JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 112.85.70.28

112.85.70.28 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 100%: ?

100%

ISP	JIANGSU GROUP CO.,NANJING,JIANGSU PROVINCE
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Nanjing, Jiangsu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 112.85.70.28

Whois 112.85.70.28

IP Abuse Reports for 112.85.70.28:

This IP address has been reported a total of 33 times from 25 distinct sources. 112.85.70.28 was first reported on July 12th 2026, and the most recent report was 8 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 sh97	2026-07-18 16:03:13 (8 minutes ago)	nl03: SSH Brute Force from 112.85.70.28 at 2026-07-18 21:33:13 IST	Brute-Force SSH
🇫🇷 Max la Menace	2026-07-18 13:47:15 (2 hours ago)	2026-07-18T15:47:09.127463+02:00 ns3124905 sshd-session[1229454]: Failed password for root from 112. ... show more 2026-07-18T15:47:09.127463+02:00 ns3124905 sshd-session[1229454]: Failed password for root from 112.85.70.28 port 17372 ssh2 2026-07-18T15:47:12.147349+02:00 ns3124905 sshd-session[1229465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.70.28 user=root 2026-07-18T15:47:14.067836+02:00 ns3124905 sshd-session[1229465]: Failed password for root from 112.85.70.28 port 25934 ssh2 ... show less	Brute-Force SSH
🇺🇸 Deltron3030	2026-07-18 12:45:44 (3 hours ago)	SSH brute-force attempt from 112.85.70.28 blocked by NewYork5.	Brute-Force SSH
Anonymous	2026-07-18 10:38:56 (5 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/ssh-bf. Ip: 112.85.70.28 - ASN: 4837 (CHIN ... show more This IP was detected by CrowdSec triggering crowdsecurity/ssh-bf. Ip: 112.85.70.28 - ASN: 4837 (CHINA UNICOM China169 Backbone) - Maliciousness Score is 0 % show less	SSH Brute-Force
🇩🇪 ipcop.net	2026-07-18 10:25:09 (5 hours ago)	2026-07-18T12:24:53.891189+02:00 gw-de12-01.guestgw.net sshd[1927579]: Connection closed by authenti ... show more 2026-07-18T12:24:53.891189+02:00 gw-de12-01.guestgw.net sshd[1927579]: Connection closed by authenticating user root 112.85.70.28 port 33058 [preauth] 2026-07-18T12:24:55.916601+02:00 gw-de12-01.guestgw.net sshd[1927593]: Connection closed by authenticating user root 112.85.70.28 port 36694 [preauth] 2026-07-18T12:24:57.995649+02:00 gw-de12-01.guestgw.net sshd[1927600]: Connection closed by authenticating user root 112.85.70.28 port 41158 [preauth] 2026-07-18T12:24:59.997576+02:00 gw-de12-01.guestgw.net sshd[1927610]: Connection closed by authenticating user root 112.85.70.28 port 45308 [preauth] 2026-07-18T12:25:02.873831+02:00 gw-de12-01.guestgw.net sshd[1927617]: Connection closed by authenticating user root 112.85.70.28 port 49776 [preauth] show less	Brute-Force
🇭🇰 demonsword	2026-07-18 09:15:06 (6 hours ago)	SSH brute-force detected: 395 failed login attempts in the last 1 hour.	Brute-Force SSH
🇭🇰 demonsword	2026-07-18 08:15:06 (7 hours ago)	SSH brute-force detected: 748 failed login attempts in the last 1 hour.	Brute-Force SSH
🇭🇰 SentinalX by uzumaru	2026-07-18 07:15:05 (8 hours ago)	SSH brute-force detected: 750 failed login attempts in the last 1 hour.	Brute-Force SSH
🇭🇰 SentinalX by uzumaru	2026-07-18 06:15:05 (9 hours ago)	SSH brute-force detected: 751 failed login attempts in the last 1 hour.	Brute-Force SSH
🇭🇰 SentinalX by uzumaru	2026-07-18 04:15:08 (11 hours ago)	SSH brute-force detected: 40 failed login attempts in the last 1 hour.	Brute-Force SSH
🇸🇬 sh97	2026-07-18 04:07:18 (12 hours ago)	SG01-LYR: SSH Brute Force from 112.85.70.28 at 2026-07-18 09:37:18 IST	Brute-Force SSH
🇧🇬 MazenHost	2026-07-18 01:12:36 (14 hours ago)	Jul 18 04:12:21 fastdl sshd[3108294]: Failed password for root from 112.85.70.28 port 27398 ssh2 Jul ... show more Jul 18 04:12:21 fastdl sshd[3108294]: Failed password for root from 112.85.70.28 port 27398 ssh2 Jul 18 04:12:24 fastdl sshd[3108378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.70.28 user=root Jul 18 04:12:25 fastdl sshd[3108378]: Failed password for root from 112.85.70.28 port 39006 ssh2 Jul 18 04:12:29 fastdl sshd[3108500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.70.28 user=root Jul 18 04:12:31 fastdl sshd[3108500]: Failed password for root from 112.85.70.28 port 49864 ssh2 Jul 18 04:12:34 fastdl sshd[3108584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.70.28 user=root Jul 18 04:12:36 fastdl sshd[3108584]: Failed password for root from 112.85.70.28 port 60604 ssh2 ... show less	Brute-Force SSH
🇧🇬 MazenHost	2026-07-17 23:06:11 (17 hours ago)	Jul 18 02:05:52 SurvuraNaFamiliqta sshd[249796]: Failed password for root from 112.85.70.28 port 250 ... show more Jul 18 02:05:52 SurvuraNaFamiliqta sshd[249796]: Failed password for root from 112.85.70.28 port 25040 ssh2 Jul 18 02:05:57 SurvuraNaFamiliqta sshd[249798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.70.28 user=root Jul 18 02:05:58 SurvuraNaFamiliqta sshd[249798]: Failed password for root from 112.85.70.28 port 38890 ssh2 Jul 18 02:06:01 SurvuraNaFamiliqta sshd[249800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.70.28 user=root Jul 18 02:06:03 SurvuraNaFamiliqta sshd[249800]: Failed password for root from 112.85.70.28 port 46810 ssh2 Jul 18 02:06:07 SurvuraNaFamiliqta sshd[249811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.70.28 user=root Jul 18 02:06:09 SurvuraNaFamiliqta sshd[249811]: Failed password for root from 112.85.70.28 port 60014 ssh2 ... show less	Brute-Force SSH
🇺🇸 cwytech	2026-07-17 22:35:08 (17 hours ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/pf-geofence-high.	Hacking
🇳🇱 sh97	2026-07-17 21:03:51 (19 hours ago)	Jul 18 02:33:46 NL04-VM-AMS sshd[3177243]: Failed password for root from 112.85.70.28 port 20030 ssh ... show more Jul 18 02:33:46 NL04-VM-AMS sshd[3177243]: Failed password for root from 112.85.70.28 port 20030 ssh2 Jul 18 02:33:49 NL04-VM-AMS sshd[3177245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.70.28 user=root Jul 18 02:33:51 NL04-VM-AMS sshd[3177245]: Failed password for root from 112.85.70.28 port 28804 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.137

🇨🇴 181.59.2.172

🇹🇭 125.25.87.185

🇯🇵 92.203.165.140

🇩🇪 80.158.109.51

🇮🇳 43.248.243.57

🇺🇦 31.42.184.154

🇺🇸 20.127.125.129

🇧🇩 203.76.222.144

🇧🇷 177.10.117.114

🇺🇸 162.253.42.116

🇭🇰 111.68.6.142

🇺🇸 103.143.10.140

🇮🇳 103.86.180.10

🇳🇱 77.239.124.237

🇺🇸 38.147.106.235

🇬🇧 35.203.210.9

🇺🇸 35.172.137.69

🇬🇧 5.226.140.69

🇷🇸 212.200.162.174