5.3.112.104 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Russian Federation

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 5.3.112.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10679
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;5.3.112.104.			IN	A

;; AUTHORITY SECTION:
.			310	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 00:25:46 CST 2022
;; MSG SIZE  rcvd: 104

Host info

104.112.3.5.in-addr.arpa domain name pointer 5x3x112x104.dynamic.tmn.ertelecom.ru.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
104.112.3.5.in-addr.arpa	name = 5x3x112x104.dynamic.tmn.ertelecom.ru.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
189.2.141.83	attackbots	Jul 18 22:18:45 game-panel sshd[15915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.2.141.83 Jul 18 22:18:47 game-panel sshd[15915]: Failed password for invalid user cyrus from 189.2.141.83 port 52440 ssh2 Jul 18 22:23:37 game-panel sshd[16163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.2.141.83	2020-07-19 07:51:35
175.18.152.47	attackbots	Unauthorised access (Jul 18) SRC=175.18.152.47 LEN=40 TTL=46 ID=21775 TCP DPT=8080 WINDOW=19155 SYN	2020-07-19 07:54:14
164.132.107.245	attackspam	Invalid user nmap from 164.132.107.245 port 38008	2020-07-19 07:47:51
106.12.207.92	attackbotsspam	Invalid user lovey from 106.12.207.92 port 44702	2020-07-19 07:31:32
144.217.12.194	attackbots	2020-07-19T01:08:43.306890+02:00 sshd[13681]: Failed password for invalid user customer1 from 144.217.12.194 port 57784 ssh2	2020-07-19 07:43:40
222.186.180.6	attackspambots	Jul 19 01:49:22 vpn01 sshd[15416]: Failed password for root from 222.186.180.6 port 49888 ssh2 Jul 19 01:49:25 vpn01 sshd[15416]: Failed password for root from 222.186.180.6 port 49888 ssh2 ...	2020-07-19 07:49:50
78.128.113.114	attackbots	Exim brute force attack (multiple auth failures).	2020-07-19 07:28:41
186.4.148.195	attack	Jul 18 22:10:21 eventyay sshd[6184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.4.148.195 Jul 18 22:10:23 eventyay sshd[6184]: Failed password for invalid user snr from 186.4.148.195 port 6622 ssh2 Jul 18 22:12:07 eventyay sshd[6313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.4.148.195 ...	2020-07-19 07:38:55
122.165.149.75	attack	Jul 18 19:07:19 ws22vmsma01 sshd[63622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.165.149.75 Jul 18 19:07:21 ws22vmsma01 sshd[63622]: Failed password for invalid user lijin from 122.165.149.75 port 46564 ssh2 ...	2020-07-19 07:26:06
116.31.140.37	attackbots	[Sun Jul 19 02:48:04.926186 2020] [:error] [pid 22715:tid 140632588613376] [client 116.31.140.37:58965] [client 116.31.140.37] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_http_versions}" against "REQUEST_PROTOCOL" required. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "972"] [id "920430"] [msg "HTTP protocol version is not allowed by policy"] [data "HTTP/1.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/POLICY/PROTOCOL_NOT_ALLOWED"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/"] [unique_id "XxNR9Fcr71isoJ1NnSUOZgAAAcI"] ...	2020-07-19 07:52:39
212.83.132.45	attackbots	[2020-07-18 19:54:27] NOTICE[1277] chan_sip.c: Registration from '"163"' failed for '212.83.132.45:9328' - Wrong password [2020-07-18 19:54:27] SECURITY[1295] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-18T19:54:27.858-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="163",SessionID="0x7f1754188e58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.132.45/9328",Challenge="6cd529e8",ReceivedChallenge="6cd529e8",ReceivedHash="a15ac78fd59bd73fcf061f0a1986f484" [2020-07-18 19:55:07] NOTICE[1277] chan_sip.c: Registration from '"161"' failed for '212.83.132.45:9197' - Wrong password [2020-07-18 19:55:07] SECURITY[1295] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-18T19:55:07.253-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="161",SessionID="0x7f1754378da8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.132 ...	2020-07-19 08:04:22
139.155.22.165	attackspam	malicious Brute-Force reported by https://www.patrick-binder.de ...	2020-07-19 07:25:49
103.217.255.8	attackbotsspam	Invalid user cts from 103.217.255.8 port 6628	2020-07-19 07:55:31
202.51.74.23	attackspam	Invalid user cristina from 202.51.74.23 port 52491	2020-07-19 07:34:10
49.233.173.136	attack	Repeated brute force against a port	2020-07-19 07:53:28

Recently Reported IPs

111.35.28.44	178.90.233.212	185.151.119.143	59.126.116.51
45.66.209.18	172.107.94.154	91.221.218.72	101.204.2.192
115.61.164.193	103.135.169.234	211.209.25.53	103.93.178.228
209.17.115.113	111.92.73.208	103.136.82.252	182.35.110.227
72.223.168.86	5.202.144.156	14.102.44.1	177.249.168.255