JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 112.25.252.50

112.25.252.50 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 80%: ?

80%

ISP	China Mobile Communications Corporation
Usage Type	Fixed Line ISP
ASN	AS56046
Domain Name	chinamobile.com
Country	🇨🇳 China
City	Nanjing, Jiangsu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 112.25.252.50

Whois 112.25.252.50

IP Abuse Reports for 112.25.252.50:

This IP address has been reported a total of 15 times from 14 distinct sources. 112.25.252.50 was first reported on July 15th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 TheHoneyPotter	2026-07-21 23:36:48 (2 hours ago)	Honeypot detection: SSH brute-force authentication attempt on port 22 (2 or more attempts) - Logs: 2 ... show more Honeypot detection: SSH brute-force authentication attempt on port 22 (2 or more attempts) - Logs: 2026-07-21T23:36:48.060Z ACCEPT host=::ffff:112.25.252.50 port=39194 fd=4 n=1/4096 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-21 06:31:06 (19 hours ago)	(sshd) Failed SSH login from 112.25.252.50 (CN/China/-): 5 in the last 3600 secs; Ports: ; Directio ... show more (sshd) Failed SSH login from 112.25.252.50 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jul 21 01:30:50 14004 sshd[15837]: Did not receive identification string from 112.25.252.50 port 39634 Jul 21 01:30:52 14004 sshd[15838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.25.252.50 user=root Jul 21 01:30:55 14004 sshd[15838]: Failed password for root from 112.25.252.50 port 41310 ssh2 Jul 21 01:30:57 14004 sshd[15884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.25.252.50 user=root Jul 21 01:30:59 14004 sshd[15884]: Failed password for root from 112.25.252.50 port 47614 ssh2 show less	Brute-Force SSH
🇬🇧 markawes	2026-07-21 01:52:27 (23 hours ago)	[CDN] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence: ... show more [CDN] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence: Jul 21 02:52:14 cdn sshd[1866167]: Failed password for root from 112.25.252.50 port 36270 ssh2 Jul 21 02:52:17 cdn sshd[1866171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.25.252.50 user=root Jul 21 02:52:19 cdn sshd[1866171]: Failed password for root from 112.25.252.50 port 42558 ssh2 Jul 21 02:52:22 cdn sshd[1866177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.25.252.50 user=root Jul 21 02:52:25 cdn sshd[1866177]: Failed password for root from 112.25.252.50 port 48610 ssh2 show less	Brute-Force SSH
🇯🇵 mkaraki	2026-07-21 00:50:40 (1 day ago)	1784595039 # Service_probe # SIGNATURE_SEND # source_ip:112.25.252.50 # dst_port:2222 ...	Port Scan
🇫🇷 fabdarks	2026-07-20 07:30:45 (1 day ago)	SSH honeypot (Cowrie) hit on cowrie	Brute-Force SSH
🇩🇪 ghostwarriors	2026-07-19 23:20:21 (2 days ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇭🇰 David Shafer	2026-07-19 09:16:57 (2 days ago)	Honeypot hit: Empty payload (likely service probe); 10000 [1] TCP Reported by: https://github.com/se ... show more Honeypot hit: Empty payload (likely service probe); 10000 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇬🇧 tpguy825	2026-07-18 22:24:59 (3 days ago)	SSH bruteforce from 112.25.252.50 port 36990, stuck in tarpit for 20.020 secs	Hacking Brute-Force SSH
🇩🇪 24-seven.io	2026-07-18 10:56:59 (3 days ago)	2026-07-18T12:56:54.178630+02:00 srv03 sshd-session[1562419]: Failed password for root from 112.25.2 ... show more 2026-07-18T12:56:54.178630+02:00 srv03 sshd-session[1562419]: Failed password for root from 112.25.252.50 port 56578 ssh2 2026-07-18T12:56:56.718248+02:00 srv03 sshd-session[1562475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.25.252.50 user=root 2026-07-18T12:56:58.949530+02:00 srv03 sshd-session[1562475]: Failed password for root from 112.25.252.50 port 33956 ssh2 ... show less	Brute-Force SSH
🇳🇱 donarev419	2026-07-18 03:45:28 (3 days ago)	Port scan detected on port 1002 (connection without data transfer)	Port Scan
🇺🇸 drewf.ink	2026-07-18 03:29:36 (3 days ago)	[03:29] Attempted SSH login on port 2222 with credentials root:---fuck_you----	Brute-Force SSH
🇺🇸 bigscoots.com	2026-07-17 22:14:03 (4 days ago)	(sshd) Failed SSH login from 112.25.252.50 (CN/China/-): 5 in the last 3600 secs; Ports: ; Directio ... show more (sshd) Failed SSH login from 112.25.252.50 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jul 17 17:13:36 15488 sshd[5208]: Did not receive identification string from 112.25.252.50 port 39698 Jul 17 17:13:38 15488 sshd[5209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.25.252.50 user=root Jul 17 17:13:40 15488 sshd[5209]: Failed password for root from 112.25.252.50 port 41098 ssh2 Jul 17 17:13:42 15488 sshd[5213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.25.252.50 user=root Jul 17 17:13:44 15488 sshd[5213]: Failed password for root from 112.25.252.50 port 46306 ssh2 show less	Brute-Force SSH
🇧🇬 MazenHost	2026-07-17 12:41:57 (4 days ago)	Jul 17 15:41:42 mazenhost-ddosalerts sshd[885204]: Failed password for root from 112.25.252.50 port ... show more Jul 17 15:41:42 mazenhost-ddosalerts sshd[885204]: Failed password for root from 112.25.252.50 port 36292 ssh2 Jul 17 15:41:45 mazenhost-ddosalerts sshd[885206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.25.252.50 user=root Jul 17 15:41:48 mazenhost-ddosalerts sshd[885206]: Failed password for root from 112.25.252.50 port 42558 ssh2 Jul 17 15:41:51 mazenhost-ddosalerts sshd[885208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.25.252.50 user=root Jul 17 15:41:53 mazenhost-ddosalerts sshd[885208]: Failed password for root from 112.25.252.50 port 48264 ssh2 Jul 17 15:41:55 mazenhost-ddosalerts sshd[885210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.25.252.50 user=root Jul 17 15:41:56 mazenhost-ddosalerts sshd[885210]: Failed password for root from 112.25.252.50 port 52536 ssh2 ... show less	Brute-Force SSH
🇩🇪 KeksGauner	2026-07-15 17:19:08 (6 days ago)	2026-07-15T17:19:04.151749+00:00 NBG-VS01-WebServer sshd-session[521671]: Failed password for root f ... show more 2026-07-15T17:19:04.151749+00:00 NBG-VS01-WebServer sshd-session[521671]: Failed password for root from 112.25.252.50 port 40860 ssh2 2026-07-15T17:19:06.146495+00:00 NBG-VS01-WebServer sshd-session[521679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.25.252.50 user=root 2026-07-15T17:19:07.902272+00:00 NBG-VS01-WebServer sshd-session[521679]: Failed password for root from 112.25.252.50 port 45368 ssh2 ... show less	Brute-Force SSH
🇩🇪 bogdanv	2026-07-15 15:46:31 (6 days ago)	$f2bV_matches	Brute-Force SSH

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 193.24.211.76

🇧🇷 179.63.13.221

🇩🇪 167.94.146.36

🇺🇸 64.62.197.90

🇱🇰 220.247.224.226

🇸🇪 217.217.245.124

🇫🇷 217.128.80.129

🇺🇸 204.217.128.84

🇧🇷 201.33.162.49

🇳🇱 195.178.110.232

🇩🇪 167.94.146.35

🇸🇬 165.173.21.44

🇺🇸 147.185.132.31

🇺🇸 136.66.234.232

🇳🇱 45.156.87.166

🇳🇱 45.148.10.147

🇧🇷 201.75.169.32

🇨🇦 165.227.39.235

🇧🇬 79.124.62.126

🇧🇬 79.124.56.250