城市(city): unknown
省份(region): unknown
国家(country): Germany
运营商(isp): Ludwig-Maximilians-Universitaet Muenchen
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): University/College/School
| 类型 | 评论内容 | 时间 |
|---|---|---|
| attackspambots | Port scan on 1 port(s): 53 |
2020-04-08 05:41:02 |
| attack | Port scan on 1 port(s): 53 |
2020-03-31 23:58:37 |
| attack | Port scan on 1 port(s): 53 |
2020-02-13 23:20:48 |
| attack | Port scan on 1 port(s): 53 |
2020-01-20 15:52:05 |
| attack | *Port Scan* detected from 138.246.253.21 (DE/Germany/planetlab21.net.in.tum.de). 5 hits in the last 270 seconds |
2019-10-16 05:00:35 |
| attackbotsspam | Port scan on 1 port(s): 53 |
2019-09-07 16:08:43 |
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 138.246.253.15 | attackspam | 8 web app probes over 24 hour period. |
2020-09-25 10:34:17 |
| 138.246.253.15 | attackbots | CF RAY ID: 5ccfd7a5f8c6eda7 IP Class: unknown URI: / |
2020-09-04 04:21:27 |
| 138.246.253.15 | attack | Unauthorized connection attempt detected from IP address 138.246.253.15 to port 443 [T] |
2020-09-03 20:03:51 |
| 138.246.253.7 | attackbotsspam |
|
2020-08-13 01:56:06 |
| 138.246.253.15 | attackbotsspam | CF RAY ID: 5be922ac2e11d44f IP Class: unknown URI: / |
2020-08-06 23:50:03 |
| 138.246.253.15 | attackspambots | Unauthorized connection attempt detected from IP address 138.246.253.15 to port 443 |
2020-06-24 00:44:02 |
| 138.246.253.15 | attackspambots | 138.246.253.15 - - [14/Apr/2020:15:20:12 +0200] "HEAD / HTTP/1.1" 400 3592 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.85 Safari/537.36" |
2020-04-14 23:19:21 |
| 138.246.253.5 | attackspam | From CCTV User Interface Log ...::ffff:138.246.253.5 - - [20/Mar/2020:09:06:43 +0000] "-" 400 179 ... |
2020-03-21 04:04:27 |
| 138.246.253.15 | attackbotsspam | port scan and connect, tcp 443 (https) |
2020-03-05 15:32:29 |
| 138.246.253.5 | attack | 138.246.253.5 - - [23/Feb/2020:12:13:07 -0500] "HEAD / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.85 Safari/537.36" |
2020-02-24 05:41:47 |
| 138.246.253.10 | attackspambots | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-19 22:38:30 |
| 138.246.253.5 | attackspambots | The IP has triggered Cloudflare WAF. CF-Ray: 54172b9bff56c29f | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: DE | CF_IPClass: unknown | Protocol: HTTP/1.1 | Method: HEAD | Host: d.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.85 Safari/537.36 | CF_DC: FRA. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 03:48:13 |
| 138.246.253.5 | attackspam | Open Proxy "PROMETHEUS" Node. |
2019-11-04 18:34:33 |
| 138.246.253.5 | attack | UTC: 2019-10-21 port: 443/tcp |
2019-10-22 13:54:40 |
| 138.246.253.5 | attack | firewall-block_invalid_GET_Request |
2019-08-07 10:37:17 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.246.253.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57727
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.246.253.21. IN A
;; AUTHORITY SECTION:
. 2670 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019090700 1800 900 604800 86400
;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Sep 07 16:08:28 CST 2019
;; MSG SIZE rcvd: 11821.253.246.138.in-addr.arpa domain name pointer planetlab21.net.in.tum.de.Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
21.253.246.138.in-addr.arpa name = planetlab21.net.in.tum.de.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 195.154.55.102 | attack | 195.154.55.102 - - [18/Aug/2020:05:47:58 +0200] "GET /wp-login.php HTTP/1.1" 200 8775 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 195.154.55.102 - - [18/Aug/2020:05:47:59 +0200] "POST /wp-login.php HTTP/1.1" 200 9026 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 195.154.55.102 - - [18/Aug/2020:05:47:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-08-18 19:40:20 |
| 137.26.29.118 | attackbotsspam | Aug 18 09:34:00 vm1 sshd[12230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.26.29.118 Aug 18 09:34:02 vm1 sshd[12230]: Failed password for invalid user centos from 137.26.29.118 port 57158 ssh2 ... |
2020-08-18 19:11:36 |
| 216.239.90.19 | attack | Automatic report - Banned IP Access |
2020-08-18 19:26:52 |
| 69.125.54.198 | attackspam | Aug 18 05:38:51 tux2 sshd[16742]: Invalid user admin from 69.125.54.198 Aug 18 05:38:51 tux2 sshd[16742]: Received disconnect from 69.125.54.198: 11: Bye Bye [preauth] Aug 18 05:38:52 tux2 sshd[16744]: Invalid user admin from 69.125.54.198 Aug 18 05:38:52 tux2 sshd[16744]: Received disconnect from 69.125.54.198: 11: Bye Bye [preauth] Aug 18 05:38:53 tux2 sshd[16746]: Invalid user admin from 69.125.54.198 Aug 18 05:38:53 tux2 sshd[16746]: Received disconnect from 69.125.54.198: 11: Bye Bye [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=69.125.54.198 |
2020-08-18 19:43:56 |
| 106.53.24.141 | attack | Aug 18 05:38:51 ns382633 sshd\[5450\]: Invalid user eth from 106.53.24.141 port 58980 Aug 18 05:38:51 ns382633 sshd\[5450\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.24.141 Aug 18 05:38:53 ns382633 sshd\[5450\]: Failed password for invalid user eth from 106.53.24.141 port 58980 ssh2 Aug 18 05:47:50 ns382633 sshd\[7479\]: Invalid user jenkins from 106.53.24.141 port 47790 Aug 18 05:47:50 ns382633 sshd\[7479\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.24.141 |
2020-08-18 19:46:22 |
| 45.33.80.76 | attackspambots | port scan and connect, tcp 443 (https) |
2020-08-18 19:39:57 |
| 123.207.149.93 | attack | Aug 18 07:43:49 journals sshd\[103197\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.149.93 user=root Aug 18 07:43:51 journals sshd\[103197\]: Failed password for root from 123.207.149.93 port 59548 ssh2 Aug 18 07:48:39 journals sshd\[103737\]: Invalid user mori from 123.207.149.93 Aug 18 07:48:39 journals sshd\[103737\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.149.93 Aug 18 07:48:41 journals sshd\[103737\]: Failed password for invalid user mori from 123.207.149.93 port 34810 ssh2 ... |
2020-08-18 19:50:20 |
| 145.239.82.11 | attackspam | Unauthorized SSH login attempts |
2020-08-18 19:38:44 |
| 129.204.12.9 | attack | "fail2ban match" |
2020-08-18 19:16:54 |
| 27.105.148.31 | attackspambots | Telnet Server BruteForce Attack |
2020-08-18 19:16:13 |
| 222.186.30.167 | attackspam | Aug 18 07:33:31 NPSTNNYC01T sshd[15528]: Failed password for root from 222.186.30.167 port 22877 ssh2 Aug 18 07:33:42 NPSTNNYC01T sshd[15534]: Failed password for root from 222.186.30.167 port 11756 ssh2 Aug 18 07:33:44 NPSTNNYC01T sshd[15534]: Failed password for root from 222.186.30.167 port 11756 ssh2 ... |
2020-08-18 19:33:57 |
| 5.188.206.194 | attack | SMTP:25. 51 access attempts in 43.2 days. |
2020-08-18 19:14:22 |
| 91.134.135.95 | attackbots | Aug 18 10:10:49 ip106 sshd[12054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.135.95 Aug 18 10:10:51 ip106 sshd[12054]: Failed password for invalid user tracy from 91.134.135.95 port 53918 ssh2 ... |
2020-08-18 19:17:33 |
| 177.44.208.107 | attackspambots | Aug 18 11:28:22 onepixel sshd[3969100]: Invalid user larry from 177.44.208.107 port 42578 Aug 18 11:28:22 onepixel sshd[3969100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.44.208.107 Aug 18 11:28:22 onepixel sshd[3969100]: Invalid user larry from 177.44.208.107 port 42578 Aug 18 11:28:24 onepixel sshd[3969100]: Failed password for invalid user larry from 177.44.208.107 port 42578 ssh2 Aug 18 11:32:18 onepixel sshd[3971301]: Invalid user guest from 177.44.208.107 port 56800 |
2020-08-18 19:49:18 |
| 92.118.160.49 | attack | TCP port : 3390; UDP port : 5632 |
2020-08-18 19:53:18 |