Line ISP
- ASN
- AS12975
- Domain Name
- hadara.ps
- Country
- 🇵🇸 Palestine, State of
- City
- Nablus, West Bank
Abuse Reports
Total reports
19 from
18 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: Portscan (1 ports, 1 attempts in 480h, non-TR)
|
Port Scan | |
| 🇺🇸 Choice Tech LLC |
Blocked by OPNsense firewall; 4 hits, proto=tcp, ports=22,23
|
Port Scan Hacking | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:39950 dst:23
|
Port Scan | |
| Anonymous |
SSH tarpit (endlessh) connection from 87.252.111.47
|
Brute-Force SSH | |
| 🇧🇷 chronos |
Telnet: Connection attempt to the unencrypted remote login service, commonly probed by IoT botnets. | Port: 23 | Proto: TCP | AS: AS12975 Palestine Telecommunications Company (PALTEL) | Location: Palestine
|
IoT Targeted Port Scan | |
| 🇺🇸 jbettigole |
MikroTik RouterOS: repeated connection attempts against non-public admin/service ports (SSH/Telnet/FTP/Winbox/API/WWW) triggering escalating 5m/15m/1h/1d blacklist
|
Brute-Force Hacking | |
| 🇦🇹 urnilxfgbez |
Last 24 Hours suspicious: (DPT=445|DPT=3389|DPT=22|DPT=3306|DPT=8080|DPT=23|DPT=5900|DPT=1433)
|
Port Scan | |
| 🇧🇷 noconex |
Wazuh Alert | Rule ID: 100199 | Desc: Suricata: (ET SCAN Potential SSH Scan) de 87.252.111.47 [TCP]
|
Port Scan Brute-Force SSH | |
| 🇸🇪 venix |
Unauthorized connection attempt detected from IP address 87.252.111.47 to port 23 (compute01.malmo)
|
Brute-Force Exploited Host | |
| 🇺🇸 HamSammich |
Automated sensor: 2 SSH connection/probe attempts over the last 24h (latest 2026-10-26T21:35Z).
|
Port Scan SSH | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 23)
Source port: 50594
TTL: 53
Packet length: 60
TOS: 0x00
This report (for 87.252.111.47) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Hacking Brute-Force | |
| 🇩🇪 ITSNF |
Blocked by os-abuseipdb; 8 hits, proto=tcp, ports=22,23
|
Port Scan Hacking | |
| 🇩🇪 zerodaysystemde |
Port (22 tcp) Scanner - SSH - HoneyPot
|
Port Scan SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown