93.138.170.53 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Croatia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
93.138.170.180	attackbotsspam	Unauthorized connection attempt detected from IP address 93.138.170.180 to port 4567 [J]	2020-01-18 15:47:40

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 93.138.170.53
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24423
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;93.138.170.53.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012200 1800 900 604800 86400

;; Query time: 81 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 22 21:27:11 CST 2025
;; MSG SIZE  rcvd: 106

Host info

53.170.138.93.in-addr.arpa domain name pointer 93-138-170-53.adsl.net.t-com.hr.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
53.170.138.93.in-addr.arpa	name = 93-138-170-53.adsl.net.t-com.hr.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.53.88.70	attack	1569444774 - 09/25/2019 22:52:54 Host: 185.53.88.70/185.53.88.70 Port: 5060 UDP Blocked	2019-09-26 08:05:56
185.142.236.35	attackbotsspam	3389BruteforceStormFW22	2019-09-26 08:08:19
77.85.242.141	attack	SMB Server BruteForce Attack	2019-09-26 08:08:37
212.47.228.121	attack	fail2ban honeypot	2019-09-26 08:03:20
111.203.152.87	attackspambots	Sep 26 01:58:42 saschabauer sshd[15095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.203.152.87 Sep 26 01:58:44 saschabauer sshd[15095]: Failed password for invalid user webmaster from 111.203.152.87 port 39663 ssh2	2019-09-26 08:18:31
111.75.149.221	attackspambots	Fail2Ban - SMTP Bruteforce Attempt	2019-09-26 07:56:43
1.71.129.49	attackbots	Sep 26 00:17:58 dedicated sshd[14969]: Invalid user admanager from 1.71.129.49 port 43647	2019-09-26 07:59:41
77.247.110.213	attackspambots	\[2019-09-25 19:22:31\] NOTICE\[1970\] chan_sip.c: Registration from '"2288" \' failed for '77.247.110.213:6214' - Wrong password \[2019-09-25 19:22:31\] SECURITY\[1978\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-25T19:22:31.660-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2288",SessionID="0x7f9b3402de58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.213/6214",Challenge="37f18dae",ReceivedChallenge="37f18dae",ReceivedHash="5745f3c3c5bb7d69bd8f0ab38bf25f22" \[2019-09-25 19:22:31\] NOTICE\[1970\] chan_sip.c: Registration from '"2288" \' failed for '77.247.110.213:6214' - Wrong password \[2019-09-25 19:22:31\] SECURITY\[1978\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-25T19:22:31.762-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2288",SessionID="0x7f9b3403d098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4	2019-09-26 07:47:24
49.88.112.78	attack	2019-09-25T23:47:37.798693abusebot-7.cloudsearch.cf sshd\[15862\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.78 user=root	2019-09-26 07:48:40
222.186.180.20	attackspam	Sep 25 19:32:35 plusreed sshd[26848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.20 user=root Sep 25 19:32:36 plusreed sshd[26848]: Failed password for root from 222.186.180.20 port 26740 ssh2 ...	2019-09-26 07:43:50
43.241.145.101	attack	Sep 25 18:30:40 Tower sshd[29320]: Connection from 43.241.145.101 port 25904 on 192.168.10.220 port 22 Sep 25 18:30:44 Tower sshd[29320]: Invalid user sentry from 43.241.145.101 port 25904 Sep 25 18:30:44 Tower sshd[29320]: error: Could not get shadow information for NOUSER Sep 25 18:30:44 Tower sshd[29320]: Failed password for invalid user sentry from 43.241.145.101 port 25904 ssh2 Sep 25 18:30:44 Tower sshd[29320]: Received disconnect from 43.241.145.101 port 25904:11: Bye Bye [preauth] Sep 25 18:30:44 Tower sshd[29320]: Disconnected from invalid user sentry 43.241.145.101 port 25904 [preauth]	2019-09-26 07:47:48
208.58.129.131	attackbotsspam	Sep 26 06:31:30 webhost01 sshd[27081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.58.129.131 Sep 26 06:31:33 webhost01 sshd[27081]: Failed password for invalid user support from 208.58.129.131 port 47550 ssh2 ...	2019-09-26 07:52:07
123.31.20.81	attack	Forbidden directory scan :: 2019/09/26 07:37:21 [error] 1103#1103: *281950 access forbidden by rule, client: 123.31.20.81, server: [censored_4], request: "GET //table.sql HTTP/1.1", host: "[censored_4]:443"	2019-09-26 08:21:07
177.133.16.38	attack	Automatic report - Port Scan Attack	2019-09-26 08:21:54
103.230.241.39	attackbotsspam	[Thu Sep 26 03:53:40.417924 2019] [:error] [pid 27914:tid 140467660363520] [client 103.230.241.39:35167] [client 103.230.241.39] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.1.1/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "792"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.1.1"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "103.27.207.197"] [uri "/"] [unique_id "XYvT1F4MXwsM0Koah3AOawAAAM0"] ...	2019-09-26 07:49:33

Recently Reported IPs

190.17.225.88	22.202.110.21	231.185.143.164	160.186.54.227
64.156.108.197	167.86.103.145	141.172.85.245	101.141.168.65
137.206.228.2	137.71.247.157	20.118.32.136	233.44.85.75
135.69.140.22	221.72.52.90	214.205.128.195	200.168.163.10
161.76.181.4	239.162.94.37	24.12.77.113	239.113.89.88