138.97.0.104 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): unknown

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.97.0.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19163
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.97.0.104.			IN	A

;; AUTHORITY SECTION:
.			59	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 27 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:55:54 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

104.0.97.138.in-addr.arpa domain name pointer 104.0.97.138.clickturbo.com.br.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
104.0.97.138.in-addr.arpa	name = 104.0.97.138.clickturbo.com.br.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
185.147.213.13	attack	[2020-05-07 15:11:03] NOTICE[1157] chan_sip.c: Registration from '' failed for '185.147.213.13:64648' - Wrong password [2020-05-07 15:11:03] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-07T15:11:03.012-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="41",SessionID="0x7f5f10518f48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.213.13/64648",Challenge="23f889d7",ReceivedChallenge="23f889d7",ReceivedHash="0c22a1a74bbf0e3f37def0cdba42f6d1" [2020-05-07 15:11:49] NOTICE[1157] chan_sip.c: Registration from '' failed for '185.147.213.13:63747' - Wrong password [2020-05-07 15:11:49] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-07T15:11:49.851-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9863",SessionID="0x7f5f10898788",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.213.13 ...	2020-05-08 03:33:15
155.94.163.189	attackbots	Banned by Fail2Ban.	2020-05-08 03:23:23
89.248.174.193	attack	Fail2Ban Ban Triggered	2020-05-08 03:05:30
13.235.31.29	attack	May 7 20:52:01 host sshd[13845]: Invalid user nhansen from 13.235.31.29 port 52656 ...	2020-05-08 02:58:34
124.156.121.59	attackbotsspam	(sshd) Failed SSH login from 124.156.121.59 (HK/Hong Kong/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 7 19:06:41 amsweb01 sshd[23518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.121.59 user=root May 7 19:06:42 amsweb01 sshd[23518]: Failed password for root from 124.156.121.59 port 58326 ssh2 May 7 19:21:21 amsweb01 sshd[24532]: User admin from 124.156.121.59 not allowed because not listed in AllowUsers May 7 19:21:21 amsweb01 sshd[24532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.121.59 user=admin May 7 19:21:23 amsweb01 sshd[24532]: Failed password for invalid user admin from 124.156.121.59 port 48582 ssh2	2020-05-08 02:56:52
181.115.11.142	attackbotsspam	1588872055 - 05/07/2020 19:20:55 Host: 181.115.11.142/181.115.11.142 Port: 445 TCP Blocked	2020-05-08 03:22:12
129.28.181.103	attackbots	2020-05-07T10:21:03.321955-07:00 suse-nuc sshd[18442]: Invalid user erpnext from 129.28.181.103 port 51980 ...	2020-05-08 03:16:50
115.84.91.141	attackspam	IMAP	2020-05-08 03:23:46
51.91.56.130	attack	May 7 20:24:04 jane sshd[27851]: Failed password for root from 51.91.56.130 port 33757 ssh2 ...	2020-05-08 03:09:32
116.24.90.113	attack	W 31101,/var/log/nginx/access.log,-,-	2020-05-08 03:35:03
91.226.90.106	attackbotsspam	May 7 19:06:22 mxgate1 postfix/postscreen[8957]: CONNECT from [91.226.90.106]:56812 to [176.31.12.44]:25 May 7 19:06:22 mxgate1 postfix/dnsblog[8961]: addr 91.226.90.106 listed by domain bl.spamcop.net as 127.0.0.2 May 7 19:06:22 mxgate1 postfix/dnsblog[8959]: addr 91.226.90.106 listed by domain b.barracudacentral.org as 127.0.0.2 May 7 19:06:28 mxgate1 postfix/postscreen[8957]: DNSBL rank 2 for [91.226.90.106]:56812 May x@x May 7 19:06:29 mxgate1 postfix/postscreen[8957]: DISCONNECT [91.226.90.106]:56812 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=91.226.90.106	2020-05-08 03:24:28
87.251.74.171	attackbots	May 7 20:00:36 [host] kernel: [5503261.627400] [U May 7 20:10:10 [host] kernel: [5503835.685151] [U May 7 20:10:25 [host] kernel: [5503850.763414] [U May 7 20:49:04 [host] kernel: [5506169.165696] [U May 7 20:58:38 [host] kernel: [5506743.707442] [U May 7 20:59:31 [host] kernel: [5506796.680625] [U	2020-05-08 03:13:03
65.98.111.218	attack	$f2bV_matches \| Triggered by Fail2Ban at Vostok web server	2020-05-08 03:14:22
89.244.180.252	attackspambots	Lines containing failures of 89.244.180.252 May 7 13:05:39 penfold sshd[515]: Invalid user p from 89.244.180.252 port 57776 May 7 13:05:39 penfold sshd[515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.244.180.252 May 7 13:05:42 penfold sshd[515]: Failed password for invalid user p from 89.244.180.252 port 57776 ssh2 May 7 13:05:44 penfold sshd[515]: Received disconnect from 89.244.180.252 port 57776:11: Bye Bye [preauth] May 7 13:05:44 penfold sshd[515]: Disconnected from invalid user p 89.244.180.252 port 57776 [preauth] May 7 13:10:35 penfold sshd[1199]: Invalid user firewall from 89.244.180.252 port 47272 May 7 13:10:35 penfold sshd[1199]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.244.180.252 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=89.244.180.252	2020-05-08 03:26:48
49.87.114.218	attack	Unauthorized connection attempt detected from IP address 49.87.114.218 to port 23 [T]	2020-05-08 03:17:16

最近上报的IP列表

138.94.73.14	138.97.0.106	118.190.173.162	138.97.0.102
138.97.0.11	138.97.0.112	138.97.0.116	138.97.0.109
138.97.0.119	138.97.0.114	118.190.174.14	138.97.0.13
138.97.0.126	138.97.0.118	138.97.0.122	138.97.0.124
138.97.0.132	118.190.18.78	138.97.0.139	138.97.0.136