138.36.107.54 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Brazil

运营商(isp): NexFibra Telecomunicacoes Ltda

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Unauthorized connection attempt from IP address 138.36.107.54 on Port 445(SMB)	2019-11-04 06:39:28

相同子网IP讨论:

IP	类型	评论内容	时间
138.36.107.73	attackspam	2019-08-24 05:41:19,107 fail2ban.actions [878]: NOTICE [sshd] Ban 138.36.107.73 2019-08-24 08:46:36,097 fail2ban.actions [878]: NOTICE [sshd] Ban 138.36.107.73 2019-08-24 11:54:27,195 fail2ban.actions [878]: NOTICE [sshd] Ban 138.36.107.73 ...	2019-10-03 17:29:16
138.36.107.73	attackspambots	Sep 2 10:04:58 web1 sshd\[30102\]: Invalid user user from 138.36.107.73 Sep 2 10:04:58 web1 sshd\[30102\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.36.107.73 Sep 2 10:05:01 web1 sshd\[30102\]: Failed password for invalid user user from 138.36.107.73 port 52571 ssh2 Sep 2 10:09:41 web1 sshd\[30721\]: Invalid user c\&a from 138.36.107.73 Sep 2 10:09:41 web1 sshd\[30721\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.36.107.73	2019-09-03 04:11:51
138.36.107.73	attackbots	Aug 28 09:34:28 plex sshd[14258]: Invalid user tommy from 138.36.107.73 port 46938	2019-08-28 15:40:07
138.36.107.73	attackbots	Aug 20 22:12:35 hcbb sshd\[20656\]: Invalid user silvio from 138.36.107.73 Aug 20 22:12:35 hcbb sshd\[20656\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.36.107.73 Aug 20 22:12:37 hcbb sshd\[20656\]: Failed password for invalid user silvio from 138.36.107.73 port 45306 ssh2 Aug 20 22:17:57 hcbb sshd\[21199\]: Invalid user lynn from 138.36.107.73 Aug 20 22:17:57 hcbb sshd\[21199\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.36.107.73	2019-08-21 16:35:24
138.36.107.73	attackspambots	Aug 19 16:01:09 www2 sshd\[42725\]: Invalid user night from 138.36.107.73Aug 19 16:01:11 www2 sshd\[42725\]: Failed password for invalid user night from 138.36.107.73 port 54668 ssh2Aug 19 16:06:14 www2 sshd\[43294\]: Invalid user tools from 138.36.107.73 ...	2019-08-19 21:11:04

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.36.107.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 12892
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.36.107.54.			IN	A

;; AUTHORITY SECTION:
.			247	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110301 1800 900 604800 86400

;; Query time: 110 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Nov 04 06:39:25 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

54.107.36.138.in-addr.arpa domain name pointer static-138.36.107.54.nexfibra.com.br.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
54.107.36.138.in-addr.arpa	name = static-138.36.107.54.nexfibra.com.br.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
40.124.32.28	attackspambots	MICROSOFT CLOUDVISIONCORP.COM 40.124.32.28 Home Warranty Special From: Home Warranty Special Sent: Tuesday, August 4, 2020 12:08 PM Subject: Never Pay For Covered Home Repairs Again in 2020!	2020-08-05 04:14:57
37.49.224.251	attack	22/tcp 22/tcp [2020-08-04]2pkt	2020-08-05 04:32:37
122.226.203.94	attackspambots	Unauthorized connection attempt from IP address 122.226.203.94 on port 3389	2020-08-05 04:26:05
151.252.105.132	attackspam	Aug 4 22:14:09 piServer sshd[24833]: Failed password for root from 151.252.105.132 port 33306 ssh2 Aug 4 22:18:12 piServer sshd[25259]: Failed password for root from 151.252.105.132 port 45994 ssh2 ...	2020-08-05 04:33:21
114.67.104.59	attackbots	Aug 4 21:12:16 roki-contabo sshd\[1604\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.104.59 user=root Aug 4 21:12:18 roki-contabo sshd\[1604\]: Failed password for root from 114.67.104.59 port 50028 ssh2 Aug 4 21:18:54 roki-contabo sshd\[1875\]: Invalid user 224 from 114.67.104.59 Aug 4 21:18:54 roki-contabo sshd\[1875\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.104.59 Aug 4 21:18:55 roki-contabo sshd\[1875\]: Failed password for invalid user 224 from 114.67.104.59 port 48334 ssh2 ...	2020-08-05 04:35:13
95.47.172.46	attack	Port probing on unauthorized port 445	2020-08-05 04:16:33
222.186.180.147	attack	Aug 4 22:20:43 nas sshd[27081]: Failed password for root from 222.186.180.147 port 5150 ssh2 Aug 4 22:20:46 nas sshd[27081]: Failed password for root from 222.186.180.147 port 5150 ssh2 Aug 4 22:20:51 nas sshd[27081]: Failed password for root from 222.186.180.147 port 5150 ssh2 Aug 4 22:20:56 nas sshd[27081]: Failed password for root from 222.186.180.147 port 5150 ssh2 ...	2020-08-05 04:22:21
181.53.251.199	attackspambots	2020-08-04T19:51:28.603090ns386461 sshd\[4646\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.53.251.199 user=root 2020-08-04T19:51:30.684986ns386461 sshd\[4646\]: Failed password for root from 181.53.251.199 port 36330 ssh2 2020-08-04T19:57:55.437339ns386461 sshd\[10440\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.53.251.199 user=root 2020-08-04T19:57:57.649246ns386461 sshd\[10440\]: Failed password for root from 181.53.251.199 port 43248 ssh2 2020-08-04T20:02:15.307473ns386461 sshd\[14155\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.53.251.199 user=root ...	2020-08-05 04:40:53
117.103.2.114	attackbotsspam	Aug 4 21:49:49 piServer sshd[22302]: Failed password for root from 117.103.2.114 port 55742 ssh2 Aug 4 21:52:58 piServer sshd[22601]: Failed password for root from 117.103.2.114 port 46574 ssh2 ...	2020-08-05 04:12:29
93.243.224.73	attackspam	2020-08-04T14:41:10.357383linuxbox-skyline sshd[74751]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.243.224.73 user=root 2020-08-04T14:41:12.252708linuxbox-skyline sshd[74751]: Failed password for root from 93.243.224.73 port 50778 ssh2 ...	2020-08-05 04:44:21
36.111.182.37	attack	Port scan: Attack repeated for 24 hours	2020-08-05 04:20:42
218.92.0.172	attackspambots	Aug 4 22:20:14 marvibiene sshd[9035]: Failed password for root from 218.92.0.172 port 53382 ssh2 Aug 4 22:20:19 marvibiene sshd[9035]: Failed password for root from 218.92.0.172 port 53382 ssh2	2020-08-05 04:28:29
202.154.184.148	attackbotsspam	Aug 4 18:46:37 django-0 sshd[25171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=fast-internet-202-154-184-148.solnet.net.id user=root Aug 4 18:46:39 django-0 sshd[25171]: Failed password for root from 202.154.184.148 port 43944 ssh2 ...	2020-08-05 04:13:49
175.24.42.244	attackspam	Aug 5 01:36:23 gw1 sshd[28788]: Failed password for root from 175.24.42.244 port 46026 ssh2 ...	2020-08-05 04:43:09
218.92.0.221	attack	Aug 5 03:09:21 itv-usvr-02 sshd[3997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.221 user=root	2020-08-05 04:11:55

最近上报的IP列表

123.232.194.67	20.46.172.150	83.27.227.132	105.221.243.210
86.162.87.20	20.239.56.148	99.228.158.67	109.13.191.2
124.248.217.236	11.26.83.242	78.25.170.232	5.148.235.255
8.207.175.48	63.123.152.176	169.211.163.15	188.211.54.187
92.59.212.56	132.166.169.124	185.137.89.149	157.249.160.152