103.148.59.20 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hong Kong

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.148.59.20
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11597
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.148.59.20.			IN	A

;; AUTHORITY SECTION:
.			503	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030700 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 07 17:51:17 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

Host 20.59.148.103.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 20.59.148.103.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
51.75.246.176	attackbotsspam	Failed password for invalid user nginx from 51.75.246.176 port 57818 ssh2	2020-10-08 19:56:56
141.98.216.154	attackspambots	[2020-10-08 07:50:53] NOTICE[1182] chan_sip.c: Registration from '' failed for '141.98.216.154:60103' - Wrong password [2020-10-08 07:50:53] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-08T07:50:53.708-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8008",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/141.98.216.154/60103",Challenge="5c7ee987",ReceivedChallenge="5c7ee987",ReceivedHash="2c8adfcd55124403d7d2412f0fa847ba" [2020-10-08 07:52:55] NOTICE[1182] chan_sip.c: Registration from '' failed for '141.98.216.154:59724' - Wrong password [2020-10-08 07:52:55] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-08T07:52:55.139-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8009",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/141.98.216 ...	2020-10-08 20:19:50
124.235.118.14	attack	TCP (SYN) 124.235.118.14:50612 -> port 6379, len 44	2020-10-08 20:00:21
183.82.106.137	attack	2020-10-07T20:47:37Z - RDP login failed multiple times. (183.82.106.137)	2020-10-08 20:10:43
109.52.241.154	attack	SMB Server BruteForce Attack	2020-10-08 19:47:00
118.173.63.64	attackspambots	1602103648 - 10/07/2020 22:47:28 Host: 118.173.63.64/118.173.63.64 Port: 445 TCP Blocked ...	2020-10-08 20:21:49
85.201.33.158	attackbotsspam	Oct 7 16:26:27 r.ca sshd[28265]: Failed password for invalid user pi from 85.201.33.158 port 54426 ssh2	2020-10-08 19:46:07
187.54.67.162	attack	SSH Honeypot -> SSH Bruteforce / Login	2020-10-08 20:07:57
66.207.69.154	attack	66.207.69.154 (US/United States/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 8 05:35:04 jbs1 sshd[10568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.73.128.148 user=root Oct 8 05:35:06 jbs1 sshd[10568]: Failed password for root from 200.73.128.148 port 40806 ssh2 Oct 8 05:33:06 jbs1 sshd[9417]: Failed password for root from 150.158.186.50 port 53494 ssh2 Oct 8 05:33:04 jbs1 sshd[9417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.158.186.50 user=root Oct 8 05:33:54 jbs1 sshd[9935]: Failed password for root from 66.207.69.154 port 42900 ssh2 Oct 8 05:36:30 jbs1 sshd[11473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.43.46.88 user=root IP Addresses Blocked: 200.73.128.148 (AR/Argentina/-) 150.158.186.50 (CN/China/-)	2020-10-08 20:12:23
93.177.73.234	attackspam	Probing for vulnerable code /blog/wp-login.php	2020-10-08 19:48:26
123.5.51.105	attackspam	Lines containing failures of 123.5.51.105 Oct 7 04:44:34 MAKserver05 sshd[24135]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.5.51.105 user=r.r Oct 7 04:44:36 MAKserver05 sshd[24135]: Failed password for r.r from 123.5.51.105 port 55950 ssh2 Oct 7 04:44:38 MAKserver05 sshd[24135]: Received disconnect from 123.5.51.105 port 55950:11: Bye Bye [preauth] Oct 7 04:44:38 MAKserver05 sshd[24135]: Disconnected from authenticating user r.r 123.5.51.105 port 55950 [preauth] Oct 7 04:48:56 MAKserver05 sshd[24318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.5.51.105 user=r.r ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=123.5.51.105	2020-10-08 20:17:19
114.143.158.186	attack	TCP (SYN) 114.143.158.186:61066 -> port 445, len 52	2020-10-08 20:09:45
192.241.238.232	attack	SMB Server BruteForce Attack	2020-10-08 19:54:28
69.194.11.249	attackbots	(sshd) Failed SSH login from 69.194.11.249 (US/United States/69.194.11.249.16clouds.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 8 05:26:03 server sshd[16449]: Failed password for root from 69.194.11.249 port 43622 ssh2 Oct 8 05:33:00 server sshd[18176]: Failed password for root from 69.194.11.249 port 49932 ssh2 Oct 8 05:36:17 server sshd[19126]: Failed password for root from 69.194.11.249 port 41780 ssh2 Oct 8 05:39:22 server sshd[19798]: Failed password for root from 69.194.11.249 port 33792 ssh2 Oct 8 05:42:11 server sshd[20480]: Failed password for root from 69.194.11.249 port 53922 ssh2	2020-10-08 20:07:41
112.85.42.188	attackspambots	2020-10-08 06:37:50.627517-0500 localhost sshd[57868]: Failed password for root from 112.85.42.188 port 23516 ssh2	2020-10-08 20:12:06

最近上报的IP列表

103.148.52.243	103.149.104.29	103.149.104.30	103.149.116.19
103.149.12.55	103.149.159.2	103.149.160.168	103.15.235.108
103.15.62.88	103.15.62.90	103.15.62.92	103.150.188.130
103.150.213.248	103.150.254.69	103.150.5.171	103.150.61.200
103.151.120.33	103.151.122.121	103.151.122.84	103.151.124.142