112.85.197.149

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Unicom

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
112.85.197.177	attack	Oct 9 14:36:38 elektron postfix/smtpd\[5347\]: NOQUEUE: reject: RCPT from unknown\[112.85.197.177\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[112.85.197.177\]\; from=\ to=\ proto=ESMTP helo=\ Oct 9 14:37:30 elektron postfix/smtpd\[1324\]: NOQUEUE: reject: RCPT from unknown\[112.85.197.177\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[112.85.197.177\]\; from=\ to=\ proto=ESMTP helo=\ Oct 9 14:38:16 elektron postfix/smtpd\[1324\]: NOQUEUE: reject: RCPT from unknown\[112.85.197.177\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[112.85.197.177\]\; from=\ to=\ proto=ESMTP helo=\	2019-10-09 22:39:35
112.85.197.245	attackbots	Brute force SMTP login attempts.	2019-10-01 20:46:52

类型

评论内容

时间

112.85.197.177

attack

Oct  9 14:36:38 elektron postfix/smtpd\[5347\]: NOQUEUE: reject: RCPT from unknown\[112.85.197.177\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[112.85.197.177\]\; from=\ to=\ proto=ESMTP helo=\
Oct  9 14:37:30 elektron postfix/smtpd\[1324\]: NOQUEUE: reject: RCPT from unknown\[112.85.197.177\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[112.85.197.177\]\; from=\ to=\ proto=ESMTP helo=\
Oct  9 14:38:16 elektron postfix/smtpd\[1324\]: NOQUEUE: reject: RCPT from unknown\[112.85.197.177\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[112.85.197.177\]\; from=\ to=\ proto=ESMTP helo=\

2019-10-09 22:39:35

112.85.197.245

attackbots

Brute force SMTP login attempts.

2019-10-01 20:46:52

WHOIS信息:

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '112.85.197.0 - 112.85.197.255'

% Abuse contact for '112.85.197.0 - 112.85.197.255' is 'zhaoyz3@chinaunicom.cn'

inetnum:        112.85.197.0 - 112.85.197.255
netname:        JIANGSUGROUP
country:        CN
descr:          JIANGSU GROUP CO.,NANJING,JIANGSU PROVINCE
admin-c:        LL58-AP
tech-c:         LL58-AP
status:         ASSIGNED NON-PORTABLE
mnt-by:         MAINT-CNCGROUP-JS
last-modified:  2010-10-22T07:34:11Z
source:         APNIC

person:         Lan Li
nic-hdl:        LL58-AP
e-mail:         js-cu-ipmanage@chinaunicom.cn
address:        No. 65 Beijing West Road,Nanjing,China
phone:          +86257900060
fax-no:         +86252900280
country:        CN
mnt-by:         MAINT-NEW
last-modified:  2013-08-15T02:13:11Z
source:         APNIC

% Information related to '112.80.0.0/13AS4837'

route:          112.80.0.0/13
descr:          China Unicom CHINA169 Jiangsu Province Network
country:        CN
origin:         AS4837
mnt-by:         MAINT-CNCGROUP-RR
last-modified:  2008-12-31T01:00:07Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.85.197.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46225
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.85.197.149.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026070300 1800 900 604800 86400

;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jul 03 17:05:23 CST 2026
;; MSG SIZE  rcvd: 107

HOST信息:

Host 149.197.85.112.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 149.197.85.112.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
202.134.81.252	attack	Invalid user admin from 202.134.81.252 port 60875	2020-04-27 02:51:17
106.13.44.83	attackspambots	Apr 26 15:11:34 mail sshd[14116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.83 Apr 26 15:11:36 mail sshd[14116]: Failed password for invalid user aidan from 106.13.44.83 port 33508 ssh2 Apr 26 15:14:26 mail sshd[14595]: Failed password for root from 106.13.44.83 port 40574 ssh2	2020-04-27 02:55:33
117.5.81.209	attackspam	Invalid user admin from 117.5.81.209 port 57373	2020-04-27 02:54:52
175.24.36.114	attack	$f2bV_matches	2020-04-27 03:05:50
27.34.251.60	attack	2020-04-26T19:06:45.276272shield sshd\[19599\]: Invalid user testftp from 27.34.251.60 port 35574 2020-04-26T19:06:45.280747shield sshd\[19599\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.34.251.60 2020-04-26T19:06:47.281539shield sshd\[19599\]: Failed password for invalid user testftp from 27.34.251.60 port 35574 ssh2 2020-04-26T19:10:44.056966shield sshd\[20652\]: Invalid user misson from 27.34.251.60 port 40482 2020-04-26T19:10:44.061634shield sshd\[20652\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.34.251.60	2020-04-27 03:25:59
145.239.198.218	attackspam	SSH Bruteforce attack	2020-04-27 03:07:11
54.38.33.178	attackbotsspam	Apr 26 20:37:56 mail sshd[17009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.33.178 Apr 26 20:37:58 mail sshd[17009]: Failed password for invalid user rowena from 54.38.33.178 port 40218 ssh2 Apr 26 20:42:59 mail sshd[18073]: Failed password for root from 54.38.33.178 port 43252 ssh2	2020-04-27 02:57:14
45.179.245.10	attackspam	Invalid user admin from 45.179.245.10 port 47576	2020-04-27 02:58:31
64.225.58.121	attackspambots	Invalid user admin2 from 64.225.58.121 port 52320	2020-04-27 03:23:02
103.134.0.195	attackbotsspam	2020-04-2614:44:231jSgdp-0004e7-AY\<=info@whatsup2013.chH=$localhost$[103.134.0.195]:42752P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3114id=aff734676c47929eb9fc4a19ed2a202c1fccd032@whatsup2013.chT="Iloveyourimages"fordlachlan485@gmail.combanez6018@sbcglobal.net2020-04-2614:45:191jSger-0004hM-B6\<=info@whatsup2013.chH=$localhost$[92.46.216.250]:44862P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3166id=ad28d3808ba075795e1badfe0acdc7cbf8c30c3a@whatsup2013.chT="Wishtobetogether"forhatiann101@gmail.comcoreydaniels@gmail.com2020-04-2614:43:561jSgdS-0004Zm-2R\<=info@whatsup2013.chH=$localhost$[202.137.155.142]:46352P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3076id=aa2d9bc8c3e8c2ca5653e549ae5a706c56adb2@whatsup2013.chT="Seekingarealgentleman"forliljchavez3@gmail.comdonovanniccolass@gmail.com2020-04-2614:46:081jSgfe-0004tY-NU\<=info@whatsup2013.chH=$localhost$[171.2	2020-04-27 02:55:51
206.189.153.181	attackbotsspam	206.189.153.181 - - \[26/Apr/2020:20:39:19 +0200\] "POST /wp-login.php HTTP/1.0" 200 4128 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 206.189.153.181 - - \[26/Apr/2020:20:39:26 +0200\] "POST /wp-login.php HTTP/1.0" 200 4134 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 206.189.153.181 - - \[26/Apr/2020:20:39:27 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2020-04-27 02:49:22
138.197.89.212	attackspambots	Unauthorised connection attempt detected at AUO NODE 1. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-04-27 03:08:39
178.62.21.80	attackbotsspam	14521/tcp 4806/tcp 29853/tcp... [2020-03-26/04-26]79pkt,27pt.(tcp)	2020-04-27 03:04:14
73.229.232.218	attack	Invalid user zc	2020-04-27 03:21:48
83.167.87.198	attack	Apr 26 21:12:40 legacy sshd[7353]: Failed password for root from 83.167.87.198 port 59455 ssh2 Apr 26 21:17:48 legacy sshd[7638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.167.87.198 Apr 26 21:17:50 legacy sshd[7638]: Failed password for invalid user marketing from 83.167.87.198 port 36444 ssh2 ...	2020-04-27 03:20:50

最近上报的IP列表

42.48.115.210	120.217.225.158	165.254.95.112	120.227.117.243
223.91.125.145	36.170.70.229	182.121.116.148	61.54.163.156
221.193.111.211	118.73.175.95	60.220.20.235	111.25.99.195
220.174.90.203	112.8.58.91	1.192.184.41	123.164.255.54
39.73.84.19	113.124.88.32	180.130.254.159	39.154.199.248