103.105.23.239

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
103.105.238.11	attackbots	Unauthorised access (Jun 30) SRC=103.105.238.11 LEN=60 PREC=0x20 TTL=114 ID=643 DF TCP DPT=445 WINDOW=8192 SYN	2019-06-30 23:51:15

Whois info:

% [whois.apnic.net]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

% Information related to '103.105.23.0 - 103.105.23.255'

% Abuse contact for '103.105.23.0 - 103.105.23.255' is '979273583@qq.com'

inetnum:        103.105.23.0 - 103.105.23.255
netname:        TPTCL-CN
descr:          Hexi District Liberation Road 351 Xinhai building 2107-2112
country:        CN
org:            ORG-TPTC1-AP
admin-c:        TPTC1-AP
tech-c:         TPTC1-AP
abuse-c:        AT1082-AP
status:         ALLOCATED PORTABLE
remarks:        --------------------------------------------------------
remarks:        To report network abuse, please contact mnt-irt
remarks:        For troubleshooting, please contact tech-c and admin-c
remarks:        Report invalid contact via www.apnic.net/invalidcontact
remarks:        --------------------------------------------------------
mnt-by:         APNIC-HM
mnt-lower:      MAINT-TPTCL-CN
mnt-routes:     MAINT-TPTCL-CN
mnt-irt:        IRT-TPTCL-CN
last-modified:  2020-06-17T13:07:02Z
source:         APNIC

irt:            IRT-TPTCL-CN
address:        Hexi District Liberation Road 351 Xinhai building 2107-2112, Tianjin Tianjin N/A
e-mail:         979273583@qq.com
abuse-mailbox:  979273583@qq.com
admin-c:        TPTC1-AP
tech-c:         TPTC1-AP
auth:           # Filtered
remarks:        979273583@qq.com is invalid
mnt-by:         MAINT-TPTCL-CN
last-modified:  2026-05-20T13:10:33Z
source:         APNIC

organisation:   ORG-TPTC1-AP
org-name:       Tianjin peak Technology Co., Ltd.
org-type:       LIR
country:        CN
address:        Hexi District Liberation Road 351 Xinhai building 2107-2112
phone:          +86-022-28230801
e-mail:         admin@topphp.net
mnt-ref:        APNIC-HM
mnt-by:         APNIC-HM
last-modified:  2023-09-05T02:17:19Z
source:         APNIC

role:           ABUSE TPTCLCN
country:        ZZ
address:        Hexi District Liberation Road 351 Xinhai building 2107-2112, Tianjin Tianjin N/A
phone:          +000000000
e-mail:         979273583@qq.com
admin-c:        TPTC1-AP
tech-c:         TPTC1-AP
nic-hdl:        AT1082-AP
remarks:        Generated from irt object IRT-TPTCL-CN
remarks:        979273583@qq.com is invalid
abuse-mailbox:  979273583@qq.com
mnt-by:         APNIC-ABUSE
last-modified:  2026-05-20T13:11:24Z
source:         APNIC

role:           Tianjin peak Technology Co Ltd administrator
address:        Hexi District Liberation Road 351 Xinhai building 2107-2112, Tianjin Tianjin N/A
country:        CN
phone:          +86-022-28230801
fax-no:         +86-022-28230801
e-mail:         abuse@topphp.net
admin-c:        TPTC1-AP
tech-c:         TPTC1-AP
nic-hdl:        TPTC1-AP
mnt-by:         MAINT-TPTCL-CN
last-modified:  2017-12-04T01:31:12Z
source:         APNIC

% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5)

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.105.23.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50270
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.105.23.239.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2026100401 1800 900 604800 86400

;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 05 03:06:37 CST 2026
;; MSG SIZE  rcvd: 107

Host info

Host 239.23.105.103.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 239.23.105.103.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
165.22.122.68	attackbots	Jul 26 01:09:03 debian-2gb-nbg1-2 kernel: \[17977056.180779\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=165.22.122.68 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=45463 PROTO=TCP SPT=32767 DPT=10331 WINDOW=1024 RES=0x00 SYN URGP=0	2020-07-26 07:35:46
95.47.143.155	attackspam	Automatic report - Port Scan Attack	2020-07-26 08:00:43
186.206.157.34	attackspam	$f2bV_matches	2020-07-26 07:45:24
176.202.136.15	attack	Jul 24 06:15:33 zn008 sshd[24815]: Invalid user jonatas from 176.202.136.15 Jul 24 06:15:33 zn008 sshd[24815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.202.136.15 Jul 24 06:15:35 zn008 sshd[24815]: Failed password for invalid user jonatas from 176.202.136.15 port 39190 ssh2 Jul 24 06:15:35 zn008 sshd[24815]: Received disconnect from 176.202.136.15: 11: Bye Bye [preauth] Jul 24 06:34:51 zn008 sshd[26597]: Invalid user mrj from 176.202.136.15 Jul 24 06:34:51 zn008 sshd[26597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.202.136.15 Jul 24 06:34:53 zn008 sshd[26597]: Failed password for invalid user mrj from 176.202.136.15 port 38632 ssh2 Jul 24 06:34:53 zn008 sshd[26597]: Received disconnect from 176.202.136.15: 11: Bye Bye [preauth] Jul 24 06:39:12 zn008 sshd[27134]: Invalid user vhostnameiello from 176.202.136.15 Jul 24 06:39:12 zn008 sshd[27134]: pam_unix(sshd:auth): aut........ -------------------------------	2020-07-26 07:44:05
220.176.204.91	attack	SSH Brute-Forcing (server1)	2020-07-26 07:58:35
89.248.168.217	attack	89.248.168.217 was recorded 11 times by 6 hosts attempting to connect to the following ports: 1053,1057. Incident counter (4h, 24h, all-time): 11, 56, 22631	2020-07-26 08:10:20
183.109.124.137	attack	Brute-force attempt banned	2020-07-26 07:50:20
113.98.117.119	attack	Brute-force attempt banned	2020-07-26 08:11:43
181.31.129.12	attack	Jul 25 20:03:13 firewall sshd[4445]: Invalid user sekine from 181.31.129.12 Jul 25 20:03:15 firewall sshd[4445]: Failed password for invalid user sekine from 181.31.129.12 port 11809 ssh2 Jul 25 20:08:45 firewall sshd[4594]: Invalid user nzb from 181.31.129.12 ...	2020-07-26 07:52:27
13.234.148.114	attackspambots	Jul 26 01:50:18 ip106 sshd[27153]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.234.148.114 Jul 26 01:50:20 ip106 sshd[27153]: Failed password for invalid user admin from 13.234.148.114 port 35766 ssh2 ...	2020-07-26 07:56:11
35.201.225.235	attackspambots	Jul 26 04:08:49 gw1 sshd[2207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.201.225.235 Jul 26 04:08:50 gw1 sshd[2207]: Failed password for invalid user aurore from 35.201.225.235 port 57944 ssh2 ...	2020-07-26 07:47:42
123.206.59.235	attack	Jul 26 00:53:48 ns382633 sshd\[15486\]: Invalid user sinusbot from 123.206.59.235 port 53078 Jul 26 00:53:48 ns382633 sshd\[15486\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.59.235 Jul 26 00:53:50 ns382633 sshd\[15486\]: Failed password for invalid user sinusbot from 123.206.59.235 port 53078 ssh2 Jul 26 01:08:32 ns382633 sshd\[18316\]: Invalid user gmodserver from 123.206.59.235 port 58096 Jul 26 01:08:32 ns382633 sshd\[18316\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.59.235	2020-07-26 08:06:52
5.188.62.140	attack	5.188.62.140 - - [26/Jul/2020:00:08:24 +0100] "POST /wp-login.php HTTP/1.1" 200 2098 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 5.188.62.140 - - [26/Jul/2020:00:08:25 +0100] "POST /wp-login.php HTTP/1.1" 200 2109 "-" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2226.0 Safari/537.36" 5.188.62.140 - - [26/Jul/2020:00:08:25 +0100] "POST /wp-login.php HTTP/1.1" 200 2098 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2225.0 Safari/537.36" ...	2020-07-26 08:13:12
218.92.0.215	attackspambots	Jul 26 01:39:40 v22018053744266470 sshd[28663]: Failed password for root from 218.92.0.215 port 60437 ssh2 Jul 26 01:39:49 v22018053744266470 sshd[28675]: Failed password for root from 218.92.0.215 port 62215 ssh2 ...	2020-07-26 07:44:36
93.174.93.25	attack	2020-07-26T01:47:38.518513lavrinenko.info dovecot[5494]: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.25, lip=95.216.137.45 2020-07-26T02:08:44.215673lavrinenko.info dovecot[5494]: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=93.174.93.25, lip=95.216.137.45 ...	2020-07-26 07:53:10

Recently Reported IPs

138.197.215.145	114.227.63.225	20.14.93.113	117.188.5.232
178.128.202.226	134.209.225.212	42.235.40.13	223.123.73.96
223.107.232.32	218.8.186.232	159.65.113.160	1.30.28.239
120.230.14.79	117.172.250.99	116.147.65.252	115.53.184.21
115.53.144.116	101.26.28.183	2606:4700:10::6816:3120	143.198.53.113