112.85.20.45 - IPInfo

Basic Info

City: Xinpu

Region: Jiangsu

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
112.85.206.22	attackbots	Email rejected due to spam filtering	2020-02-19 04:03:44
112.85.206.137	attackspam	SpamReport	2019-12-02 15:25:19
112.85.200.235	attackbots	Brute force SMTP login attempts.	2019-11-24 23:08:22

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.85.20.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49138
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;112.85.20.45.			IN	A

;; AUTHORITY SECTION:
.			517	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052401 1800 900 604800 86400

;; Query time: 54 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon May 25 08:05:13 CST 2020
;; MSG SIZE  rcvd: 116

Host info

Host 45.20.85.112.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 45.20.85.112.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
35.205.247.101	attackbotsspam	11/11/2019-01:24:01.596487 35.205.247.101 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2019-11-11 19:00:56
46.101.151.51	attackbots	Nov 11 11:54:29 meumeu sshd[16429]: Failed password for root from 46.101.151.51 port 60832 ssh2 Nov 11 11:58:08 meumeu sshd[16828]: Failed password for lp from 46.101.151.51 port 40170 ssh2 ...	2019-11-11 19:12:53
122.51.76.234	attackbots	Nov 11 02:19:44 rb06 sshd[23461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.76.234 user=backup Nov 11 02:19:47 rb06 sshd[23461]: Failed password for backup from 122.51.76.234 port 39992 ssh2 Nov 11 02:19:47 rb06 sshd[23461]: Received disconnect from 122.51.76.234: 11: Bye Bye [preauth] Nov 11 02:42:37 rb06 sshd[4962]: Failed password for invalid user ballo from 122.51.76.234 port 55288 ssh2 Nov 11 02:42:37 rb06 sshd[4962]: Received disconnect from 122.51.76.234: 11: Bye Bye [preauth] Nov 11 02:47:03 rb06 sshd[6221]: Failed password for invalid user bauwens from 122.51.76.234 port 35212 ssh2 Nov 11 02:47:03 rb06 sshd[6221]: Received disconnect from 122.51.76.234: 11: Bye Bye [preauth] Nov 11 02:51:28 rb06 sshd[7646]: Failed password for invalid user nhostnamezsche from 122.51.76.234 port 43366 ssh2 Nov 11 02:51:29 rb06 sshd[7646]: Received disconnect from 122.51.76.234: 11: Bye Bye [preauth] ........ ----------------------------------------------- https:/	2019-11-11 18:52:38
101.231.201.50	attackspam	Nov 10 23:33:36 server sshd\[19869\]: Failed password for invalid user lekang from 101.231.201.50 port 2965 ssh2 Nov 11 10:33:35 server sshd\[29559\]: Invalid user Administrator from 101.231.201.50 Nov 11 10:33:35 server sshd\[29559\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.231.201.50 Nov 11 10:33:38 server sshd\[29559\]: Failed password for invalid user Administrator from 101.231.201.50 port 19206 ssh2 Nov 11 10:45:46 server sshd\[541\]: Invalid user frosty from 101.231.201.50 Nov 11 10:45:46 server sshd\[541\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.231.201.50 ...	2019-11-11 18:45:43
42.157.128.188	attack	2019-11-11T09:36:22.831622abusebot-5.cloudsearch.cf sshd\[2253\]: Invalid user butthead from 42.157.128.188 port 60064	2019-11-11 19:08:44
106.13.45.212	attackbots	Lines containing failures of 106.13.45.212 Nov 11 11:19:08 mx-in-02 sshd[27557]: Invalid user wwwrun from 106.13.45.212 port 54728 Nov 11 11:19:09 mx-in-02 sshd[27557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.45.212 Nov 11 11:19:10 mx-in-02 sshd[27557]: Failed password for invalid user wwwrun from 106.13.45.212 port 54728 ssh2 Nov 11 11:19:11 mx-in-02 sshd[27557]: Received disconnect from 106.13.45.212 port 54728:11: Bye Bye [preauth] Nov 11 11:19:11 mx-in-02 sshd[27557]: Disconnected from invalid user wwwrun 106.13.45.212 port 54728 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=106.13.45.212	2019-11-11 18:50:01
167.99.159.35	attack	Nov 11 11:01:06 lnxded63 sshd[23180]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.159.35	2019-11-11 18:57:42
106.52.179.100	attackspambots	Nov 11 06:22:47 nbi-636 sshd[19773]: Invalid user kluksdahl from 106.52.179.100 port 58508 Nov 11 06:22:48 nbi-636 sshd[19773]: Failed password for invalid user kluksdahl from 106.52.179.100 port 58508 ssh2 Nov 11 06:22:49 nbi-636 sshd[19773]: Received disconnect from 106.52.179.100 port 58508:11: Bye Bye [preauth] Nov 11 06:22:49 nbi-636 sshd[19773]: Disconnected from 106.52.179.100 port 58508 [preauth] Nov 11 06:43:26 nbi-636 sshd[24105]: Invalid user apache from 106.52.179.100 port 47408 Nov 11 06:43:27 nbi-636 sshd[24105]: Failed password for invalid user apache from 106.52.179.100 port 47408 ssh2 Nov 11 06:43:28 nbi-636 sshd[24105]: Received disconnect from 106.52.179.100 port 47408:11: Bye Bye [preauth] Nov 11 06:43:28 nbi-636 sshd[24105]: Disconnected from 106.52.179.100 port 47408 [preauth] Nov 11 06:47:25 nbi-636 sshd[24812]: Invalid user ballou from 106.52.179.100 port 48830 Nov 11 06:47:27 nbi-636 sshd[24812]: Failed password for invalid user ballou from 106......... -------------------------------	2019-11-11 18:43:54
114.246.11.178	attackbotsspam	Automatic report - Banned IP Access	2019-11-11 19:04:18
180.168.55.110	attackbots	Nov 11 09:00:27 server sshd\[5556\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.168.55.110 user=root Nov 11 09:00:28 server sshd\[5556\]: Failed password for root from 180.168.55.110 port 44101 ssh2 Nov 11 09:23:21 server sshd\[11342\]: Invalid user ahmed from 180.168.55.110 Nov 11 09:23:21 server sshd\[11342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.168.55.110 Nov 11 09:23:23 server sshd\[11342\]: Failed password for invalid user ahmed from 180.168.55.110 port 52763 ssh2 ...	2019-11-11 19:19:24
173.170.154.139	attackspam	Hacking my personal email and various accounts associated. Facebook and Amazon were compromised so far.	2019-11-11 19:14:36
96.78.175.36	attackspam	Nov 11 03:58:18 ws22vmsma01 sshd[46109]: Failed password for root from 96.78.175.36 port 38267 ssh2 ...	2019-11-11 18:46:13
2607:5300:203:2be::	attackbots	C1,WP GET /suche/wp-login.php	2019-11-11 18:58:48
118.136.42.250	attack	Nov 11 07:02:51 mxgate1 postfix/postscreen[30307]: CONNECT from [118.136.42.250]:15865 to [176.31.12.44]:25 Nov 11 07:02:51 mxgate1 postfix/dnsblog[30451]: addr 118.136.42.250 listed by domain cbl.abuseat.org as 127.0.0.2 Nov 11 07:02:51 mxgate1 postfix/dnsblog[30449]: addr 118.136.42.250 listed by domain zen.spamhaus.org as 127.0.0.4 Nov 11 07:02:51 mxgate1 postfix/dnsblog[30449]: addr 118.136.42.250 listed by domain zen.spamhaus.org as 127.0.0.11 Nov 11 07:02:51 mxgate1 postfix/dnsblog[30452]: addr 118.136.42.250 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Nov 11 07:02:51 mxgate1 postfix/dnsblog[30450]: addr 118.136.42.250 listed by domain bl.spamcop.net as 127.0.0.2 Nov 11 07:02:51 mxgate1 postfix/dnsblog[30448]: addr 118.136.42.250 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 11 07:02:57 mxgate1 postfix/postscreen[30307]: DNSBL rank 6 for [118.136.42.250]:15865 Nov x@x Nov 11 07:02:58 mxgate1 postfix/postscreen[30307]: HANGUP after 1.5 from [118.13........ -------------------------------	2019-11-11 19:22:43
193.32.160.150	attackspam	Nov 11 11:17:08 relay postfix/smtpd\[20922\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.150\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.151\]\> Nov 11 11:17:08 relay postfix/smtpd\[20922\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.150\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.151\]\> Nov 11 11:17:08 relay postfix/smtpd\[20922\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.150\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.151\]\> Nov 11 11:17:08 relay postfix/smtpd\[20922\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.150\]: 554 5.7.1 \: Relay access denied\; from=\< ...	2019-11-11 19:05:24

Recently Reported IPs

182.76.84.30	21.236.177.80	165.4.13.208	0.206.136.159
31.29.60.44	156.128.132.11	196.97.76.81	139.97.154.226
1.78.96.181	202.52.244.68	54.194.88.17	27.205.155.115
194.14.93.149	87.210.32.102	88.231.33.28	128.46.196.211
14.18.114.240	107.136.33.42	121.80.72.137	78.118.175.137