103.108.75.139

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): India

运营商(isp): Modi Infonet Digital Network Private Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Attempt to attack host OS, exploiting network vulnerabilities, on 25-11-2019 06:20:24.	2019-11-25 21:40:31

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.108.75.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30810
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.108.75.139.			IN	A

;; AUTHORITY SECTION:
.			560	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112500 1800 900 604800 86400

;; Query time: 109 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Nov 25 21:40:27 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 139.75.108.103.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.75.108.103.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
194.26.25.113	attack	Jun 6 13:33:01 debian-2gb-nbg1-2 kernel: \[13701930.633981\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=194.26.25.113 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=46493 PROTO=TCP SPT=44473 DPT=9921 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-06 19:55:54
177.136.163.84	attack	Brute force attempt	2020-06-06 20:01:20
45.118.151.85	attackspambots	Jun 6 09:49:19 sso sshd[14763]: Failed password for root from 45.118.151.85 port 55026 ssh2 ...	2020-06-06 20:02:05
82.205.8.184	attack	[2020-06-06 06:35:44] NOTICE[1288] chan_sip.c: Registration from '' failed for '82.205.8.184:10067' - Wrong password [2020-06-06 06:35:44] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-06T06:35:44.289-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="password2002",SessionID="0x7f4d74136238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/82.205.8.184/10067",Challenge="5c08dedc",ReceivedChallenge="5c08dedc",ReceivedHash="69b2478a67c3779055d754ebd17b04f9" [2020-06-06 06:37:39] NOTICE[1288] chan_sip.c: Registration from '' failed for '82.205.8.184:27560' - Wrong password [2020-06-06 06:37:39] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-06T06:37:39.315-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="secret2002",SessionID="0x7f4d7403c148",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddres ...	2020-06-06 19:53:23
106.52.146.124	attack	SSH bruteforce	2020-06-06 20:06:48
206.189.235.233	attackbotsspam	$f2bV_matches	2020-06-06 20:21:30
14.178.181.163	attack	1591416764 - 06/06/2020 06:12:44 Host: 14.178.181.163/14.178.181.163 Port: 445 TCP Blocked	2020-06-06 19:58:16
160.153.156.130	attackbots	/beta/wp-includes/wlwmanifest.xml	2020-06-06 19:59:23
106.12.69.53	attack	Jun 6 07:40:07 mx sshd[10539]: Failed password for root from 106.12.69.53 port 59380 ssh2	2020-06-06 20:13:56
157.245.45.99	attackspambots	Unauthorized connection attempt detected from IP address 157.245.45.99 to port 11356 [T]	2020-06-06 20:10:56
101.227.34.23	attack	$f2bV_matches	2020-06-06 20:25:06
185.67.33.243	attackspambots	Jun 6 07:12:07 debian kernel: [319288.436625] [UFW BLOCK] IN=eth0 OUT= MAC=52:54:00:be:e4:65:08:e8:4f:6e:48:0c:08:00 SRC=185.67.33.243 DST=89.252.131.35 LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=3130 DPT=21 WINDOW=65535 RES=0x00 SYN URGP=0	2020-06-06 20:22:18
222.87.0.79	attackspambots	Jun 6 01:29:11 ny01 sshd[846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.87.0.79 Jun 6 01:29:12 ny01 sshd[846]: Failed password for invalid user P@ssw0rdp123\r from 222.87.0.79 port 41353 ssh2 Jun 6 01:31:00 ny01 sshd[1144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.87.0.79	2020-06-06 19:51:45
13.90.201.25	attack	Jun 6 14:09:53 buvik sshd[19141]: Failed password for root from 13.90.201.25 port 50004 ssh2 Jun 6 14:13:28 buvik sshd[19700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.90.201.25 user=root Jun 6 14:13:30 buvik sshd[19700]: Failed password for root from 13.90.201.25 port 55096 ssh2 ...	2020-06-06 20:17:09
179.98.109.232	attackspam	5x Failed Password	2020-06-06 20:13:33

最近上报的IP列表

186.221.155.253	45.146.122.24	78.16.229.198	14.143.131.186
176.109.226.79	167.99.247.13	52.177.119.43	159.138.128.53
78.189.217.3	46.138.204.247	95.208.235.151	246.47.22.18
94.253.33.131	48.197.88.150	138.197.221.98	60.188.62.226
37.190.240.186	190.28.95.94	103.25.46.230	103.39.9.56