1.53.219.138 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
1.53.219.116	attack	2020-03-13 14:47:13 H=\(\[1.53.219.116\]\) \[1.53.219.116\]:40377 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2020-03-13 14:47:41 H=\(\[1.53.219.116\]\) \[1.53.219.116\]:64560 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2020-03-13 14:47:57 H=\(\[1.53.219.116\]\) \[1.53.219.116\]:32089 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-06-01 21:50:56
1.53.219.190	attackspam	Apr 11 15:41:04 srv01 sshd[12324]: Invalid user service from 1.53.219.190 port 57907 Apr 11 15:41:05 srv01 sshd[12324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.53.219.190 Apr 11 15:41:04 srv01 sshd[12324]: Invalid user service from 1.53.219.190 port 57907 Apr 11 15:41:07 srv01 sshd[12324]: Failed password for invalid user service from 1.53.219.190 port 57907 ssh2 Apr 11 15:41:05 srv01 sshd[12324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.53.219.190 Apr 11 15:41:04 srv01 sshd[12324]: Invalid user service from 1.53.219.190 port 57907 Apr 11 15:41:07 srv01 sshd[12324]: Failed password for invalid user service from 1.53.219.190 port 57907 ssh2 ...	2020-04-11 22:42:41
1.53.219.190	attack	Apr 11 05:52:51 nginx sshd[63306]: Invalid user office from 1.53.219.190 Apr 11 05:52:51 nginx sshd[63306]: Connection closed by 1.53.219.190 port 58008 [preauth]	2020-04-11 15:06:45

类型

评论内容

时间

1.53.219.116

attack

2020-03-13 14:47:13 H=\(\[1.53.219.116\]\) \[1.53.219.116\]:40377 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2020-03-13 14:47:41 H=\(\[1.53.219.116\]\) \[1.53.219.116\]:64560 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2020-03-13 14:47:57 H=\(\[1.53.219.116\]\) \[1.53.219.116\]:32089 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
...

2020-06-01 21:50:56

1.53.219.190

attackspam

Apr 11 15:41:04 srv01 sshd[12324]: Invalid user service from 1.53.219.190 port 57907
Apr 11 15:41:05 srv01 sshd[12324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.53.219.190
Apr 11 15:41:04 srv01 sshd[12324]: Invalid user service from 1.53.219.190 port 57907
Apr 11 15:41:07 srv01 sshd[12324]: Failed password for invalid user service from 1.53.219.190 port 57907 ssh2
Apr 11 15:41:05 srv01 sshd[12324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.53.219.190
Apr 11 15:41:04 srv01 sshd[12324]: Invalid user service from 1.53.219.190 port 57907
Apr 11 15:41:07 srv01 sshd[12324]: Failed password for invalid user service from 1.53.219.190 port 57907 ssh2
...

2020-04-11 22:42:41

1.53.219.190

attack

Apr 11 05:52:51 nginx sshd[63306]: Invalid user office from 1.53.219.190
Apr 11 05:52:51 nginx sshd[63306]: Connection closed by 1.53.219.190 port 58008 [preauth]

2020-04-11 15:06:45

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.53.219.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4629
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1.53.219.138.			IN	A

;; AUTHORITY SECTION:
.			594	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022010600 1800 900 604800 86400

;; Query time: 88 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 06 19:27:14 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

Host 138.219.53.1.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

server can't find 1.53.219.138.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
31.167.133.137	attack	Apr 7 17:52:40 NPSTNNYC01T sshd[24500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.167.133.137 Apr 7 17:52:42 NPSTNNYC01T sshd[24500]: Failed password for invalid user pvkii from 31.167.133.137 port 40932 ssh2 Apr 7 17:56:59 NPSTNNYC01T sshd[24724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.167.133.137 ...	2020-04-08 08:55:54
148.70.229.122	attack	SASL PLAIN auth failed: ruser=...	2020-04-08 09:08:44
117.54.110.86	attack	Lines containing failures of 117.54.110.86 (max 1000) Apr 7 01:27:17 HOSTNAME sshd[4295]: Invalid user alex from 117.54.110.86 port 34758 Apr 7 01:27:17 HOSTNAME sshd[4295]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.54.110.86 Apr 7 01:27:19 HOSTNAME sshd[4295]: Failed password for invalid user alex from 117.54.110.86 port 34758 ssh2 Apr 7 01:27:19 HOSTNAME sshd[4295]: Received disconnect from 117.54.110.86 port 34758:11: Bye Bye [preauth] Apr 7 01:27:19 HOSTNAME sshd[4295]: Disconnected from 117.54.110.86 port 34758 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=117.54.110.86	2020-04-08 09:13:41
167.99.87.82	attackspam	2020-04-08T02:43:59.225123librenms sshd[10266]: Invalid user ec2-user from 167.99.87.82 port 40172 2020-04-08T02:44:01.251049librenms sshd[10266]: Failed password for invalid user ec2-user from 167.99.87.82 port 40172 ssh2 2020-04-08T02:48:42.865683librenms sshd[10934]: Invalid user bng from 167.99.87.82 port 50772 ...	2020-04-08 09:04:44
106.12.36.224	attackbots	Apr 7 18:05:11 mockhub sshd[7633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.36.224 Apr 7 18:05:13 mockhub sshd[7633]: Failed password for invalid user relay from 106.12.36.224 port 54254 ssh2 ...	2020-04-08 09:17:26
106.13.53.173	attackbots	$f2bV_matches	2020-04-08 09:16:09
118.126.96.40	attackspambots	W 5701,/var/log/auth.log,-,-	2020-04-08 09:12:54
125.85.205.222	attackbots	Apr 7 23:34:48 *** sshd[31851]: User root from 125.85.205.222 not allowed because not listed in AllowUsers	2020-04-08 09:10:29
122.51.241.109	attack	$f2bV_matches	2020-04-08 09:11:26
106.12.24.193	attack	SSH Bruteforce attempt	2020-04-08 08:43:53
118.34.12.35	attackbots	2020-04-08T02:54:21.018528vps751288.ovh.net sshd\[4430\]: Invalid user postgres from 118.34.12.35 port 44322 2020-04-08T02:54:21.028711vps751288.ovh.net sshd\[4430\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.34.12.35 2020-04-08T02:54:22.771715vps751288.ovh.net sshd\[4430\]: Failed password for invalid user postgres from 118.34.12.35 port 44322 ssh2 2020-04-08T02:58:33.492508vps751288.ovh.net sshd\[4446\]: Invalid user admin from 118.34.12.35 port 54768 2020-04-08T02:58:33.502023vps751288.ovh.net sshd\[4446\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.34.12.35	2020-04-08 09:13:19
115.159.55.43	attack	Apr 8 04:01:59 gw1 sshd[17396]: Failed password for ubuntu from 115.159.55.43 port 56064 ssh2 ...	2020-04-08 09:14:13
212.64.33.206	attack	[ssh] SSH attack	2020-04-08 08:58:46
111.231.59.112	attackspambots	Apr 8 00:36:33 ns382633 sshd\[29901\]: Invalid user user from 111.231.59.112 port 52678 Apr 8 00:36:33 ns382633 sshd\[29901\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.59.112 Apr 8 00:36:35 ns382633 sshd\[29901\]: Failed password for invalid user user from 111.231.59.112 port 52678 ssh2 Apr 8 00:40:55 ns382633 sshd\[30849\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.59.112 user=root Apr 8 00:40:57 ns382633 sshd\[30849\]: Failed password for root from 111.231.59.112 port 41780 ssh2	2020-04-08 08:40:09
106.12.33.226	attack	SSH Authentication Attempts Exceeded	2020-04-08 08:43:33

最近上报的IP列表

123.238.235.131	68.140.221.113	126.208.142.236	95.94.170.196
153.243.129.177	72.171.80.222	126.250.191.183	127.74.116.150
148.187.194.222	50.152.199.124	129.133.115.113	127.125.243.130
130.129.136.152	98.134.146.178	134.119.228.110	194.180.138.65
165.234.137.209	137.155.173.216	169.255.238.185	138.199.154.166