138.219.108.21

基本信息:

城市(city): Pinhal de Sao Bento

省份(region): Parana

国家(country): Brazil

运营商(isp): Fibernet Telecomunicacoes

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Exploid host for vulnerabilities on 13-10-2019 12:45:19.	2019-10-14 03:16:17

相同子网IP讨论:

IP	类型	评论内容	时间
138.219.108.17	attackspambots	DATE:2019-08-14 00:51:36, IP:138.219.108.17, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2019-08-14 08:21:32

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.219.108.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26895
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.219.108.21.			IN	A

;; AUTHORITY SECTION:
.			427	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101300 1800 900 604800 86400

;; Query time: 143 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 14 03:16:14 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

21.108.219.138.in-addr.arpa domain name pointer 138.219.108.21.dynamic.dnsfibernet.net.br.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
21.108.219.138.in-addr.arpa	name = 138.219.108.21.dynamic.dnsfibernet.net.br.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
82.208.177.139	attackspam	Aug 18 16:25:52 lcdev sshd\[10401\]: Invalid user user1 from 82.208.177.139 Aug 18 16:25:52 lcdev sshd\[10401\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.208.177.139 Aug 18 16:25:54 lcdev sshd\[10401\]: Failed password for invalid user user1 from 82.208.177.139 port 42008 ssh2 Aug 18 16:33:30 lcdev sshd\[11105\]: Invalid user dw from 82.208.177.139 Aug 18 16:33:30 lcdev sshd\[11105\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.208.177.139	2019-08-19 10:38:15
142.93.168.48	attackspam	2019-08-18T18:07:19.968877WS-Zach sshd[18293]: User root from 142.93.168.48 not allowed because none of user's groups are listed in AllowGroups 2019-08-18T18:07:19.980143WS-Zach sshd[18293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.168.48 user=root 2019-08-18T18:07:19.968877WS-Zach sshd[18293]: User root from 142.93.168.48 not allowed because none of user's groups are listed in AllowGroups 2019-08-18T18:07:22.068788WS-Zach sshd[18293]: Failed password for invalid user root from 142.93.168.48 port 38097 ssh2 2019-08-18T18:07:19.980143WS-Zach sshd[18293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.168.48 user=root 2019-08-18T18:07:19.968877WS-Zach sshd[18293]: User root from 142.93.168.48 not allowed because none of user's groups are listed in AllowGroups 2019-08-18T18:07:22.068788WS-Zach sshd[18293]: Failed password for invalid user root from 142.93.168.48 port 38097 ssh2 2019-08-18T18:07:24.897184WS-Zac	2019-08-19 10:55:15
177.244.2.221	attackbotsspam	2019-08-19T02:41:34.296073abusebot-6.cloudsearch.cf sshd\[27807\]: Invalid user angel from 177.244.2.221 port 45924	2019-08-19 10:54:29
134.175.219.34	attackspambots	Aug 19 02:11:35 mail sshd\[12372\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.219.34 Aug 19 02:11:37 mail sshd\[12372\]: Failed password for invalid user user from 134.175.219.34 port 48526 ssh2 Aug 19 02:16:23 mail sshd\[12946\]: Invalid user m from 134.175.219.34 port 36909 Aug 19 02:16:23 mail sshd\[12946\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.219.34 Aug 19 02:16:25 mail sshd\[12946\]: Failed password for invalid user m from 134.175.219.34 port 36909 ssh2	2019-08-19 11:12:23
52.151.31.130	attackbots	Multiple SSH auth failures recorded by fail2ban	2019-08-19 11:01:23
51.255.34.233	attackbotsspam	Automatic report - Banned IP Access	2019-08-19 10:32:39
194.93.59.13	attackbots	Automatic report - Banned IP Access	2019-08-19 10:34:28
78.130.243.128	attack	Aug 19 01:03:08 XXX sshd[23620]: Invalid user msr from 78.130.243.128 port 35384	2019-08-19 10:48:32
184.179.216.156	attack	IMAP brute force ...	2019-08-19 11:04:44
168.227.12.101	attack	$f2bV_matches	2019-08-19 10:33:25
162.144.109.122	attackspambots	Aug 19 07:25:53 itv-usvr-01 sshd[9146]: Invalid user postgres from 162.144.109.122 Aug 19 07:25:53 itv-usvr-01 sshd[9146]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.144.109.122 Aug 19 07:25:53 itv-usvr-01 sshd[9146]: Invalid user postgres from 162.144.109.122 Aug 19 07:25:55 itv-usvr-01 sshd[9146]: Failed password for invalid user postgres from 162.144.109.122 port 39378 ssh2 Aug 19 07:34:12 itv-usvr-01 sshd[9452]: Invalid user hostmaster from 162.144.109.122	2019-08-19 10:54:02
218.92.0.204	attackbots	Aug 19 04:57:15 mail sshd\[2040\]: Failed password for root from 218.92.0.204 port 19583 ssh2 Aug 19 04:58:40 mail sshd\[2200\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.204 user=root Aug 19 04:58:43 mail sshd\[2200\]: Failed password for root from 218.92.0.204 port 14169 ssh2 Aug 19 04:58:45 mail sshd\[2200\]: Failed password for root from 218.92.0.204 port 14169 ssh2 Aug 19 04:58:47 mail sshd\[2200\]: Failed password for root from 218.92.0.204 port 14169 ssh2	2019-08-19 11:10:47
181.112.156.13	attackbots	Aug 19 04:53:31 mail sshd\[1534\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.112.156.13 Aug 19 04:53:33 mail sshd\[1534\]: Failed password for invalid user xp from 181.112.156.13 port 53369 ssh2 Aug 19 04:58:16 mail sshd\[2164\]: Invalid user kab from 181.112.156.13 port 48480 Aug 19 04:58:16 mail sshd\[2164\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.112.156.13 Aug 19 04:58:19 mail sshd\[2164\]: Failed password for invalid user kab from 181.112.156.13 port 48480 ssh2	2019-08-19 11:12:01
106.13.44.78	attackspambots	Aug 18 16:30:29 web9 sshd\[5244\]: Invalid user sun from 106.13.44.78 Aug 18 16:30:29 web9 sshd\[5244\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.78 Aug 18 16:30:31 web9 sshd\[5244\]: Failed password for invalid user sun from 106.13.44.78 port 35636 ssh2 Aug 18 16:36:33 web9 sshd\[6412\]: Invalid user nagios from 106.13.44.78 Aug 18 16:36:33 web9 sshd\[6412\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.44.78	2019-08-19 10:52:53
77.247.110.68	attackbotsspam	\[2019-08-18 22:06:29\] NOTICE\[2288\] chan_sip.c: Registration from '"600" \' failed for '77.247.110.68:6945' - Wrong password \[2019-08-18 22:06:29\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-18T22:06:29.611-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="600",SessionID="0x7ff4d0348688",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.68/6945",Challenge="3bed1b10",ReceivedChallenge="3bed1b10",ReceivedHash="7635d6062f2738ebff91419539f29ecc" \[2019-08-18 22:06:29\] NOTICE\[2288\] chan_sip.c: Registration from '"600" \' failed for '77.247.110.68:6945' - Wrong password \[2019-08-18 22:06:29\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-18T22:06:29.756-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="600",SessionID="0x7ff4d05c1b48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.2	2019-08-19 10:31:55

最近上报的IP列表

77.190.100.16	2.223.146.76	106.62.184.85	151.65.86.232
85.137.50.240	165.22.10.24	108.122.114.248	89.244.100.137
104.174.147.71	108.186.29.118	97.3.50.250	177.45.164.188
79.109.74.152	113.55.184.196	94.222.40.217	217.61.22.39
220.15.123.198	205.203.116.136	106.58.57.227	91.218.189.87