103.53.45.74 - IPInfo

Basic Info

City: Karachi

Region: Sindh

Country: Pakistan

Internet Service Provider: Ebone Network Pvt. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Port probing on unauthorized port 445	2020-02-11 04:59:05

Comments on same subnet:

IP	Type	Details	Datetime
103.53.45.130	attack	Attempted to establish connection to non opened port 1433	2020-08-07 08:15:25
103.53.45.6	attackspambots	Unauthorized connection attempt from IP address 103.53.45.6 on Port 445(SMB)	2020-03-07 01:33:22

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 103.53.45.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24460
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;103.53.45.74.			IN	A

;; AUTHORITY SECTION:
.			489	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021001 1800 900 604800 86400

;; Query time: 470 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 11 04:59:01 CST 2020
;; MSG SIZE  rcvd: 116

Host info

74.45.53.103.in-addr.arpa domain name pointer static-74-45-53-103.ebonenet.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
*** Can't find 74.45.53.103.in-addr.arpa.: No answer

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
112.85.42.72	attackspam	Sep 5 06:13:23 server2 sshd\[1052\]: User root from 112.85.42.72 not allowed because not listed in AllowUsers Sep 5 06:13:23 server2 sshd\[1054\]: User root from 112.85.42.72 not allowed because not listed in AllowUsers Sep 5 06:13:27 server2 sshd\[1060\]: User root from 112.85.42.72 not allowed because not listed in AllowUsers Sep 5 06:14:45 server2 sshd\[1111\]: User root from 112.85.42.72 not allowed because not listed in AllowUsers Sep 5 06:14:46 server2 sshd\[1113\]: User root from 112.85.42.72 not allowed because not listed in AllowUsers Sep 5 06:16:10 server2 sshd\[1410\]: User root from 112.85.42.72 not allowed because not listed in AllowUsers	2020-09-05 17:40:26
114.234.197.65	attackbotsspam	Mirai and Reaper Exploitation Traffic , PTR: PTR record not found	2020-09-05 18:16:59
47.111.19.40	attack	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	2020-09-05 17:51:35
95.9.144.40	attackbotsspam	Automatic report - Banned IP Access	2020-09-05 18:01:27
151.62.6.225	attackspam	Sep 4 18:46:48 mellenthin postfix/smtpd[32352]: NOQUEUE: reject: RCPT from unknown[151.62.6.225]: 554 5.7.1 Service unavailable; Client host [151.62.6.225] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/151.62.6.225; from= to= proto=ESMTP helo=<[151.62.6.225]>	2020-09-05 17:53:59
104.200.129.88	attackspambots	One of our users was tricked by a phishing email and the credentials were compromised. Shortly after, log in attempts to the compromised account were made from this IP address.	2020-09-05 17:44:19
194.55.136.66	attackbots	TCP (SYN) 194.55.136.66:64428 -> port 1433, len 52	2020-09-05 17:43:00
145.239.29.217	attackspambots	Automatic report - XMLRPC Attack	2020-09-05 18:18:43
89.245.109.197	attackspambots	Sep 4 18:46:28 mellenthin postfix/smtpd[30890]: NOQUEUE: reject: RCPT from i59F56DC5.versanet.de[89.245.109.197]: 554 5.7.1 Service unavailable; Client host [89.245.109.197] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/89.245.109.197; from= to= proto=ESMTP helo=	2020-09-05 18:14:34
115.77.187.194	attackspam	Invalid user tsm from 115.77.187.194 port 40626	2020-09-05 17:59:47
110.81.102.116	attack	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: 116.102.81.110.broad.qz.fj.dynamic.163data.com.cn.	2020-09-05 17:52:47
131.147.249.143	attackbots	Unauthorised access (Sep 4) SRC=131.147.249.143 LEN=52 TTL=119 ID=28306 DF TCP DPT=445 WINDOW=8192 SYN	2020-09-05 17:50:03
49.232.191.67	attackspambots	SSH auth scanning - multiple failed logins	2020-09-05 17:56:45
180.164.58.165	attackspambots	Unauthorized SSH login attempts	2020-09-05 18:22:42
13.81.25.75	attack	[portscan] Port scan	2020-09-05 17:45:40

Recently Reported IPs

182.75.193.150	102.125.52.246	109.160.207.113	78.57.129.128
210.223.193.10	89.172.79.234	131.232.80.240	85.57.254.112
12.39.119.118	177.124.66.78	108.243.229.136	58.170.220.179
86.12.141.106	197.36.192.208	63.126.238.99	62.171.135.115
41.9.85.56	108.12.233.59	144.168.189.225	115.94.188.167