117.85.48.134 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
117.85.48.122	attackbots	Oct 28 07:54:02 esmtp postfix/smtpd[19671]: lost connection after AUTH from unknown[117.85.48.122] Oct 28 07:54:03 esmtp postfix/smtpd[19671]: lost connection after AUTH from unknown[117.85.48.122] Oct 28 07:54:05 esmtp postfix/smtpd[19671]: lost connection after AUTH from unknown[117.85.48.122] Oct 28 07:54:06 esmtp postfix/smtpd[19671]: lost connection after AUTH from unknown[117.85.48.122] Oct 28 07:54:08 esmtp postfix/smtpd[19671]: lost connection after AUTH from unknown[117.85.48.122] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=117.85.48.122	2019-10-28 20:16:37
117.85.48.227	attackbotsspam	Bad Postfix AUTH attempts ...	2019-06-30 10:52:43

类型

评论内容

时间

117.85.48.122

attackbots

Oct 28 07:54:02 esmtp postfix/smtpd[19671]: lost connection after AUTH from unknown[117.85.48.122]
Oct 28 07:54:03 esmtp postfix/smtpd[19671]: lost connection after AUTH from unknown[117.85.48.122]
Oct 28 07:54:05 esmtp postfix/smtpd[19671]: lost connection after AUTH from unknown[117.85.48.122]
Oct 28 07:54:06 esmtp postfix/smtpd[19671]: lost connection after AUTH from unknown[117.85.48.122]
Oct 28 07:54:08 esmtp postfix/smtpd[19671]: lost connection after AUTH from unknown[117.85.48.122]

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=117.85.48.122

2019-10-28 20:16:37

117.85.48.227

attackbotsspam

Bad Postfix AUTH attempts
...

2019-06-30 10:52:43

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.85.48.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46834
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;117.85.48.134.			IN	A

;; AUTHORITY SECTION:
.			26	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 22:47:36 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

Host 134.48.85.117.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 134.48.85.117.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
202.97.147.183	attack	IMAP brute force ...	2019-09-15 06:02:51
178.33.12.237	attackspambots	Sep 14 22:21:13 SilenceServices sshd[11303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.12.237 Sep 14 22:21:15 SilenceServices sshd[11303]: Failed password for invalid user system from 178.33.12.237 port 60918 ssh2 Sep 14 22:25:16 SilenceServices sshd[12826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.12.237	2019-09-15 05:45:46
80.82.65.60	attack	Sep 14 23:54:11 relay dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=80.82.65.60, lip=176.9.177.164, session=\ Sep 14 23:54:22 relay dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=80.82.65.60, lip=176.9.177.164, session=\<5eh7aYqSUOlQUkE8\> Sep 14 23:54:38 relay dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 10 secs\): user=\, method=PLAIN, rip=80.82.65.60, lip=176.9.177.164, session=\ Sep 14 23:56:40 relay dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=80.82.65.60, lip=176.9.177.164, session=\ Sep 14 23:59:03 relay dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN ...	2019-09-15 06:01:57
186.10.17.84	attackbotsspam	Sep 14 20:13:40 ns3110291 sshd\[12726\]: Invalid user ams from 186.10.17.84 Sep 14 20:13:40 ns3110291 sshd\[12726\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.10.17.84 Sep 14 20:13:42 ns3110291 sshd\[12726\]: Failed password for invalid user ams from 186.10.17.84 port 48922 ssh2 Sep 14 20:18:16 ns3110291 sshd\[13133\]: Invalid user Sulo from 186.10.17.84 Sep 14 20:18:16 ns3110291 sshd\[13133\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.10.17.84 ...	2019-09-15 06:06:41
182.61.27.149	attackspam	Sep 14 23:34:01 markkoudstaal sshd[20362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.27.149 Sep 14 23:34:03 markkoudstaal sshd[20362]: Failed password for invalid user engmanagement from 182.61.27.149 port 34918 ssh2 Sep 14 23:39:06 markkoudstaal sshd[20878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.27.149	2019-09-15 05:52:42
51.38.237.78	attackspambots	Sep 14 23:53:49 saschabauer sshd[25199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.237.78 Sep 14 23:53:51 saschabauer sshd[25199]: Failed password for invalid user ubuntu from 51.38.237.78 port 40716 ssh2	2019-09-15 06:24:16
157.230.112.34	attackspam	Invalid user sadan from 157.230.112.34 port 46142	2019-09-15 06:14:38
159.89.194.149	attack	Sep 14 23:29:25 dedicated sshd[8794]: Invalid user lt from 159.89.194.149 port 33876	2019-09-15 05:53:02
95.105.237.69	attackbotsspam	Sep 14 23:37:38 mail sshd\[30901\]: Invalid user direct from 95.105.237.69 port 45144 Sep 14 23:37:38 mail sshd\[30901\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.105.237.69 Sep 14 23:37:40 mail sshd\[30901\]: Failed password for invalid user direct from 95.105.237.69 port 45144 ssh2 Sep 14 23:41:15 mail sshd\[31386\]: Invalid user tu from 95.105.237.69 port 57896 Sep 14 23:41:15 mail sshd\[31386\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.105.237.69	2019-09-15 05:49:01
182.61.58.131	attack	2019-09-14T21:31:13.957549abusebot-7.cloudsearch.cf sshd\[3466\]: Invalid user ec2-test from 182.61.58.131 port 47884	2019-09-15 06:03:25
14.241.230.147	attackspambots	Chat Spam	2019-09-15 06:00:34
109.207.79.116	attackspam	Invalid user upload from 109.207.79.116 port 58324	2019-09-15 06:19:26
211.107.45.84	attackbots	Sep 14 20:17:42 bouncer sshd\[30596\]: Invalid user comfort from 211.107.45.84 port 39466 Sep 14 20:17:42 bouncer sshd\[30596\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.107.45.84 Sep 14 20:17:44 bouncer sshd\[30596\]: Failed password for invalid user comfort from 211.107.45.84 port 39466 ssh2 ...	2019-09-15 06:23:27
106.12.24.1	attack	Sep 14 23:34:34 markkoudstaal sshd[20408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.24.1 Sep 14 23:34:36 markkoudstaal sshd[20408]: Failed password for invalid user sublink from 106.12.24.1 port 56170 ssh2 Sep 14 23:39:15 markkoudstaal sshd[20988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.24.1	2019-09-15 05:53:16
165.22.128.115	attack	Sep 14 12:10:57 tdfoods sshd\[17644\]: Invalid user ingres from 165.22.128.115 Sep 14 12:10:57 tdfoods sshd\[17644\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.128.115 Sep 14 12:10:59 tdfoods sshd\[17644\]: Failed password for invalid user ingres from 165.22.128.115 port 47880 ssh2 Sep 14 12:15:17 tdfoods sshd\[18012\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.128.115 user=root Sep 14 12:15:19 tdfoods sshd\[18012\]: Failed password for root from 165.22.128.115 port 35094 ssh2	2019-09-15 06:17:33

最近上报的IP列表

114.233.169.139	117.85.48.17	114.233.169.140	114.233.169.142
114.233.169.148	114.233.169.157	114.233.169.158	114.233.169.160
114.233.169.162	114.233.169.164	117.86.106.142	114.233.169.169
117.86.10.211	117.86.10.88	117.86.102.127	117.86.11.174
117.86.10.48	117.86.11.117	117.86.10.242	114.233.169.173