138.0.7.150 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Brazil

运营商(isp): LRF Conections Servicos Ltda ME

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Apr 14 05:45:22 host sshd\[19124\]: Invalid user admin from 138.0.7.150 port 49020	2020-04-14 19:52:06

相同子网IP讨论:

IP	类型	评论内容	时间
138.0.7.143	attack	Unauthorized IMAP connection attempt	2020-05-17 03:06:35
138.0.7.194	attackspam	Invalid user admin from 138.0.7.194 port 54451	2020-04-21 01:42:46
138.0.7.218	attackspambots	Invalid user admin from 138.0.7.218 port 38529	2020-04-19 02:04:09
138.0.7.90	attack	$f2bV_matches	2020-02-17 13:05:14
138.0.7.121	attackbots	Brute forcing email accounts	2020-01-26 14:48:03
138.0.7.214	attack	Invalid user admin from 138.0.7.214 port 53649	2020-01-21 23:18:52
138.0.7.129	attackbots	Invalid user admin from 138.0.7.129 port 40582	2020-01-19 03:18:08
138.0.7.228	attack	Unauthorized connection attempt detected from IP address 138.0.7.228 to port 22 [J]	2020-01-18 16:49:05
138.0.7.129	attackspam	Invalid user admin from 138.0.7.129 port 40582	2020-01-18 05:11:30
138.0.7.109	attack	Dec 24 15:35:03 localhost sshd\[1728\]: Invalid user admin from 138.0.7.109 port 38992 Dec 24 15:35:03 localhost sshd\[1728\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.7.109 Dec 24 15:35:05 localhost sshd\[1728\]: Failed password for invalid user admin from 138.0.7.109 port 38992 ssh2 ...	2019-12-25 00:50:23
138.0.7.226	attackspam	Oct 27 05:54:12 sauna sshd[16909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.7.226 Oct 27 05:54:14 sauna sshd[16909]: Failed password for invalid user admin from 138.0.7.226 port 50611 ssh2 ...	2019-10-27 14:43:21
138.0.7.133	attack	Invalid user admin from 138.0.7.133 port 38858	2019-10-11 21:13:11
138.0.7.205	attackspam	Invalid user admin from 138.0.7.205 port 50005	2019-10-11 21:12:56
138.0.7.229	attack	Oct 1 23:26:58 f201 sshd[13257]: Connection closed by 138.0.7.229 [preauth] Oct 2 02:26:18 f201 sshd[11336]: Connection closed by 138.0.7.229 [preauth] Oct 2 05:04:31 f201 sshd[18843]: Connection closed by 138.0.7.229 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=138.0.7.229	2019-10-02 15:57:24
138.0.73.253	attackbots	09/25/2019-08:19:47.519567 138.0.73.253 Protocol: 1 GPL ICMP_INFO PING *NIX	2019-09-26 00:18:09

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.0.7.150
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16159
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.0.7.150.			IN	A

;; AUTHORITY SECTION:
.			433	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020041400 1800 900 604800 86400

;; Query time: 231 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 14 19:52:02 CST 2020
;; MSG SIZE  rcvd: 115

HOST信息:

150.7.0.138.in-addr.arpa domain name pointer 138-0-7-150.static.lrfconections.com.br.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
150.7.0.138.in-addr.arpa	name = 138-0-7-150.static.lrfconections.com.br.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
106.13.206.247	attackbots	Unauthorized connection attempt detected from IP address 106.13.206.247 to port 2220 [J]	2020-02-03 19:18:42
116.12.55.66	attack	Feb 3 12:06:37 v22018076622670303 sshd\[902\]: Invalid user postgres from 116.12.55.66 port 54062 Feb 3 12:06:37 v22018076622670303 sshd\[902\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.12.55.66 Feb 3 12:06:39 v22018076622670303 sshd\[902\]: Failed password for invalid user postgres from 116.12.55.66 port 54062 ssh2 ...	2020-02-03 19:14:33
183.171.93.123	attack	1580722377 - 02/03/2020 10:32:57 Host: 183.171.93.123/183.171.93.123 Port: 445 TCP Blocked	2020-02-03 18:58:04
14.231.59.132	attack	Unauthorized connection attempt from IP address 14.231.59.132 on Port 445(SMB)	2020-02-03 18:52:13
125.33.95.53	attackspambots	Feb 3 05:30:30 h2040555 sshd[17138]: Invalid user build from 125.33.95.53 Feb 3 05:30:30 h2040555 sshd[17138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.33.95.53 Feb 3 05:30:33 h2040555 sshd[17138]: Failed password for invalid user build from 125.33.95.53 port 17573 ssh2 Feb 3 05:30:33 h2040555 sshd[17138]: Received disconnect from 125.33.95.53: 11: Bye Bye [preauth] Feb 3 05:32:21 h2040555 sshd[17169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.33.95.53 user=r.r Feb 3 05:32:23 h2040555 sshd[17169]: Failed password for r.r from 125.33.95.53 port 19897 ssh2 Feb 3 05:32:23 h2040555 sshd[17169]: Received disconnect from 125.33.95.53: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=125.33.95.53	2020-02-03 19:17:49
103.82.241.67	attackbots	Feb 3 01:04:02 web9 sshd\[13296\]: Invalid user ronalter from 103.82.241.67 Feb 3 01:04:02 web9 sshd\[13296\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.82.241.67 Feb 3 01:04:04 web9 sshd\[13296\]: Failed password for invalid user ronalter from 103.82.241.67 port 34822 ssh2 Feb 3 01:07:18 web9 sshd\[13540\]: Invalid user cherie from 103.82.241.67 Feb 3 01:07:18 web9 sshd\[13540\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.82.241.67	2020-02-03 19:12:29
62.11.95.108	attackspambots	Feb 3 05:23:50 iago sshd[474]: Invalid user vyatta from 62.11.95.108 Feb 3 05:23:50 iago sshd[474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62-11-95-108.dialup.tiscali.hostname ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=62.11.95.108	2020-02-03 19:27:52
112.140.186.122	attackspambots	Feb 3 06:14:18 *** sshd[26949]: Invalid user vyatta from 112.140.186.122	2020-02-03 19:18:10
171.214.139.7	attack	Unauthorized connection attempt from IP address 171.214.139.7 on Port 445(SMB)	2020-02-03 19:19:53
202.137.154.158	attackspam	From: Camryn (Security Alert. Your account was compromised. Password must be changed.) I am a hacker who has access to your operating system. I also have full access to your account.	2020-02-03 19:12:05
61.7.146.46	attack	Unauthorized connection attempt from IP address 61.7.146.46 on Port 445(SMB)	2020-02-03 19:11:43
106.13.6.116	attack	...	2020-02-03 19:26:22
96.31.67.11	attackspam	Unauthorized connection attempt from IP address 96.31.67.11 on Port 445(SMB)	2020-02-03 19:02:04
125.224.20.141	attackbots	Unauthorised access (Feb 3) SRC=125.224.20.141 LEN=40 TTL=44 ID=60015 TCP DPT=23 WINDOW=18752 SYN Unauthorised access (Feb 3) SRC=125.224.20.141 LEN=40 TTL=44 ID=60015 TCP DPT=23 WINDOW=18752 SYN Unauthorised access (Feb 3) SRC=125.224.20.141 LEN=40 TTL=44 ID=60015 TCP DPT=23 WINDOW=18752 SYN	2020-02-03 18:57:15
163.172.16.54	attack	2020-02-02 22:46:48 SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=163-172-16-54.rev.poneytelecom.eu [163.172.16.54]:62610 I=[192.147.25.65]:25 input="CONNECT 45.33.35.141:80 HTTP/1.0" 2020-02-02 22:46:50 SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=163-172-16-54.rev.poneytelecom.eu [163.172.16.54]:53438 I=[192.147.25.65]:25 input="\004\001" 2020-02-02 22:46:52 SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=163-172-16-54.rev.poneytelecom.eu [163.172.16.54]:53311 I=[192.147.25.65]:25 input="\005\001" ...	2020-02-03 19:30:41

最近上报的IP列表

77.39.9.4	191.8.187.253	103.145.34.2	106.198.253.12
89.144.19.251	14.233.18.119	45.148.10.155	179.56.146.144
129.204.74.158	171.237.82.122	182.75.248.194	123.49.38.140
85.105.132.70	165.22.115.119	41.40.129.73	117.5.176.141
51.39.95.0	190.73.189.212	111.225.44.195	49.149.75.49