154.0.138.14 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Uganda

运营商(isp): ROKE Telkom Uganda

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-07-15 19:26:18

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 154.0.138.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43357
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;154.0.138.14.			IN	A

;; AUTHORITY SECTION:
.			411	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020071500 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jul 15 19:26:13 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 14.138.0.154.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 14.138.0.154.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
202.129.39.205	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-27 15:12:23
83.97.20.37	attackspambots	spam	2020-02-27 15:14:51
89.248.171.173	attack	Feb 27 07:11:18 takio postfix/smtpd[3892]: warning: unknown[89.248.171.173]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 27 08:07:58 takio postfix/smtpd[4307]: warning: unknown[89.248.171.173]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 27 09:04:08 takio postfix/smtpd[4671]: warning: unknown[89.248.171.173]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-02-27 15:10:32
144.217.34.148	attackbots	144.217.34.148 was recorded 15 times by 13 hosts attempting to connect to the following ports: 37810,30718. Incident counter (4h, 24h, all-time): 15, 23, 1112	2020-02-27 14:57:07
201.124.120.97	attackbotsspam	unauthorized connection attempt	2020-02-27 15:18:58
61.147.103.136	attackspam	Portscan or hack attempt detected by psad/fwsnort	2020-02-27 14:55:44
41.207.184.182	attackspambots	Feb 26 20:59:03 wbs sshd\[20239\]: Invalid user infowarelab from 41.207.184.182 Feb 26 20:59:03 wbs sshd\[20239\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.207.184.182 Feb 26 20:59:05 wbs sshd\[20239\]: Failed password for invalid user infowarelab from 41.207.184.182 port 45712 ssh2 Feb 26 21:05:27 wbs sshd\[20736\]: Invalid user ts3bot from 41.207.184.182 Feb 26 21:05:27 wbs sshd\[20736\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.207.184.182	2020-02-27 15:06:58
197.51.165.126	attackspambots	Honeypot attack, port: 81, PTR: host-197.51.165.126.tedata.net.	2020-02-27 14:29:24
159.203.17.176	attack	Invalid user ubuntu from 159.203.17.176 port 46597	2020-02-27 15:08:03
222.186.175.150	attack	2020-02-27T08:00:02.610389 sshd[16406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.150 user=root 2020-02-27T08:00:03.982133 sshd[16406]: Failed password for root from 222.186.175.150 port 59670 ssh2 2020-02-27T08:00:08.294903 sshd[16406]: Failed password for root from 222.186.175.150 port 59670 ssh2 2020-02-27T08:00:02.610389 sshd[16406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.150 user=root 2020-02-27T08:00:03.982133 sshd[16406]: Failed password for root from 222.186.175.150 port 59670 ssh2 2020-02-27T08:00:08.294903 sshd[16406]: Failed password for root from 222.186.175.150 port 59670 ssh2 ...	2020-02-27 15:13:19
5.189.167.205	attackspam	Feb 27 06:48:04 sshd\[7496\]: User sshd from vmi161199.contaboserver.net not allowed because not listed in AllowUsersFeb 27 06:48:06 sshd\[7496\]: Failed password for invalid user sshd from 5.189.167.205 port 40764 ssh2 ...	2020-02-27 14:49:55
5.234.242.25	attack	Port probing on unauthorized port 8080	2020-02-27 15:04:41
14.96.105.157	attackspambots	Feb 27 06:48:08 grey postfix/smtpd\[16077\]: NOQUEUE: reject: RCPT from unknown\[14.96.105.157\]: 554 5.7.1 Service unavailable\; Client host \[14.96.105.157\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=14.96.105.157\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-27 14:48:06
201.48.34.195	attackbots	Invalid user zhanghuahao from 201.48.34.195 port 52390	2020-02-27 14:56:44
115.78.2.247	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-27 15:13:45

最近上报的IP列表

213.87.58.174	141.48.125.60	73.6.178.228	140.37.213.118
58.9.89.84	49.83.50.24	171.163.116.177	19.251.41.236
163.0.110.181	6.218.132.107	173.243.119.233	83.171.124.171
115.72.135.107	168.61.51.224	117.232.67.147	190.133.131.24
83.199.208.91	103.10.224.251	20.188.56.101	3.249.0.143