103.116.168.13

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): Dinas Komunikasi dan Informatika Kota Medan

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Government

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Phishing scam report IP address 103.116.168.13 est@pemkomedan.go.id	2020-06-27 02:11:53

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.116.168.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6897
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.116.168.13.			IN	A

;; AUTHORITY SECTION:
.			273	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020062600 1800 900 604800 86400

;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jun 27 02:11:47 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

13.168.116.103.in-addr.arpa domain name pointer srv.pemkomedan.go.id.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
13.168.116.103.in-addr.arpa	name = srv.pemkomedan.go.id.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
72.34.118.204	attackspam	Honeypot attack, port: 23, PTR: 72-34-118-204.LSANCA.static.bb.race.com.	2019-08-07 21:51:56
153.128.31.79	attack	Honeypot attack, port: 445, PTR: 153-128-31-79.compute.jp-e1.cloudn-service.com.	2019-08-07 21:39:41
27.192.100.209	attackbots	Aug 7 06:54:28 DDOS Attack: SRC=27.192.100.209 DST=[Masked] LEN=40 TOS=0x00 PREC=0x00 TTL=48 DF PROTO=TCP SPT=42136 DPT=80 WINDOW=0 RES=0x00 RST URGP=0	2019-08-07 20:51:44
194.230.159.163	attackbots	Aug708:53:21server2dovecot:imap-login:Abortedlogin\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=194.230.159.163\,lip=136.243.224.50\,TLS\,session=\Aug708:53:27server2dovecot:imap-login:Abortedlogin\(authfailed\,1attemptsin6secs\):user=\\,method=PLAIN\,rip=194.230.159.163\,lip=136.243.224.50\,TLS\,session=\<1TadZYGPwuDC5p j\>Aug708:53:34server2dovecot:imap-login:Abortedlogin\(authfailed\,1attemptsin6secs\):user=\\,method=PLAIN\,rip=194.230.159.163\,lip=136.243.224.50\,TLS\,session=\Aug708:53:36server2dovecot:imap-login:Abortedlogin\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=194.230.159.163\,lip=136.243.224.50\,TLS\,session=\<27BiZoGPxODC5p j\>Aug708:53:39server2dovecot:imap-login:Abortedlogin\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=194.230.159.163\,lip=136.243.224.50\,TLS\,session=\Aug708:53:41server2dovecot:im	2019-08-07 21:04:31
218.92.0.160	attack	Aug 7 14:39:01 ArkNodeAT sshd\[6328\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.160 user=root Aug 7 14:39:03 ArkNodeAT sshd\[6328\]: Failed password for root from 218.92.0.160 port 46984 ssh2 Aug 7 14:39:21 ArkNodeAT sshd\[6390\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.160 user=root	2019-08-07 21:12:04
49.69.212.179	attackspambots	Aug 6 07:50:25 pl3server sshd[3371972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.69.212.179 user=r.r Aug 6 07:50:27 pl3server sshd[3371972]: Failed password for r.r from 49.69.212.179 port 56654 ssh2 Aug 6 07:50:30 pl3server sshd[3371972]: Failed password for r.r from 49.69.212.179 port 56654 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=49.69.212.179	2019-08-07 21:10:00
103.206.70.245	attackbotsspam	Aug 7 08:53:54 mail postfix/smtpd\[17069\]: NOQUEUE: reject: RCPT from qzcp.ahsqasasa.com\[103.206.70.245\]: 554 5.7.1 Service unavailable\; Client host \[103.206.70.245\] blocked using zen.spamhaus.org\; https://www.spamhaus.org/sbl/query/SBL304334 / https://www.spamhaus.org/sbl/query/SBLCSS\; from=\ to=\ proto=ESMTP helo=\\	2019-08-07 21:16:44
125.234.109.236	attackbots	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-07 06:32:42,159 INFO [amun_request_handler] PortScan Detected on Port: 445 (125.234.109.236)	2019-08-07 21:20:49
41.222.120.85	attackspam	20 attempts against mh-ssh on flow.magehost.pro	2019-08-07 20:58:30
58.56.9.5	attackspambots	Aug 7 06:59:43 xtremcommunity sshd\[21240\]: Invalid user thiago from 58.56.9.5 port 55728 Aug 7 06:59:43 xtremcommunity sshd\[21240\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.56.9.5 Aug 7 06:59:45 xtremcommunity sshd\[21240\]: Failed password for invalid user thiago from 58.56.9.5 port 55728 ssh2 Aug 7 07:04:51 xtremcommunity sshd\[21944\]: Invalid user ozrt from 58.56.9.5 port 47742 Aug 7 07:04:51 xtremcommunity sshd\[21944\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.56.9.5 ...	2019-08-07 21:25:33
89.122.93.157	attackspambots	Honeypot attack, port: 23, PTR: PTR record not found	2019-08-07 21:41:58
1.53.114.168	attackbots	Unauthorised access (Aug 7) SRC=1.53.114.168 LEN=52 TTL=108 ID=13810 DF TCP DPT=445 WINDOW=8192 SYN	2019-08-07 21:41:36
218.92.0.133	attack	2019-08-07T13:12:21.236609Z 9bb9870d8bcb New connection: 218.92.0.133:19912 (172.17.0.3:2222) [session: 9bb9870d8bcb] 2019-08-07T13:12:59.762861Z bc5e350d09c5 New connection: 218.92.0.133:34931 (172.17.0.3:2222) [session: bc5e350d09c5]	2019-08-07 21:21:21
1.197.132.39	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-07 06:33:43,602 INFO [amun_request_handler] PortScan Detected on Port: 445 (1.197.132.39)	2019-08-07 21:10:36
113.228.183.95	attack	Honeypot attack, port: 23, PTR: PTR record not found	2019-08-07 21:48:15

最近上报的IP列表

157.245.64.116	74.123.21.22	112.35.145.179	155.94.143.112
40.77.202.66	180.76.244.123	109.75.76.234	34.215.22.93
179.96.177.147	51.83.133.24	176.123.6.21	106.52.234.17
154.221.29.125	129.226.185.201	87.188.125.30	51.195.146.202
18.222.48.159	158.158.73.7	152.218.138.7	46.40.248.46