138.75.103.53 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Singapore

运营商(isp): M1 Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Aug 3 19:26:30 roadrisk sshd[32564]: Failed password for invalid user admin from 138.75.103.53 port 38317 ssh2 Aug 3 19:26:32 roadrisk sshd[32564]: Failed password for invalid user admin from 138.75.103.53 port 38317 ssh2 Aug 3 19:26:34 roadrisk sshd[32564]: Failed password for invalid user admin from 138.75.103.53 port 38317 ssh2 Aug 3 19:26:36 roadrisk sshd[32564]: Failed password for invalid user admin from 138.75.103.53 port 38317 ssh2 Aug 3 19:26:39 roadrisk sshd[32564]: Failed password for invalid user admin from 138.75.103.53 port 38317 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=138.75.103.53	2019-08-04 06:49:37

类型

评论内容

时间

attack

Aug  3 19:26:30 roadrisk sshd[32564]: Failed password for invalid user admin from 138.75.103.53 port 38317 ssh2
Aug  3 19:26:32 roadrisk sshd[32564]: Failed password for invalid user admin from 138.75.103.53 port 38317 ssh2
Aug  3 19:26:34 roadrisk sshd[32564]: Failed password for invalid user admin from 138.75.103.53 port 38317 ssh2
Aug  3 19:26:36 roadrisk sshd[32564]: Failed password for invalid user admin from 138.75.103.53 port 38317 ssh2
Aug  3 19:26:39 roadrisk sshd[32564]: Failed password for invalid user admin from 138.75.103.53 port 38317 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=138.75.103.53

2019-08-04 06:49:37

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.75.103.53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13120
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.75.103.53.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080301 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Aug 04 06:49:31 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 53.103.75.138.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 53.103.75.138.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
165.84.137.129	attack	Caught in portsentry honeypot	2019-08-27 13:26:05
132.145.201.163	attackbotsspam	Aug 27 06:44:36 icinga sshd[31249]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.145.201.163 Aug 27 06:44:38 icinga sshd[31249]: Failed password for invalid user fg from 132.145.201.163 port 47738 ssh2 ...	2019-08-27 13:48:54
83.143.246.2	attackbotsspam	Aug 26 13:34:59 auw2 sshd\[1167\]: Invalid user no from 83.143.246.2 Aug 26 13:34:59 auw2 sshd\[1167\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.143.246.2 Aug 26 13:35:01 auw2 sshd\[1167\]: Failed password for invalid user no from 83.143.246.2 port 22558 ssh2 Aug 26 13:35:04 auw2 sshd\[1185\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.143.246.2 user=root Aug 26 13:35:06 auw2 sshd\[1185\]: Failed password for root from 83.143.246.2 port 26334 ssh2	2019-08-27 13:50:56
80.33.245.178	attackbotsspam	Invalid user id from 80.33.245.178 port 52678	2019-08-27 13:26:40
182.150.58.163	attackbotsspam	Unauthorised access (Aug 27) SRC=182.150.58.163 LEN=40 TTL=50 ID=25793 TCP DPT=8080 WINDOW=37360 SYN	2019-08-27 13:08:27
149.126.20.185	attackbotsspam	Automatic report - Port Scan Attack	2019-08-27 13:22:03
109.224.37.85	attackbots	2019-08-26 18:35:45 H=(losipallets.it) [109.224.37.85]:55183 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-08-26 18:35:46 H=(losipallets.it) [109.224.37.85]:55183 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-08-26 18:35:46 H=(losipallets.it) [109.224.37.85]:55183 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS) ...	2019-08-27 13:19:24
68.183.1.175	attackspambots	Aug 27 07:12:47 * sshd[25660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.1.175 Aug 27 07:12:49 * sshd[25660]: Failed password for invalid user carrie from 68.183.1.175 port 41258 ssh2	2019-08-27 13:47:40
159.65.8.104	attackspambots	Aug 27 04:35:43 marvibiene sshd[23697]: Invalid user QNUDECPU from 159.65.8.104 port 37374 Aug 27 04:35:43 marvibiene sshd[23697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.8.104 Aug 27 04:35:43 marvibiene sshd[23697]: Invalid user QNUDECPU from 159.65.8.104 port 37374 Aug 27 04:35:46 marvibiene sshd[23697]: Failed password for invalid user QNUDECPU from 159.65.8.104 port 37374 ssh2 ...	2019-08-27 13:50:18
193.56.28.236	attackbots	$f2bV_matches	2019-08-27 14:03:12
66.117.9.138	attack	\[2019-08-27 01:02:24\] SECURITY\[1837\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-27T01:02:24.464-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00441519470549",SessionID="0x7f7b301c17c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/66.117.9.138/52023",ACLName="no_extension_match" \[2019-08-27 01:03:51\] SECURITY\[1837\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-27T01:03:51.692-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="000441519470549",SessionID="0x7f7b302cefa8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/66.117.9.138/57223",ACLName="no_extension_match" \[2019-08-27 01:05:19\] SECURITY\[1837\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-27T01:05:19.746-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="900441519470549",SessionID="0x7f7b302cefa8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/66.117.9.138/50386",ACLName="no_extensi	2019-08-27 13:10:02
184.161.148.3	attackspam	Aug 27 07:02:39 minden010 sshd[29056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.161.148.3 Aug 27 07:02:41 minden010 sshd[29056]: Failed password for invalid user org from 184.161.148.3 port 58135 ssh2 Aug 27 07:06:51 minden010 sshd[30643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.161.148.3 ...	2019-08-27 13:14:48
51.38.150.109	attack	Aug 27 05:06:54 MK-Soft-VM5 sshd\[3250\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.150.109 user=sshd Aug 27 05:06:56 MK-Soft-VM5 sshd\[3250\]: Failed password for sshd from 51.38.150.109 port 33846 ssh2 Aug 27 05:06:59 MK-Soft-VM5 sshd\[3250\]: Failed password for sshd from 51.38.150.109 port 33846 ssh2 ...	2019-08-27 13:22:30
154.73.22.107	attackbotsspam	Aug 26 19:13:09 hiderm sshd\[4452\]: Invalid user emc from 154.73.22.107 Aug 26 19:13:09 hiderm sshd\[4452\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.73.22.107 Aug 26 19:13:11 hiderm sshd\[4452\]: Failed password for invalid user emc from 154.73.22.107 port 38098 ssh2 Aug 26 19:18:28 hiderm sshd\[4899\]: Invalid user victor from 154.73.22.107 Aug 26 19:18:28 hiderm sshd\[4899\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.73.22.107	2019-08-27 13:27:23
51.158.74.14	attack	Aug 27 02:37:32 root sshd[7222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.74.14 Aug 27 02:37:34 root sshd[7222]: Failed password for invalid user jules from 51.158.74.14 port 54422 ssh2 Aug 27 02:41:39 root sshd[7310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.74.14 ...	2019-08-27 13:48:36

最近上报的IP列表

114.24.119.92	119.100.10.0	1.52.177.150	187.75.167.36
177.69.237.49	77.42.121.17	85.105.188.215	154.195.117.86
128.14.140.138	84.56.92.89	185.49.97.169	78.156.127.212
54.36.150.181	114.237.188.18	1.53.106.168	177.188.74.12
188.93.232.152	39.44.199.45	116.230.194.122	45.166.99.132