JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 112.94.77.96

112.94.77.96 was found in our database!

This IP was reported 4 times. Confidence of Abuse is 0%: ?

ISP	United-Communications-Network-Technology-Co-Ltd, GuangZhou
Usage Type	Fixed Line ISP
ASN	AS17622
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Guangzhou, Guangdong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 112.94.77.96

Whois 112.94.77.96

IP Abuse Reports for 112.94.77.96:

This IP address has been reported a total of 4 times from 4 distinct sources. 112.94.77.96 was first reported on October 26th 2024, and the most recent report was 4 months ago.

Old Reports: The most recent abuse report for this IP address is from 4 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-02-05 04:35:07 (4 months ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇺🇸 TPI-Abuse	2025-09-10 02:22:38 (9 months ago)	(mod_security) mod_security (id:210350) triggered by 112.94.77.96 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 112.94.77.96 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 09 22:22:32.688256 2025] [security2:error] [pid 9489:tid 9489] [client 112.94.77.96:35329] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|www.renju.net\|F\|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.renju.net"] [uri "/game/60378"] [unique_id "aMDg6Edc25_a7Q6ELNMzXAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇬 babahgroup	2024-10-29 01:05:33 (1 year ago)	(sshd) Failed SSH login from 112.94.77.96 (CN/China/-): 3 in the last 3600 secs	Brute-Force SSH
🇨🇳 swk	2024-10-26 00:38:25 (1 year ago)	Oct 26 08:35:05 aliyun-sz-2c2g sshd[2347414]: Invalid user yinmeng from 112.94.77.96 port 8548 Oct 2 ... show more Oct 26 08:35:05 aliyun-sz-2c2g sshd[2347414]: Invalid user yinmeng from 112.94.77.96 port 8548 Oct 26 08:35:26 aliyun-sz-2c2g sshd[2347439]: Invalid user hyc from 112.94.77.96 port 8421 Oct 26 08:35:45 aliyun-sz-2c2g sshd[2347462]: Invalid user dpoint from 112.94.77.96 port 8237 Oct 26 08:36:04 aliyun-sz-2c2g sshd[2347465]: Invalid user baikal from 112.94.77.96 port 9050 Oct 26 08:36:24 aliyun-sz-2c2g sshd[2347495]: Invalid user kettle from 112.94.77.96 port 9202 ... show less	Brute-Force SSH

Showing 1 to 4 of 4 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇿🇦 105.247.89.210

🇮🇩 103.52.115.76

🇫🇷 85.217.140.47

🇺🇸 23.241.145.240

🇪🇬 102.186.55.46

🇩🇪 87.106.29.151

🇺🇸 66.132.186.231

🇦🇷 45.162.21.160

🇫🇷 45.91.22.36

🇯🇵 43.153.189.212

🇬🇧 35.203.211.204

🇨🇳 218.13.26.42

🇦🇺 170.64.194.156

🇮🇩 125.164.16.149

🇧🇩 103.151.119.55

🇺🇸 57.141.16.46

🇭🇰 42.200.66.116

🇺🇸 2400:8d60:2::1:cca6:7c43

🇺🇸 209.90.232.249

🇧🇪 198.235.24.216