Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Fuzhou

Region: Fujian

Country: China

Internet Service Provider: Fuzhou City Fujian Provincial Network of Cncgroup

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attack
Aug 21 05:30:55 h2646465 sshd[32603]: Invalid user admin from 112.111.0.245
Aug 21 05:30:55 h2646465 sshd[32603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.111.0.245
Aug 21 05:30:55 h2646465 sshd[32603]: Invalid user admin from 112.111.0.245
Aug 21 05:30:57 h2646465 sshd[32603]: Failed password for invalid user admin from 112.111.0.245 port 39880 ssh2
Aug 21 05:51:33 h2646465 sshd[2879]: Invalid user elk from 112.111.0.245
Aug 21 05:51:33 h2646465 sshd[2879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.111.0.245
Aug 21 05:51:33 h2646465 sshd[2879]: Invalid user elk from 112.111.0.245
Aug 21 05:51:34 h2646465 sshd[2879]: Failed password for invalid user elk from 112.111.0.245 port 46649 ssh2
Aug 21 05:56:07 h2646465 sshd[3492]: Invalid user mongodb from 112.111.0.245
...
2020-08-21 15:20:32
attackbotsspam
(sshd) Failed SSH login from 112.111.0.245 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May  6 13:55:33 elude sshd[23700]: Invalid user ftp from 112.111.0.245 port 49235
May  6 13:55:36 elude sshd[23700]: Failed password for invalid user ftp from 112.111.0.245 port 49235 ssh2
May  6 13:58:43 elude sshd[24129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.111.0.245  user=root
May  6 13:58:45 elude sshd[24129]: Failed password for root from 112.111.0.245 port 51028 ssh2
May  6 14:01:16 elude sshd[24531]: Invalid user mauro from 112.111.0.245 port 46423
2020-05-06 21:58:58
attack
" "
2020-05-06 05:27:47
attack
May  2 14:12:16 vmd17057 sshd[9533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.111.0.245 
May  2 14:12:18 vmd17057 sshd[9533]: Failed password for invalid user fred from 112.111.0.245 port 40732 ssh2
...
2020-05-02 23:30:18
attack
Nov 28 10:04:46 woltan sshd[30179]: Failed password for invalid user angeltveit from 112.111.0.245 port 50058 ssh2
2020-03-10 06:14:19
attackbots
SSH brute force
2020-03-09 08:22:25
attack
Jan 19 11:00:30 firewall sshd[1060]: Invalid user carl from 112.111.0.245
Jan 19 11:00:31 firewall sshd[1060]: Failed password for invalid user carl from 112.111.0.245 port 58906 ssh2
Jan 19 11:03:25 firewall sshd[1101]: Invalid user style from 112.111.0.245
...
2020-01-19 22:16:50
attackbots
Unauthorized connection attempt detected from IP address 112.111.0.245 to port 2220 [J]
2020-01-18 13:32:05
attackbots
Unauthorized connection attempt detected from IP address 112.111.0.245 to port 2220 [J]
2020-01-07 19:27:55
attack
Dec 31 07:41:48 srv-ubuntu-dev3 sshd[14448]: Invalid user ikemoto from 112.111.0.245
Dec 31 07:41:48 srv-ubuntu-dev3 sshd[14448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.111.0.245
Dec 31 07:41:48 srv-ubuntu-dev3 sshd[14448]: Invalid user ikemoto from 112.111.0.245
Dec 31 07:41:50 srv-ubuntu-dev3 sshd[14448]: Failed password for invalid user ikemoto from 112.111.0.245 port 41821 ssh2
Dec 31 07:44:59 srv-ubuntu-dev3 sshd[14688]: Invalid user scul from 112.111.0.245
Dec 31 07:44:59 srv-ubuntu-dev3 sshd[14688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.111.0.245
Dec 31 07:44:59 srv-ubuntu-dev3 sshd[14688]: Invalid user scul from 112.111.0.245
Dec 31 07:45:01 srv-ubuntu-dev3 sshd[14688]: Failed password for invalid user scul from 112.111.0.245 port 17241 ssh2
...
2019-12-31 16:40:20
attackspam
Dec 23 22:46:45 marvibiene sshd[12043]: Invalid user asterisk from 112.111.0.245 port 58912
Dec 23 22:46:45 marvibiene sshd[12043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.111.0.245
Dec 23 22:46:45 marvibiene sshd[12043]: Invalid user asterisk from 112.111.0.245 port 58912
Dec 23 22:46:46 marvibiene sshd[12043]: Failed password for invalid user asterisk from 112.111.0.245 port 58912 ssh2
...
2019-12-24 08:42:04
attackspam
Dec 20 23:44:46 Ubuntu-1404-trusty-64-minimal sshd\[31737\]: Invalid user goukon from 112.111.0.245
Dec 20 23:44:46 Ubuntu-1404-trusty-64-minimal sshd\[31737\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.111.0.245
Dec 20 23:44:48 Ubuntu-1404-trusty-64-minimal sshd\[31737\]: Failed password for invalid user goukon from 112.111.0.245 port 14885 ssh2
Dec 20 23:58:10 Ubuntu-1404-trusty-64-minimal sshd\[5169\]: Invalid user dsjustforfun from 112.111.0.245
Dec 20 23:58:10 Ubuntu-1404-trusty-64-minimal sshd\[5169\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.111.0.245
2019-12-21 07:27:21
attackspambots
Dec 20 01:13:55 vtv3 sshd[30837]: Failed password for root from 112.111.0.245 port 32149 ssh2
Dec 20 01:18:47 vtv3 sshd[772]: Failed password for root from 112.111.0.245 port 52396 ssh2
Dec 20 01:38:09 vtv3 sshd[9899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.111.0.245 
Dec 20 01:38:11 vtv3 sshd[9899]: Failed password for invalid user server from 112.111.0.245 port 10554 ssh2
Dec 20 01:43:01 vtv3 sshd[12084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.111.0.245 
Dec 20 01:53:13 vtv3 sshd[16760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.111.0.245 
Dec 20 01:53:15 vtv3 sshd[16760]: Failed password for invalid user asuka from 112.111.0.245 port 50375 ssh2
Dec 20 01:58:09 vtv3 sshd[19066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.111.0.245
2019-12-20 07:11:58
attack
Dec 12 06:57:14 mockhub sshd[8756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.111.0.245
Dec 12 06:57:16 mockhub sshd[8756]: Failed password for invalid user karupp from 112.111.0.245 port 64086 ssh2
...
2019-12-13 02:12:54
attackspambots
2019-12-11T07:36:35.150636abusebot-2.cloudsearch.cf sshd\[16394\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.111.0.245  user=daemon
2019-12-11 18:51:02
attackbotsspam
$f2bV_matches
2019-12-06 08:25:06
attackspam
ssh brute force
2019-12-02 23:26:27
attackbotsspam
Nov 28 05:51:01 mail sshd[2668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.111.0.245 
Nov 28 05:51:03 mail sshd[2668]: Failed password for invalid user xxxxxxx from 112.111.0.245 port 63973 ssh2
Nov 28 05:54:57 mail sshd[4111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.111.0.245
2019-11-28 13:59:41
attackspam
Nov 23 10:09:34 [host] sshd[3867]: Invalid user Digital2017 from 112.111.0.245
Nov 23 10:09:34 [host] sshd[3867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.111.0.245
Nov 23 10:09:36 [host] sshd[3867]: Failed password for invalid user Digital2017 from 112.111.0.245 port 50794 ssh2
2019-11-23 19:09:37
attackbotsspam
Nov 10 14:16:34 odroid64 sshd\[32514\]: Invalid user temp from 112.111.0.245
Nov 10 14:16:34 odroid64 sshd\[32514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.111.0.245
...
2019-11-21 20:36:24
attack
Invalid user yx from 112.111.0.245 port 33120
2019-11-14 20:20:50
attackbots
Nov  4 11:29:20 vpxxxxxxx22308 sshd[20068]: Invalid user ftp from 112.111.0.245
Nov  4 11:29:20 vpxxxxxxx22308 sshd[20068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.111.0.245
Nov  4 11:29:21 vpxxxxxxx22308 sshd[20068]: Failed password for invalid user ftp from 112.111.0.245 port 8684 ssh2
Nov  4 11:33:57 vpxxxxxxx22308 sshd[20854]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.111.0.245  user=lp
Nov  4 11:33:59 vpxxxxxxx22308 sshd[20854]: Failed password for lp from 112.111.0.245 port 26231 ssh2

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=112.111.0.245
2019-11-07 18:49:00
Comments on same subnet:
IP Type Details Datetime
112.111.0.2 attack
SSH login attempts with user root at 2020-01-02.
2020-01-03 03:14:21
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.111.0.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4637
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;112.111.0.245.			IN	A

;; AUTHORITY SECTION:
.			126	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110700 1800 900 604800 86400

;; Query time: 95 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 07 18:48:51 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 245.0.111.112.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 245.0.111.112.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
206.189.73.164 attack
Feb 16 23:13:34 game-panel sshd[25194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.73.164
Feb 16 23:13:35 game-panel sshd[25194]: Failed password for invalid user testftp from 206.189.73.164 port 36874 ssh2
Feb 16 23:15:16 game-panel sshd[25265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.73.164
2020-02-17 09:18:29
52.246.161.60 attackbotsspam
*Port Scan* detected from 52.246.161.60 (JP/Japan/-). 4 hits in the last 35 seconds
2020-02-17 09:13:00
89.248.174.216 attackbotsspam
ET CINS Active Threat Intelligence Poor Reputation IP group 80 - port: 5555 proto: TCP cat: Misc Attack
2020-02-17 09:36:57
212.183.227.162 attackbotsspam
Automatic report - SSH Brute-Force Attack
2020-02-17 09:42:15
173.29.200.8 attackspambots
Brute force VPN server
2020-02-17 09:14:58
89.189.154.66 attack
Feb 17 00:58:06 heicom sshd\[6116\]: Invalid user postgres from 89.189.154.66
Feb 17 01:01:44 heicom sshd\[4637\]: Invalid user test from 89.189.154.66
Feb 17 01:05:18 heicom sshd\[4105\]: Invalid user ubuntu from 89.189.154.66
Feb 17 01:08:52 heicom sshd\[12717\]: Invalid user user from 89.189.154.66
Feb 17 01:12:28 heicom sshd\[12818\]: Invalid user admin from 89.189.154.66
...
2020-02-17 09:19:59
220.76.205.178 attackbotsspam
Feb 17 01:29:17 lnxmysql61 sshd[4760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.76.205.178
2020-02-17 09:50:08
218.92.0.212 attackbotsspam
Feb 17 02:30:47 tuxlinux sshd[56521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.212  user=root
...
2020-02-17 09:38:32
120.31.135.9 attackspam
Feb 17 01:17:04 server sshd\[1663\]: Invalid user anne from 120.31.135.9
Feb 17 01:17:04 server sshd\[1663\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.31.135.9 
Feb 17 01:17:06 server sshd\[1663\]: Failed password for invalid user anne from 120.31.135.9 port 63205 ssh2
Feb 17 01:24:25 server sshd\[2963\]: Invalid user virginia from 120.31.135.9
Feb 17 01:24:25 server sshd\[2963\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.31.135.9 
...
2020-02-17 09:47:20
182.180.128.132 attackspam
(sshd) Failed SSH login from 182.180.128.132 (PK/Pakistan/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Feb 17 01:38:25 elude sshd[8040]: Invalid user murp from 182.180.128.132 port 56608
Feb 17 01:38:27 elude sshd[8040]: Failed password for invalid user murp from 182.180.128.132 port 56608 ssh2
Feb 17 01:44:57 elude sshd[8455]: Invalid user buffy from 182.180.128.132 port 43636
Feb 17 01:44:59 elude sshd[8455]: Failed password for invalid user buffy from 182.180.128.132 port 43636 ssh2
Feb 17 01:48:26 elude sshd[8673]: Invalid user rancid from 182.180.128.132 port 44562
2020-02-17 09:52:06
189.208.61.49 attackspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-17 09:24:31
190.220.7.66 attackspambots
Feb 16 22:24:46 localhost sshd\[13032\]: Invalid user pacopro from 190.220.7.66 port 37694
Feb 16 22:24:46 localhost sshd\[13032\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.220.7.66
Feb 16 22:24:48 localhost sshd\[13032\]: Failed password for invalid user pacopro from 190.220.7.66 port 37694 ssh2
...
2020-02-17 09:30:54
91.121.179.189 attack
Portscan or hack attempt detected by psad/fwsnort
2020-02-17 09:25:38
138.68.4.8 attackbotsspam
Invalid user zland from 138.68.4.8 port 44442
2020-02-17 09:12:06
186.67.248.5 attack
2020-02-16T22:22:37.548600shield sshd\[23743\]: Invalid user nemesis from 186.67.248.5 port 39811
2020-02-16T22:22:37.552959shield sshd\[23743\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.67.248.5
2020-02-16T22:22:39.500594shield sshd\[23743\]: Failed password for invalid user nemesis from 186.67.248.5 port 39811 ssh2
2020-02-16T22:24:29.862625shield sshd\[23950\]: Invalid user jboss from 186.67.248.5 port 49717
2020-02-16T22:24:29.871098shield sshd\[23950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.67.248.5
2020-02-17 09:43:44

Recently Reported IPs

92.126.212.218 185.106.31.4 35.220.153.167 37.27.89.63
54.238.178.213 142.93.212.69 5.189.141.4 185.106.31.112
183.157.172.22 54.36.148.48 203.210.36.198 125.83.106.213
14.111.93.252 219.92.93.244 84.209.67.208 59.23.78.173
79.22.190.243 157.245.224.80 143.255.104.67 117.253.50.241