JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 112.85.240.149

112.85.240.149 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 0%: ?

ISP	JIANGSU GROUP CO.,NANJING,JIANGSU PROVINCE
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Nanjing, Jiangsu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 112.85.240.149

Whois 112.85.240.149

IP Abuse Reports for 112.85.240.149:

This IP address has been reported a total of 19 times from 11 distinct sources. 112.85.240.149 was first reported on September 12th 2021, and the most recent report was 4 years ago.

Old Reports: The most recent abuse report for this IP address is from 4 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Ethan Williams	2021-10-28 04:00:00 (4 years ago)	Attempted Brute force of corporate account	Brute-Force
🇩🇪 bsoft.de	2021-10-26 22:26:45 (4 years ago)	2021-10-27T04:26:33.768014MailD imap[359]: badlogin: [112.85.240.149] PLAIN [SASL(-13): authenticati ... show more 2021-10-27T04:26:33.768014MailD imap[359]: badlogin: [112.85.240.149] PLAIN [SASL(-13): authentication failure: Password verification failed] 2021-10-27T04:26:39.622223MailD imap[359]: badlogin: [112.85.240.149] PLAIN [SASL(-13): authentication failure: Password verification failed] 2021-10-27T04:26:45.093058MailD imap[359]: badlogin: [112.85.240.149] PLAIN [SASL(-13): authentication failure: Password verification failed] show less	Hacking Brute-Force
🇩🇪 ipcop.net	2021-10-14 05:01:51 (4 years ago)	Oct 14 01:00:55 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],112.85.2 ... show more Oct 14 01:00:55 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],112.85.240.149,<X8xC70POMI9wVfCV>): unknown user Oct 14 01:01:03 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],112.85.240.149,<X8xC70POMI9wVfCV>): unknown user Oct 14 01:01:15 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],112.85.240.149,<X8xC70POMI9wVfCV>): unknown user Oct 14 01:01:34 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],112.85.240.149,<X8xC70POMI9wVfCV>): unknown user Oct 14 01:01:51 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],112.85.240.149,<X8xC70POMI9wVfCV>): unknown user show less	Fraud VoIP Brute-Force
🇩🇪 ipcop.net	2021-10-13 19:32:26 (4 years ago)	Oct 13 15:31:27 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],112.8 ... show more Oct 13 15:31:27 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],112.85.240.149,<W72l+jvOmplwVfCV>): unknown user Oct 13 15:31:36 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],112.85.240.149,<W72l+jvOmplwVfCV>): unknown user Oct 13 15:31:49 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],112.85.240.149,<W72l+jvOmplwVfCV>): unknown user Oct 13 15:32:08 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],112.85.240.149,<W72l+jvOmplwVfCV>): unknown user Oct 13 15:32:25 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],112.85.240.149,<W72l+jvOmplwVfCV>): unknown user show less	Fraud VoIP Brute-Force
🇩🇪 ipcop.net	2021-10-13 19:32:26 (4 years ago)	Oct 13 15:31:27 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],112.8 ... show more Oct 13 15:31:27 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],112.85.240.149,<W72l+jvOmplwVfCV>): unknown user Oct 13 15:31:36 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],112.85.240.149,<W72l+jvOmplwVfCV>): unknown user Oct 13 15:31:49 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],112.85.240.149,<W72l+jvOmplwVfCV>): unknown user Oct 13 15:32:08 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],112.85.240.149,<W72l+jvOmplwVfCV>): unknown user Oct 13 15:32:25 mail.srvfarm.net dovecot: auth-worker(700673): sql([email protected],112.85.240.149,<W72l+jvOmplwVfCV>): unknown user show less	Fraud VoIP Brute-Force
🇩🇪 ipcop.net	2021-10-13 11:09:32 (4 years ago)	Oct 13 07:08:43 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOn ... show more Oct 13 07:08:43 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOnqJwVfCV>): unknown user Oct 13 07:08:51 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOnqJwVfCV>): unknown user Oct 13 07:09:03 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOnqJwVfCV>): unknown user Oct 13 07:09:22 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOnqJwVfCV>): unknown user Oct 13 07:09:32 mail.srvfarm.net dovecot: imap-login: Disconnected (auth failed, 4 attempts in 49 secs): user=<noreply>, method=PLAIN, rip=112.85.240.149, lip=185.118.197.126, TLS: Connection closed, session=<YR/B9DTOnqJwVfCV> show less	Fraud VoIP Brute-Force
🇩🇪 ipcop.net	2021-10-13 11:09:32 (4 years ago)	Oct 13 07:08:43 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOn ... show more Oct 13 07:08:43 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOnqJwVfCV>): unknown user Oct 13 07:08:51 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOnqJwVfCV>): unknown user Oct 13 07:09:03 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOnqJwVfCV>): unknown user Oct 13 07:09:22 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOnqJwVfCV>): unknown user Oct 13 07:09:32 mail.srvfarm.net dovecot: imap-login: Disconnected (auth failed, 4 attempts in 49 secs): user=<noreply>, method=PLAIN, rip=112.85.240.149, lip=185.118.197.126, TLS: Connection closed, session=<YR/B9DTOnqJwVfCV> show less	Fraud VoIP Brute-Force
🇩🇪 ipcop.net	2021-10-13 11:09:32 (4 years ago)	Oct 13 07:08:43 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOn ... show more Oct 13 07:08:43 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOnqJwVfCV>): unknown user Oct 13 07:08:51 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOnqJwVfCV>): unknown user Oct 13 07:09:03 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOnqJwVfCV>): unknown user Oct 13 07:09:22 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOnqJwVfCV>): unknown user Oct 13 07:09:32 mail.srvfarm.net dovecot: imap-login: Disconnected (auth failed, 4 attempts in 49 secs): user=<noreply>, method=PLAIN, rip=112.85.240.149, lip=185.118.197.126, TLS: Connection closed, session=<YR/B9DTOnqJwVfCV> show less	Fraud VoIP Brute-Force
🇩🇪 ipcop.net	2021-10-13 11:09:32 (4 years ago)	Oct 13 07:08:43 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOn ... show more Oct 13 07:08:43 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOnqJwVfCV>): unknown user Oct 13 07:08:51 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOnqJwVfCV>): unknown user Oct 13 07:09:03 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOnqJwVfCV>): unknown user Oct 13 07:09:22 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOnqJwVfCV>): unknown user Oct 13 07:09:32 mail.srvfarm.net dovecot: imap-login: Disconnected (auth failed, 4 attempts in 49 secs): user=<noreply>, method=PLAIN, rip=112.85.240.149, lip=185.118.197.126, TLS: Connection closed, session=<YR/B9DTOnqJwVfCV> show less	Fraud VoIP Brute-Force
🇩🇪 ipcop.net	2021-10-13 11:09:32 (4 years ago)	Oct 13 07:08:43 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOn ... show more Oct 13 07:08:43 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOnqJwVfCV>): unknown user Oct 13 07:08:51 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOnqJwVfCV>): unknown user Oct 13 07:09:03 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOnqJwVfCV>): unknown user Oct 13 07:09:22 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOnqJwVfCV>): unknown user Oct 13 07:09:32 mail.srvfarm.net dovecot: imap-login: Disconnected (auth failed, 4 attempts in 49 secs): user=<noreply>, method=PLAIN, rip=112.85.240.149, lip=185.118.197.126, TLS: Connection closed, session=<YR/B9DTOnqJwVfCV> show less	Fraud VoIP Brute-Force
🇩🇪 ipcop.net	2021-10-13 11:09:32 (4 years ago)	Oct 13 07:08:43 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOn ... show more Oct 13 07:08:43 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOnqJwVfCV>): unknown user Oct 13 07:08:51 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOnqJwVfCV>): unknown user Oct 13 07:09:03 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOnqJwVfCV>): unknown user Oct 13 07:09:22 mail.srvfarm.net dovecot: auth-worker(700673): sql(noreply,112.85.240.149,<YR/B9DTOnqJwVfCV>): unknown user Oct 13 07:09:32 mail.srvfarm.net dovecot: imap-login: Disconnected (auth failed, 4 attempts in 49 secs): user=<noreply>, method=PLAIN, rip=112.85.240.149, lip=185.118.197.126, TLS: Connection closed, session=<YR/B9DTOnqJwVfCV> show less	Fraud VoIP Brute-Force
🇳🇱 Koen	2021-10-12 11:19:03 (4 years ago)	Auto Fail2Ban report, multiple IMAP login attempts.	Brute-Force
🇩🇪 www.blocklist.de	2021-10-06 07:21:54 (4 years ago)	Oct 6 13:19:12 mail1 sshd[1181]: Invalid user admin from 112.85.240.149 port 36592 Oct 6 13:19:13 ... show more Oct 6 13:19:12 mail1 sshd[1181]: Invalid user admin from 112.85.240.149 port 36592 Oct 6 13:19:13 mail1 sshd[1181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.240.149 Oct 6 13:19:15 mail1 sshd[1181]: Failed password for invalid user admin from 112.85.240.149 port 36592 ssh2 Oct 6 13:19:15 mail1 sshd[1181]: Connection closed by 112.85.240.149 port 36592 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=112.85.240.149 show less	FTP Brute-Force Hacking
🇫🇷 dsl	2021-10-01 07:14:51 (4 years ago)	Oct 1 13:14:47 controldedominiosdg sshd[3087]: Invalid user user from 112.85.240.149 port 36056 Oct ... show more Oct 1 13:14:47 controldedominiosdg sshd[3087]: Invalid user user from 112.85.240.149 port 36056 Oct 1 13:14:48 controldedominiosdg sshd[3087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.240.149 Oct 1 13:14:50 controldedominiosdg sshd[3087]: Failed password for invalid user user from 112.85.240.149 port 36056 ssh2 ... show less	Brute-Force SSH
🇩🇰 Danborg.org	2021-09-26 23:50:45 (5 years ago)	Too many invalid login attempts	Brute-Force

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 152.32.163.183

🇭🇰 101.36.119.203

🇲🇾 49.124.150.251

🇸🇬 47.237.105.248

🇳🇱 45.148.10.141

🇺🇸 20.55.100.131

🇺🇸 13.86.104.183

🇺🇸 157.230.136.77

🇮🇳 103.189.89.196

🇨🇳 58.212.237.107

🇫🇮 37.27.254.162

🇫🇷 185.189.72.135

🇵🇭 154.18.196.105

🇧🇷 128.201.58.147

🇨🇳 110.53.153.180

🇳🇱 93.123.109.192

🇺🇸 91.230.168.237

🇺🇸 54.225.81.20

🇺🇸 34.150.161.242

🇱🇻 5.240.211.203