103.138.97.54 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
103.138.97.5	attackspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/103.138.97.5/ ID - 1H : (47) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : ID NAME ASN : ASN138846 IP : 103.138.97.5 CIDR : 103.138.97.0/24 PREFIX COUNT : 1 UNIQUE IP COUNT : 256 ATTACKS DETECTED ASN138846 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-10-21 13:35:13 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery	2019-10-22 03:53:28

Type

Details

Datetime

103.138.97.5

attackspam

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/103.138.97.5/ 
 
 ID - 1H : (47)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : ID 
 NAME ASN : ASN138846 
 
 IP : 103.138.97.5 
 
 CIDR : 103.138.97.0/24 
 
 PREFIX COUNT : 1 
 
 UNIQUE IP COUNT : 256 
 
 
 ATTACKS DETECTED ASN138846 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-10-21 13:35:13 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery

2019-10-22 03:53:28

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.138.97.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42608
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;103.138.97.54.			IN	A

;; AUTHORITY SECTION:
.			443	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022500 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 25 16:38:34 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 54.97.138.103.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 54.97.138.103.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
42.113.229.193	attackbots	Unauthorized connection attempt detected from IP address 42.113.229.193 to port 8081 [T]	2020-02-02 20:12:54
83.31.4.161	attack	Feb 2 12:40:55 silence02 sshd[15492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.31.4.161 Feb 2 12:40:57 silence02 sshd[15492]: Failed password for invalid user webadmin from 83.31.4.161 port 58101 ssh2 Feb 2 12:43:48 silence02 sshd[15734]: Failed password for root from 83.31.4.161 port 42792 ssh2	2020-02-02 19:59:16
190.106.199.90	attackbots	unauthorized connection attempt	2020-02-02 19:47:31
188.27.22.203	attackbotsspam	Port 22 Scan, PTR: 188-27-22-203.dynamic.brasov.rdsnet.ro.	2020-02-02 20:01:45
115.236.170.78	attackbots	Unauthorized connection attempt detected from IP address 115.236.170.78 to port 2220 [J]	2020-02-02 19:34:55
176.36.192.193	attackbots	Unauthorized connection attempt detected from IP address 176.36.192.193 to port 2220 [J]	2020-02-02 19:49:25
167.99.236.246	attackbots	Sql/code injection probe	2020-02-02 20:12:08
14.46.105.141	attackbots	Unauthorized connection attempt detected from IP address 14.46.105.141 to port 81 [J]	2020-02-02 19:48:26
91.232.96.29	attack	Feb 2 05:50:09 grey postfix/smtpd\[392\]: NOQUEUE: reject: RCPT from expect.msaysha.com\[91.232.96.29\]: 554 5.7.1 Service unavailable\; Client host \[91.232.96.29\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[91.232.96.29\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-02 20:07:50
167.172.51.13	attackspambots	Unauthorized connection attempt detected from IP address 167.172.51.13 to port 2220 [J]	2020-02-02 19:51:57
200.86.33.140	attackbots	Unauthorized connection attempt detected from IP address 200.86.33.140 to port 2220 [J]	2020-02-02 20:14:38
222.186.30.218	attack	detected by Fail2Ban	2020-02-02 19:45:40
222.180.162.8	attackbotsspam	Feb 2 10:12:16 goofy sshd\[3627\]: Invalid user appltest from 222.180.162.8 Feb 2 10:12:16 goofy sshd\[3627\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.180.162.8 Feb 2 10:12:18 goofy sshd\[3627\]: Failed password for invalid user appltest from 222.180.162.8 port 52746 ssh2 Feb 2 10:21:49 goofy sshd\[4078\]: Invalid user terrariaserver from 222.180.162.8 Feb 2 10:21:49 goofy sshd\[4078\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.180.162.8	2020-02-02 20:05:24
117.7.236.58	attackbotsspam	Unauthorized connection attempt detected from IP address 117.7.236.58 to port 2220 [J]	2020-02-02 19:57:44
157.245.111.175	attackbots	Unauthorized connection attempt detected from IP address 157.245.111.175 to port 2220 [J]	2020-02-02 19:41:02

Recently Reported IPs

103.138.97.38	103.138.97.8	103.138.97.6	103.139.10.182
103.138.97.66	103.139.133.241	103.139.136.192	103.139.102.46
103.139.102.60	103.139.103.29	1.20.175.56	103.139.103.33
103.139.133.234	103.139.140.154	103.139.140.90	103.139.136.76
103.139.156.122	103.139.103.34	103.139.156.125	103.139.16.148