138.197.149.130

基本信息:

城市(city): Toronto

省份(region): Ontario

国家(country): Canada

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Nov 9 20:55:57 auw2 sshd\[26296\]: Invalid user qwerty from 138.197.149.130 Nov 9 20:55:57 auw2 sshd\[26296\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.130 Nov 9 20:55:59 auw2 sshd\[26296\]: Failed password for invalid user qwerty from 138.197.149.130 port 40334 ssh2 Nov 9 21:00:07 auw2 sshd\[26705\]: Invalid user 1234 from 138.197.149.130 Nov 9 21:00:07 auw2 sshd\[26705\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.130	2019-11-10 18:40:35
attackspam	Nov 9 19:20:26 auw2 sshd\[17647\]: Invalid user a from 138.197.149.130 Nov 9 19:20:26 auw2 sshd\[17647\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.130 Nov 9 19:20:28 auw2 sshd\[17647\]: Failed password for invalid user a from 138.197.149.130 port 49436 ssh2 Nov 9 19:24:14 auw2 sshd\[17951\]: Invalid user LoveConfTeam1q2w from 138.197.149.130 Nov 9 19:24:14 auw2 sshd\[17951\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.130	2019-11-10 13:48:24
attackbotsspam	Nov 6 10:55:34 olgosrv01 sshd[30533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.130 user=r.r Nov 6 10:55:36 olgosrv01 sshd[30533]: Failed password for r.r from 138.197.149.130 port 35088 ssh2 Nov 6 10:55:36 olgosrv01 sshd[30533]: Received disconnect from 138.197.149.130: 11: Bye Bye [preauth] Nov 6 11:09:28 olgosrv01 sshd[31694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.130 user=r.r Nov 6 11:09:30 olgosrv01 sshd[31694]: Failed password for r.r from 138.197.149.130 port 43854 ssh2 Nov 6 11:09:30 olgosrv01 sshd[31694]: Received disconnect from 138.197.149.130: 11: Bye Bye [preauth] Nov 6 11:13:10 olgosrv01 sshd[31987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.130 user=r.r Nov 6 11:13:12 olgosrv01 sshd[31987]: Failed password for r.r from 138.197.149.130 port 56324 ssh2 Nov 6 11:13:12 olg........ -------------------------------	2019-11-09 15:24:19

类型

评论内容

时间

attack

Nov  9 20:55:57 auw2 sshd\[26296\]: Invalid user qwerty from 138.197.149.130
Nov  9 20:55:57 auw2 sshd\[26296\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.130
Nov  9 20:55:59 auw2 sshd\[26296\]: Failed password for invalid user qwerty from 138.197.149.130 port 40334 ssh2
Nov  9 21:00:07 auw2 sshd\[26705\]: Invalid user 1234 from 138.197.149.130
Nov  9 21:00:07 auw2 sshd\[26705\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.130

2019-11-10 18:40:35

attackspam

Nov  9 19:20:26 auw2 sshd\[17647\]: Invalid user a from 138.197.149.130
Nov  9 19:20:26 auw2 sshd\[17647\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.130
Nov  9 19:20:28 auw2 sshd\[17647\]: Failed password for invalid user a from 138.197.149.130 port 49436 ssh2
Nov  9 19:24:14 auw2 sshd\[17951\]: Invalid user LoveConfTeam1q2w from 138.197.149.130
Nov  9 19:24:14 auw2 sshd\[17951\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.130

2019-11-10 13:48:24

attackbotsspam

Nov  6 10:55:34 olgosrv01 sshd[30533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.130  user=r.r
Nov  6 10:55:36 olgosrv01 sshd[30533]: Failed password for r.r from 138.197.149.130 port 35088 ssh2
Nov  6 10:55:36 olgosrv01 sshd[30533]: Received disconnect from 138.197.149.130: 11: Bye Bye [preauth]
Nov  6 11:09:28 olgosrv01 sshd[31694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.130  user=r.r
Nov  6 11:09:30 olgosrv01 sshd[31694]: Failed password for r.r from 138.197.149.130 port 43854 ssh2
Nov  6 11:09:30 olgosrv01 sshd[31694]: Received disconnect from 138.197.149.130: 11: Bye Bye [preauth]
Nov  6 11:13:10 olgosrv01 sshd[31987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.130  user=r.r
Nov  6 11:13:12 olgosrv01 sshd[31987]: Failed password for r.r from 138.197.149.130 port 56324 ssh2
Nov  6 11:13:12 olg........
-------------------------------

2019-11-09 15:24:19

相同子网IP讨论:

IP	类型	评论内容	时间
138.197.149.97	attack	Sep 10 20:00:19 ns308116 sshd[31485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.97 user=root Sep 10 20:00:21 ns308116 sshd[31485]: Failed password for root from 138.197.149.97 port 34136 ssh2 Sep 10 20:06:07 ns308116 sshd[4933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.97 user=root Sep 10 20:06:09 ns308116 sshd[4933]: Failed password for root from 138.197.149.97 port 40806 ssh2 Sep 10 20:09:31 ns308116 sshd[8395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.97 user=root ...	2020-09-11 03:27:57
138.197.149.97	attack	$f2bV_matches	2020-09-10 18:58:20
138.197.149.97	attack	Aug 29 22:40:54 buvik sshd[28099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.97 Aug 29 22:40:56 buvik sshd[28099]: Failed password for invalid user lever from 138.197.149.97 port 56310 ssh2 Aug 29 22:44:24 buvik sshd[28435]: Invalid user ts3bot from 138.197.149.97 ...	2020-08-30 05:25:55
138.197.149.97	attackbots	2020-08-15T06:21:38.660080abusebot-3.cloudsearch.cf sshd[23392]: Invalid user 666idc from 138.197.149.97 port 34918 2020-08-15T06:21:38.666634abusebot-3.cloudsearch.cf sshd[23392]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.97 2020-08-15T06:21:38.660080abusebot-3.cloudsearch.cf sshd[23392]: Invalid user 666idc from 138.197.149.97 port 34918 2020-08-15T06:21:39.989623abusebot-3.cloudsearch.cf sshd[23392]: Failed password for invalid user 666idc from 138.197.149.97 port 34918 ssh2 2020-08-15T06:25:22.481309abusebot-3.cloudsearch.cf sshd[23409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.97 user=root 2020-08-15T06:25:24.220978abusebot-3.cloudsearch.cf sshd[23409]: Failed password for root from 138.197.149.97 port 45416 ssh2 2020-08-15T06:29:02.446994abusebot-3.cloudsearch.cf sshd[23475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1 ...	2020-08-15 18:54:31
138.197.149.97	attackbotsspam	Aug 11 06:57:37 rocket sshd[29833]: Failed password for root from 138.197.149.97 port 53760 ssh2 Aug 11 07:01:38 rocket sshd[30439]: Failed password for root from 138.197.149.97 port 36838 ssh2 ...	2020-08-11 14:03:06
138.197.149.97	attackspam	Invalid user ehd from 138.197.149.97 port 52060	2020-07-21 08:34:01
138.197.149.97	attackbots	Jul 19 06:12:20 gospond sshd[5065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.97 Jul 19 06:12:20 gospond sshd[5065]: Invalid user 123 from 138.197.149.97 port 49428 Jul 19 06:12:22 gospond sshd[5065]: Failed password for invalid user 123 from 138.197.149.97 port 49428 ssh2 ...	2020-07-19 13:18:25
138.197.149.97	attack	$f2bV_matches	2020-07-04 05:20:53
138.197.149.97	attackspambots	Jun 20 10:27:54 melroy-server sshd[3983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.97 Jun 20 10:27:56 melroy-server sshd[3983]: Failed password for invalid user agr from 138.197.149.97 port 60798 ssh2 ...	2020-06-20 18:21:46
138.197.149.97	attackspambots	sshd	2020-06-18 14:02:12
138.197.149.97	attackbots	SSH invalid-user multiple login try	2020-06-15 01:00:28
138.197.149.97	attackbots	Jun 14 08:30:13 piServer sshd[16959]: Failed password for root from 138.197.149.97 port 34584 ssh2 Jun 14 08:33:32 piServer sshd[17232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.97 Jun 14 08:33:34 piServer sshd[17232]: Failed password for invalid user ylx from 138.197.149.97 port 36018 ssh2 ...	2020-06-14 14:42:44
138.197.149.97	attackbotsspam	Jun 13 04:03:02 ws12vmsma01 sshd[65080]: Failed password for invalid user kdk from 138.197.149.97 port 45896 ssh2 Jun 13 04:08:06 ws12vmsma01 sshd[586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.97 user=root Jun 13 04:08:08 ws12vmsma01 sshd[586]: Failed password for root from 138.197.149.97 port 38528 ssh2 ...	2020-06-13 16:58:35
138.197.149.97	attack	Jun 10 20:49:10 abendstille sshd\[16001\]: Invalid user antivirus from 138.197.149.97 Jun 10 20:49:10 abendstille sshd\[16001\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.97 Jun 10 20:49:13 abendstille sshd\[16001\]: Failed password for invalid user antivirus from 138.197.149.97 port 45000 ssh2 Jun 10 20:52:29 abendstille sshd\[19198\]: Invalid user Waschlappen from 138.197.149.97 Jun 10 20:52:29 abendstille sshd\[19198\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.149.97 ...	2020-06-11 03:03:47
138.197.149.97	attackbots	2020-05-28T03:25:57.137292morrigan.ad5gb.com sshd[709]: Invalid user shoroku from 138.197.149.97 port 39292 2020-05-28T03:25:59.455204morrigan.ad5gb.com sshd[709]: Failed password for invalid user shoroku from 138.197.149.97 port 39292 ssh2 2020-05-28T03:26:00.069595morrigan.ad5gb.com sshd[709]: Disconnected from invalid user shoroku 138.197.149.97 port 39292 [preauth]	2020-05-28 16:37:39

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.197.149.130
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48335
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.197.149.130.		IN	A

;; AUTHORITY SECTION:
.			527	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110900 1800 900 604800 86400

;; Query time: 125 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 09 15:24:16 CST 2019
;; MSG SIZE  rcvd: 119

HOST信息:

Host 130.149.197.138.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 130.149.197.138.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
178.128.84.122	attackspam	Aug 9 01:47:21 vps647732 sshd[1990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.84.122 Aug 9 01:47:22 vps647732 sshd[1990]: Failed password for invalid user nnn from 178.128.84.122 port 59558 ssh2 ...	2019-08-09 07:50:12
109.61.177.201	attack	Aug 8 23:53:51 jupiter sshd\[46124\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.61.177.201 user=root Aug 8 23:53:52 jupiter sshd\[46124\]: Failed password for root from 109.61.177.201 port 58654 ssh2 Aug 8 23:54:02 jupiter sshd\[46124\]: error: maximum authentication attempts exceeded for root from 109.61.177.201 port 58654 ssh2 \[preauth\] ...	2019-08-09 07:43:05
82.113.62.78	attackbots	fire	2019-08-09 08:21:58
60.248.219.185	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-08 21:35:36,198 INFO [amun_request_handler] PortScan Detected on Port: 445 (60.248.219.185)	2019-08-09 07:46:17
119.226.66.66	attackbots	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-08 20:54:46,907 INFO [amun_request_handler] PortScan Detected on Port: 445 (119.226.66.66)22)	2019-08-09 07:52:17
27.254.61.112	attackspam	Aug 9 01:56:52 srv-4 sshd\[7220\]: Invalid user yasmin from 27.254.61.112 Aug 9 01:56:52 srv-4 sshd\[7220\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.61.112 Aug 9 01:56:54 srv-4 sshd\[7220\]: Failed password for invalid user yasmin from 27.254.61.112 port 59392 ssh2 ...	2019-08-09 07:56:27
98.11.46.52	attackspam	fire	2019-08-09 08:01:09
185.204.135.119	attackbots	Aug 9 01:31:46 herz-der-gamer sshd[24066]: Invalid user death from 185.204.135.119 port 48532 ...	2019-08-09 08:01:30
193.226.214.92	attack	BURG,WP GET /wp-login.php	2019-08-09 08:12:12
87.180.70.184	attackspam	Invalid user azure from 87.180.70.184 port 37354 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.180.70.184 Failed password for invalid user azure from 87.180.70.184 port 37354 ssh2 Invalid user matrix from 87.180.70.184 port 34008 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.180.70.184	2019-08-09 08:05:01
5.62.41.134	attackbotsspam	\[2019-08-08 19:22:12\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '5.62.41.134:1101' - Wrong password \[2019-08-08 19:22:12\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-08T19:22:12.823-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="94198",SessionID="0x7ff4d07952f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.41.134/63666",Challenge="288bbc40",ReceivedChallenge="288bbc40",ReceivedHash="084165557b852b1ac58eced516fc92ec" \[2019-08-08 19:22:53\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '5.62.41.134:1064' - Wrong password \[2019-08-08 19:22:53\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-08T19:22:53.557-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="67597",SessionID="0x7ff4d0160998",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.41.134/6	2019-08-09 07:42:24
129.150.71.5	attackbots	Aug 9 01:41:00 yabzik sshd[16228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.150.71.5 Aug 9 01:41:02 yabzik sshd[16228]: Failed password for invalid user oracle from 129.150.71.5 port 8846 ssh2 Aug 9 01:45:26 yabzik sshd[17657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.150.71.5	2019-08-09 08:20:27
86.170.34.68	attackspambots	fire	2019-08-09 08:13:20
92.43.24.226	attackbotsspam	fire	2019-08-09 08:04:16
218.92.0.154	attackspambots	Aug 8 23:53:36 dedicated sshd[31803]: Failed password for root from 218.92.0.154 port 42561 ssh2 Aug 8 23:53:39 dedicated sshd[31803]: Failed password for root from 218.92.0.154 port 42561 ssh2 Aug 8 23:53:41 dedicated sshd[31803]: Failed password for root from 218.92.0.154 port 42561 ssh2 Aug 8 23:53:44 dedicated sshd[31803]: Failed password for root from 218.92.0.154 port 42561 ssh2 Aug 8 23:53:47 dedicated sshd[31803]: Failed password for root from 218.92.0.154 port 42561 ssh2	2019-08-09 07:47:39

最近上报的IP列表

134.175.240.93	209.59.186.62	90.178.144.10	156.96.56.65
160.153.147.139	209.59.186.66	149.28.150.192	94.177.245.236
78.47.108.176	144.217.103.63	103.112.167.134	89.183.95.27
190.182.91.135	144.91.93.239	42.200.74.154	223.100.24.248
122.51.55.171	199.204.250.206	103.68.70.100	115.219.35.58