112.85.45.252 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
112.85.45.47	attack	Unauthorized IMAP connection attempt	2020-05-25 00:21:27
112.85.45.164	attackspambots	Unauthorized IMAP connection attempt	2020-05-15 04:07:21
112.85.45.5	attack	Unauthorized connection attempt detected from IP address 112.85.45.5 to port 6656 [T]	2020-01-30 17:35:27
112.85.45.57	attackspambots	Unauthorized connection attempt detected from IP address 112.85.45.57 to port 6656 [T]	2020-01-30 16:10:15
112.85.45.107	attackspambots	Unauthorized connection attempt detected from IP address 112.85.45.107 to port 6656 [T]	2020-01-30 14:22:19
112.85.45.176	attack	Unauthorized connection attempt detected from IP address 112.85.45.176 to port 6656 [T]	2020-01-30 08:46:19
112.85.45.76	attackbotsspam	Unauthorized connection attempt detected from IP address 112.85.45.76 to port 6656 [T]	2020-01-30 08:02:20
112.85.45.96	attack	Unauthorized connection attempt detected from IP address 112.85.45.96 to port 6656 [T]	2020-01-30 07:00:27
112.85.45.49	attack	Unauthorized connection attempt detected from IP address 112.85.45.49 to port 6656 [T]	2020-01-27 07:05:10

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.85.45.252
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31630
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.85.45.252.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030200 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 02 14:25:59 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 252.45.85.112.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 252.45.85.112.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
37.49.230.201	attackbotsspam	[2020-09-30 18:00:12] NOTICE[1159][C-0000421d] chan_sip.c: Call from '' (37.49.230.201:64644) to extension '12526890745' rejected because extension not found in context 'public'. [2020-09-30 18:00:12] SECURITY[1198] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-30T18:00:12.866-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="12526890745",SessionID="0x7fcaa045f8f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.230.201/64644",ACLName="no_extension_match" [2020-09-30 18:00:26] NOTICE[1159][C-0000421f] chan_sip.c: Call from '' (37.49.230.201:57391) to extension '712526890745' rejected because extension not found in context 'public'. [2020-09-30 18:00:26] SECURITY[1198] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-30T18:00:26.237-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="712526890745",SessionID="0x7fcaa04d8d08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.230.201/ ...	2020-10-01 16:30:21
185.211.253.110	attackbotsspam	Port probing on unauthorized port 23	2020-10-01 16:17:30
174.138.30.233	attack	174.138.30.233 - - [01/Oct/2020:09:50:45 +0200] "GET /wp-login.php HTTP/1.1" 200 8712 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 174.138.30.233 - - [01/Oct/2020:09:50:47 +0200] "POST /wp-login.php HTTP/1.1" 200 8942 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 174.138.30.233 - - [01/Oct/2020:09:50:54 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-10-01 16:31:04
182.117.107.38	attack	Portscan detected	2020-10-01 16:02:15
112.85.42.194	attack	Oct 1 08:02:50 plex-server sshd[1470122]: Failed password for root from 112.85.42.194 port 13573 ssh2 Oct 1 08:04:15 plex-server sshd[1470687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.194 user=root Oct 1 08:04:17 plex-server sshd[1470687]: Failed password for root from 112.85.42.194 port 47282 ssh2 Oct 1 08:05:31 plex-server sshd[1471231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.194 user=root Oct 1 08:05:33 plex-server sshd[1471231]: Failed password for root from 112.85.42.194 port 42726 ssh2 ...	2020-10-01 16:06:42
72.178.154.9	attack	Port Scan: TCP/443	2020-10-01 16:00:39
88.247.200.64	attackbots	TCP (SYN) 88.247.200.64:41617 -> port 23, len 44	2020-10-01 16:10:40
118.89.245.202	attack	Oct 1 09:55:55 serwer sshd\[26243\]: Invalid user testuser from 118.89.245.202 port 33954 Oct 1 09:55:55 serwer sshd\[26243\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.245.202 Oct 1 09:55:56 serwer sshd\[26243\]: Failed password for invalid user testuser from 118.89.245.202 port 33954 ssh2 ...	2020-10-01 15:59:43
138.197.179.94	attackspambots	2020/09/27 14:34:16 [error] 13560#13560: *51400 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 138.197.179.94, server: , request: "GET /wp-login.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/php-fdf1d4a0-1ee6-4ddf-8a4a-bf7184d3fc60.sock:", host: "mail.rakkor.uk"	2020-10-01 16:02:35
45.146.167.197	attackbots	Port scan: Attack repeated for 24 hours	2020-10-01 16:18:39
122.51.31.40	attackbots	(sshd) Failed SSH login from 122.51.31.40 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 1 01:15:19 server2 sshd[1828]: Invalid user minecraft from 122.51.31.40 Oct 1 01:15:19 server2 sshd[1828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.31.40 Oct 1 01:15:21 server2 sshd[1828]: Failed password for invalid user minecraft from 122.51.31.40 port 50100 ssh2 Oct 1 01:17:51 server2 sshd[3885]: Invalid user richard from 122.51.31.40 Oct 1 01:17:51 server2 sshd[3885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.31.40	2020-10-01 16:04:21
102.176.81.99	attackbots	Invalid user lisa from 102.176.81.99 port 46826	2020-10-01 15:58:20
91.91.103.97	attackbotsspam	Automatic report - Port Scan Attack	2020-10-01 15:56:32
167.71.175.10	attackbots	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-10-01 16:21:59
61.12.67.133	attackspambots	Oct 1 10:13:50 dev0-dcde-rnet sshd[14866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.12.67.133 Oct 1 10:13:52 dev0-dcde-rnet sshd[14866]: Failed password for invalid user tf2server from 61.12.67.133 port 49553 ssh2 Oct 1 10:19:04 dev0-dcde-rnet sshd[14926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.12.67.133	2020-10-01 16:29:35

Recently Reported IPs

112.85.45.251	218.68.101.62	112.85.45.254	112.85.45.28
112.85.45.31	112.85.45.32	112.85.45.34	112.85.45.36
112.85.45.38	112.85.45.4	112.85.45.40	112.85.45.42
112.85.45.44	111.90.150.222	112.85.45.48	112.85.45.56
112.85.45.58	112.85.45.6	112.85.45.60	112.85.45.62