城市(city): Sofia
省份(region): Sofia Region
国家(country): Bulgaria
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See https://docs.db.ripe.net/terms-conditions.html
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '85.11.167.0 - 85.11.167.255'
% Abuse contact for '85.11.167.0 - 85.11.167.255' is 'abuse@tech-ties.net'
inetnum: 85.11.167.0 - 85.11.167.255
netname: TechTies-Network
mnt-routes: techties-mnt
org: ORG-TI147-RIPE
country: NL
geofeed: https://cdn.tech-ties.net/geofeed.csv
abuse-c: ACRO64662-RIPE
admin-c: TIN51-RIPE
tech-c: TIN51-RIPE
status: SUB-ALLOCATED PA
created: 2026-06-05T15:18:51Z
last-modified: 2026-06-20T16:29:34Z
source: RIPE
mnt-by: bg-sofcompany-1-mnt
mnt-by: techties-mnt
organisation: ORG-TI147-RIPE
org-name: TechTies Inc.
org-type: OTHER
address: 306 Victoria House, Victoria Mahe, Seychelles
country: SC
reg-nr: 250236
mnt-ref: bg-sofcompany-1-mnt
mnt-ref: lir-bg-telco-1-MNT
mnt-ref: mnt-nl-skylink2-1
mnt-ref: MNT-TRAFFIC
mnt-ref: mnt-de-xsserver-1
mnt-ref: MNT-ZEXOTEK
mnt-ref: mnt-bg-eurocrypt-1
mnt-ref: NETERRA-MNT
mnt-ref: MNT-NETERRA
abuse-c: ACRO64662-RIPE
mnt-ref: techties-mnt
created: 2026-05-20T23:28:15Z
last-modified: 2026-06-08T15:47:52Z
source: RIPE # Filtered
mnt-by: techties-mnt
role: TechTies Inc. 24x7 NOC
abuse-mailbox: abuse@tech-ties.net
nic-hdl: TIN51-RIPE
mnt-by: techties-mnt
created: 2026-05-20T23:26:26Z
last-modified: 2026-05-26T11:40:33Z
source: RIPE # Filtered
% Information related to '85.11.167.0/24AS209630'
route: 85.11.167.0/24
origin: AS209630
created: 2026-05-22T08:10:49Z
last-modified: 2026-05-22T08:10:49Z
source: RIPE
mnt-by: bg-sofcompany-1-mnt
% This query was served by the RIPE Database Query Service version 1.124.1 (SHETLAND); <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.11.167.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40293
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;85.11.167.104. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026090201 1800 900 604800 86400
;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 03 05:30:18 CST 2026
;; MSG SIZE rcvd: 106Host 104.167.11.85.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 104.167.11.85.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 187.108.232.251 | attackspam | failed_logins |
2019-09-09 13:22:42 |
| 192.144.253.79 | attackbots | $f2bV_matches |
2019-09-09 13:09:46 |
| 151.226.22.72 | attack | Automatic report - Port Scan Attack |
2019-09-09 12:40:29 |
| 51.89.29.64 | attack | Lines containing failures of 51.89.29.64 Sep 9 00:05:26 vps9 sshd[9447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.29.64 user=postgres Sep 9 00:05:28 vps9 sshd[9447]: Failed password for postgres from 51.89.29.64 port 54612 ssh2 Sep 9 00:05:28 vps9 sshd[9447]: Received disconnect from 51.89.29.64 port 54612:11: Bye Bye [preauth] Sep 9 00:05:28 vps9 sshd[9447]: Disconnected from authenticating user postgres 51.89.29.64 port 54612 [preauth] Sep 9 00:11:11 vps9 sshd[11985]: Invalid user mc from 51.89.29.64 port 37618 Sep 9 00:11:13 vps9 sshd[11985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.29.64 Sep 9 00:11:15 vps9 sshd[11985]: Failed password for invalid user mc from 51.89.29.64 port 37618 ssh2 Sep 9 00:11:15 vps9 sshd[11985]: Received disconnect from 51.89.29.64 port 37618:11: Bye Bye [preauth] Sep 9 00:11:15 vps9 sshd[11985]: Disconnected from invalid user ........ ------------------------------ |
2019-09-09 12:57:11 |
| 202.29.236.132 | attackbots | Sep 9 07:16:23 dev0-dcfr-rnet sshd[28378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.236.132 Sep 9 07:16:25 dev0-dcfr-rnet sshd[28378]: Failed password for invalid user vyatta from 202.29.236.132 port 59406 ssh2 Sep 9 07:23:37 dev0-dcfr-rnet sshd[28437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.236.132 |
2019-09-09 13:23:50 |
| 165.22.251.90 | attackspam | Sep 9 04:34:52 web8 sshd\[28863\]: Invalid user qwer1234 from 165.22.251.90 Sep 9 04:34:52 web8 sshd\[28863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.251.90 Sep 9 04:34:54 web8 sshd\[28863\]: Failed password for invalid user qwer1234 from 165.22.251.90 port 42628 ssh2 Sep 9 04:41:19 web8 sshd\[31990\]: Invalid user server from 165.22.251.90 Sep 9 04:41:19 web8 sshd\[31990\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.251.90 |
2019-09-09 12:59:45 |
| 2.228.149.174 | attackspam | Sep 9 06:18:55 vps01 sshd[20557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.228.149.174 Sep 9 06:18:57 vps01 sshd[20557]: Failed password for invalid user userftp from 2.228.149.174 port 48844 ssh2 |
2019-09-09 12:37:32 |
| 138.219.192.98 | attackbotsspam | Sep 9 00:41:29 plusreed sshd[1753]: Invalid user steam from 138.219.192.98 ... |
2019-09-09 12:48:06 |
| 52.163.221.85 | attackspam | Sep 9 01:01:13 plusreed sshd[7375]: Invalid user support from 52.163.221.85 ... |
2019-09-09 13:18:13 |
| 88.202.190.136 | attackspambots | 9990/tcp 2004/tcp 6379/tcp... [2019-07-12/09-08]8pkt,7pt.(tcp),1pt.(udp) |
2019-09-09 12:36:36 |
| 222.92.189.76 | attackbots | Sep 9 06:41:21 localhost sshd\[7964\]: Invalid user temp1 from 222.92.189.76 port 11849 Sep 9 06:41:21 localhost sshd\[7964\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.92.189.76 Sep 9 06:41:22 localhost sshd\[7964\]: Failed password for invalid user temp1 from 222.92.189.76 port 11849 ssh2 |
2019-09-09 12:55:31 |
| 149.56.20.183 | attackspam | Sep 8 18:53:23 hpm sshd\[20027\]: Invalid user bot123 from 149.56.20.183 Sep 8 18:53:23 hpm sshd\[20027\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns529103.ip-149-56-20.net Sep 8 18:53:25 hpm sshd\[20027\]: Failed password for invalid user bot123 from 149.56.20.183 port 51288 ssh2 Sep 8 18:59:38 hpm sshd\[20590\]: Invalid user bots123 from 149.56.20.183 Sep 8 18:59:38 hpm sshd\[20590\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns529103.ip-149-56-20.net |
2019-09-09 13:14:54 |
| 2.78.57.243 | attackspam | Sep 9 01:01:50 TORMINT sshd\[11645\]: Invalid user developer from 2.78.57.243 Sep 9 01:01:50 TORMINT sshd\[11645\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.78.57.243 Sep 9 01:01:53 TORMINT sshd\[11645\]: Failed password for invalid user developer from 2.78.57.243 port 54706 ssh2 ... |
2019-09-09 13:08:56 |
| 60.21.147.162 | attackspambots | postfix/smtpd\[11489\]: NOQUEUE: reject: RCPT from unknown\[60.21.147.162\]: 554 5.7.1 Service Client host \[60.21.147.162\] blocked using sbl-xbl.spamhaus.org\; |
2019-09-09 12:49:36 |
| 187.217.81.250 | attackbots | port scan/probe/communication attempt |
2019-09-09 12:35:26 |