103.85.12.5 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
103.85.121.212	attackspam	Jan 30 22:35:04 grey postfix/smtpd\[1688\]: NOQUEUE: reject: RCPT from unknown\[103.85.121.212\]: 554 5.7.1 Service unavailable\; Client host \[103.85.121.212\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?103.85.121.212\; from=\ to=\ proto=ESMTP helo=\<\[103.85.121.212\]\> ...	2020-01-31 09:46:50
103.85.123.31	attackbots	Autoban 103.85.123.31 AUTH/CONNECT	2019-07-06 23:51:25

类型

评论内容

时间

103.85.121.212

attackspam

Jan 30 22:35:04 grey postfix/smtpd\[1688\]: NOQUEUE: reject: RCPT from unknown\[103.85.121.212\]: 554 5.7.1 Service unavailable\; Client host \[103.85.121.212\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?103.85.121.212\; from=\ to=\ proto=ESMTP helo=\<\[103.85.121.212\]\>
...

2020-01-31 09:46:50

103.85.123.31

attackbots

Autoban   103.85.123.31 AUTH/CONNECT

2019-07-06 23:51:25

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.85.12.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3050
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.85.12.5.			IN	A

;; AUTHORITY SECTION:
.			200	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 111 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 26 00:25:27 CST 2022
;; MSG SIZE  rcvd: 104

HOST信息:

5.12.85.103.in-addr.arpa domain name pointer gate-05.as136076.net.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
5.12.85.103.in-addr.arpa	name = gate-05.as136076.net.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
80.85.70.20	attackspam	Sep 24 05:54:17 auw2 sshd\[25004\]: Invalid user g from 80.85.70.20 Sep 24 05:54:17 auw2 sshd\[25004\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.85.70.20 Sep 24 05:54:20 auw2 sshd\[25004\]: Failed password for invalid user g from 80.85.70.20 port 32938 ssh2 Sep 24 05:57:45 auw2 sshd\[25324\]: Invalid user ass from 80.85.70.20 Sep 24 05:57:45 auw2 sshd\[25324\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.85.70.20	2019-09-25 00:12:16
170.246.1.226	attack	Automatic report - Port Scan Attack	2019-09-24 23:51:22
46.38.144.32	attack	Sep 24 17:52:42 relay postfix/smtpd\[20537\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 24 17:53:05 relay postfix/smtpd\[6694\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 24 17:55:08 relay postfix/smtpd\[24766\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: VXNlcm5hbWU6 Sep 24 17:55:34 relay postfix/smtpd\[6694\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: VXNlcm5hbWU6 Sep 24 17:57:35 relay postfix/smtpd\[20537\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-09-25 00:00:43
92.222.127.232	attack	2019-09-24T13:12:03.782272abusebot.cloudsearch.cf sshd\[4959\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.127.232 user=root	2019-09-25 00:29:43
157.230.168.4	attackbots	Sep 24 13:18:06 work-partkepr sshd\[31446\]: Invalid user redereporter from 157.230.168.4 port 49758 Sep 24 13:18:06 work-partkepr sshd\[31446\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.168.4 ...	2019-09-25 00:20:43
113.173.226.48	attackspambots	Sep 24 07:15:34 ingram sshd[16390]: Invalid user admin from 113.173.226.48 Sep 24 07:15:34 ingram sshd[16390]: Failed password for invalid user admin from 113.173.226.48 port 60517 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=113.173.226.48	2019-09-25 00:05:45
178.33.216.187	attackbotsspam	Sep 24 10:04:34 ny01 sshd[18974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.216.187 Sep 24 10:04:36 ny01 sshd[18974]: Failed password for invalid user uftp from 178.33.216.187 port 54344 ssh2 Sep 24 10:08:57 ny01 sshd[19752]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.216.187	2019-09-24 23:54:05
211.195.12.33	attackspam	Sep 24 04:36:03 hpm sshd\[5680\]: Invalid user henry from 211.195.12.33 Sep 24 04:36:03 hpm sshd\[5680\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.195.12.33 Sep 24 04:36:04 hpm sshd\[5680\]: Failed password for invalid user henry from 211.195.12.33 port 38184 ssh2 Sep 24 04:41:03 hpm sshd\[6218\]: Invalid user webmail from 211.195.12.33 Sep 24 04:41:03 hpm sshd\[6218\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.195.12.33	2019-09-25 00:01:06
112.85.42.229	attack	2019-09-24T16:09:17.398540abusebot-2.cloudsearch.cf sshd\[11879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.229 user=root	2019-09-25 00:09:44
51.79.71.142	attackspambots	Sep 24 10:03:05 xtremcommunity sshd\[433268\]: Invalid user yuanwd from 51.79.71.142 port 49510 Sep 24 10:03:05 xtremcommunity sshd\[433268\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.71.142 Sep 24 10:03:07 xtremcommunity sshd\[433268\]: Failed password for invalid user yuanwd from 51.79.71.142 port 49510 ssh2 Sep 24 10:07:18 xtremcommunity sshd\[433374\]: Invalid user ctrls from 51.79.71.142 port 35000 Sep 24 10:07:18 xtremcommunity sshd\[433374\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.71.142 ...	2019-09-24 23:56:16
189.213.164.70	attack	Automatic report - Port Scan Attack	2019-09-25 00:30:39
217.16.11.115	attack	Sep 24 14:27:31 server2101 sshd[29292]: Invalid user elena from 217.16.11.115 port 43968 Sep 24 14:27:31 server2101 sshd[29292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.16.11.115 Sep 24 14:27:32 server2101 sshd[29292]: Failed password for invalid user elena from 217.16.11.115 port 43968 ssh2 Sep 24 14:27:32 server2101 sshd[29292]: Received disconnect from 217.16.11.115 port 43968:11: Bye Bye [preauth] Sep 24 14:27:32 server2101 sshd[29292]: Disconnected from 217.16.11.115 port 43968 [preauth] Sep 24 14:36:51 server2101 sshd[29399]: Invalid user jira from 217.16.11.115 port 32461 Sep 24 14:36:51 server2101 sshd[29399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.16.11.115 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=217.16.11.115	2019-09-25 00:30:15
103.79.143.245	attackspam	Sep 24 08:42:32 123flo sshd[28082]: Invalid user support from 103.79.143.245 Sep 24 08:42:32 123flo sshd[28082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.79.143.245 Sep 24 08:42:32 123flo sshd[28082]: Invalid user support from 103.79.143.245 Sep 24 08:42:35 123flo sshd[28082]: Failed password for invalid user support from 103.79.143.245 port 65360 ssh2 Sep 24 08:42:36 123flo sshd[28086]: Invalid user admin from 103.79.143.245	2019-09-25 00:04:55
222.186.173.154	attackbotsspam	2019-09-24T18:12:28.592430lon01.zurich-datacenter.net sshd\[24264\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.154 user=root 2019-09-24T18:12:30.427036lon01.zurich-datacenter.net sshd\[24264\]: Failed password for root from 222.186.173.154 port 38358 ssh2 2019-09-24T18:12:34.828213lon01.zurich-datacenter.net sshd\[24264\]: Failed password for root from 222.186.173.154 port 38358 ssh2 2019-09-24T18:12:39.585225lon01.zurich-datacenter.net sshd\[24264\]: Failed password for root from 222.186.173.154 port 38358 ssh2 2019-09-24T18:12:44.224274lon01.zurich-datacenter.net sshd\[24264\]: Failed password for root from 222.186.173.154 port 38358 ssh2 ...	2019-09-25 00:14:13
220.88.1.208	attackspam	Lines containing failures of 220.88.1.208 Sep 24 12:00:26 kopano sshd[10106]: Invalid user admin from 220.88.1.208 port 38771 Sep 24 12:00:26 kopano sshd[10106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.88.1.208 Sep 24 12:00:27 kopano sshd[10106]: Failed password for invalid user admin from 220.88.1.208 port 38771 ssh2 Sep 24 12:00:27 kopano sshd[10106]: Received disconnect from 220.88.1.208 port 38771:11: Bye Bye [preauth] Sep 24 12:00:27 kopano sshd[10106]: Disconnected from invalid user admin 220.88.1.208 port 38771 [preauth] Sep 24 12:11:23 kopano sshd[10698]: Invalid user ubuntu from 220.88.1.208 port 48259 Sep 24 12:11:23 kopano sshd[10698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.88.1.208 Sep 24 12:11:24 kopano sshd[10698]: Failed password for invalid user ubuntu from 220.88.1.208 port 48259 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=220.88	2019-09-25 00:05:20

最近上报的IP列表

103.85.12.46	103.197.33.151	103.85.120.18	103.85.12.69
103.85.121.152	103.85.120.37	103.85.122.1	103.85.121.186
103.85.122.28	103.197.33.169	103.197.33.173	103.197.33.200
103.197.33.209	38.25.137.122	103.197.33.222	103.197.33.230
103.85.242.241	103.85.242.242	103.85.242.129	103.85.241.78