120.85.106.56 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
120.85.106.249	attack	Aug 28 23:35:56 pkdns2 sshd\[56092\]: Failed password for root from 120.85.106.249 port 9485 ssh2Aug 28 23:37:43 pkdns2 sshd\[56179\]: Invalid user dragon from 120.85.106.249Aug 28 23:37:46 pkdns2 sshd\[56179\]: Failed password for invalid user dragon from 120.85.106.249 port 9706 ssh2Aug 28 23:39:41 pkdns2 sshd\[56258\]: Invalid user wesley from 120.85.106.249Aug 28 23:39:43 pkdns2 sshd\[56258\]: Failed password for invalid user wesley from 120.85.106.249 port 9424 ssh2Aug 28 23:41:37 pkdns2 sshd\[56375\]: Invalid user zsf from 120.85.106.249Aug 28 23:41:38 pkdns2 sshd\[56375\]: Failed password for invalid user zsf from 120.85.106.249 port 9409 ssh2 ...	2020-08-29 08:29:16

Type

Details

Datetime

120.85.106.249

attack

Aug 28 23:35:56 pkdns2 sshd\[56092\]: Failed password for root from 120.85.106.249 port 9485 ssh2Aug 28 23:37:43 pkdns2 sshd\[56179\]: Invalid user dragon from 120.85.106.249Aug 28 23:37:46 pkdns2 sshd\[56179\]: Failed password for invalid user dragon from 120.85.106.249 port 9706 ssh2Aug 28 23:39:41 pkdns2 sshd\[56258\]: Invalid user wesley from 120.85.106.249Aug 28 23:39:43 pkdns2 sshd\[56258\]: Failed password for invalid user wesley from 120.85.106.249 port 9424 ssh2Aug 28 23:41:37 pkdns2 sshd\[56375\]: Invalid user zsf from 120.85.106.249Aug 28 23:41:38 pkdns2 sshd\[56375\]: Failed password for invalid user zsf from 120.85.106.249 port 9409 ssh2
...

2020-08-29 08:29:16

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.85.106.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30930
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;120.85.106.56.			IN	A

;; AUTHORITY SECTION:
.			142	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030800 1800 900 604800 86400

;; Query time: 69 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 08 19:47:41 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 56.106.85.120.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 56.106.85.120.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
218.241.154.197	attackspam	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-09-30 04:36:52
89.248.171.97	attack	Port scan denied	2020-09-30 04:56:50
111.229.1.180	attackspambots	Sep 29 20:29:03 staging sshd[147804]: Invalid user wwwdata from 111.229.1.180 port 24957 Sep 29 20:29:03 staging sshd[147804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.1.180 Sep 29 20:29:03 staging sshd[147804]: Invalid user wwwdata from 111.229.1.180 port 24957 Sep 29 20:29:05 staging sshd[147804]: Failed password for invalid user wwwdata from 111.229.1.180 port 24957 ssh2 ...	2020-09-30 04:44:19
109.248.226.147	attackspambots	20/9/28@16:40:30: FAIL: Alarm-Network address from=109.248.226.147 ...	2020-09-30 04:35:33
192.241.235.159	attackspam	SMTP Attack	2020-09-30 04:43:30
162.243.128.227	attackbots	TCP (SYN) 162.243.128.227:36613 -> port 22, len 40	2020-09-30 04:51:13
142.93.235.47	attack	Sep 29 20:21:14 roki-contabo sshd\[23220\]: Invalid user kay from 142.93.235.47 Sep 29 20:21:14 roki-contabo sshd\[23220\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47 Sep 29 20:21:15 roki-contabo sshd\[23220\]: Failed password for invalid user kay from 142.93.235.47 port 39810 ssh2 Sep 29 20:30:26 roki-contabo sshd\[23460\]: Invalid user admin from 142.93.235.47 Sep 29 20:30:26 roki-contabo sshd\[23460\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.235.47 ...	2020-09-30 04:30:02
152.136.212.175	attackbotsspam	(sshd) Failed SSH login from 152.136.212.175 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 29 11:21:39 server5 sshd[24541]: Invalid user tomcat from 152.136.212.175 Sep 29 11:21:39 server5 sshd[24541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.212.175 Sep 29 11:21:40 server5 sshd[24541]: Failed password for invalid user tomcat from 152.136.212.175 port 55440 ssh2 Sep 29 11:29:08 server5 sshd[27682]: Invalid user download1 from 152.136.212.175 Sep 29 11:29:08 server5 sshd[27682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.212.175	2020-09-30 04:29:41
114.67.80.134	attack	TCP (SYN) 114.67.80.134:48123 -> port 30669, len 44	2020-09-30 04:53:20
36.112.104.194	attackbotsspam	(sshd) Failed SSH login from 36.112.104.194 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 29 07:40:22 jbs1 sshd[21654]: Invalid user db1inst1 from 36.112.104.194 Sep 29 07:40:22 jbs1 sshd[21654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.112.104.194 Sep 29 07:40:24 jbs1 sshd[21654]: Failed password for invalid user db1inst1 from 36.112.104.194 port 15105 ssh2 Sep 29 07:49:40 jbs1 sshd[24958]: Invalid user solr from 36.112.104.194 Sep 29 07:49:40 jbs1 sshd[24958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.112.104.194	2020-09-30 04:54:57
117.86.194.210	attackspam	[N3.H3.VM3] Port Scanner Detected Blocked by UFW	2020-09-30 04:42:53
180.76.174.39	attackbotsspam	$f2bV_matches	2020-09-30 04:41:51
210.184.2.66	attackspam	2020-09-29T01:50:39.637704hostname sshd[66274]: Failed password for invalid user nagios from 210.184.2.66 port 59734 ssh2 ...	2020-09-30 04:34:00
195.22.148.76	attackbots	firewall-block, port(s): 123/tcp, 2323/tcp	2020-09-30 04:42:41
83.240.242.218	attackbotsspam	2020-09-29 17:01:14,004 fail2ban.actions [937]: NOTICE [sshd] Ban 83.240.242.218 2020-09-29 17:35:21,560 fail2ban.actions [937]: NOTICE [sshd] Ban 83.240.242.218 2020-09-29 18:09:23,123 fail2ban.actions [937]: NOTICE [sshd] Ban 83.240.242.218 2020-09-29 18:43:25,564 fail2ban.actions [937]: NOTICE [sshd] Ban 83.240.242.218 2020-09-29 19:19:27,541 fail2ban.actions [937]: NOTICE [sshd] Ban 83.240.242.218 ...	2020-09-30 04:45:08

Recently Reported IPs

120.85.105.179	120.85.106.43	120.85.107.111	120.85.107.103
117.196.29.85	120.85.107.113	120.85.107.115	120.85.107.142
120.85.107.180	120.85.107.214	120.85.107.174	120.85.107.221
120.85.107.40	120.85.107.80	120.85.107.248	120.85.107.229
120.85.107.9	117.197.0.49	120.85.111.132	120.85.111.203