城市(city): unknown
省份(region): unknown
国家(country): Germany
运营商(isp): Ludwig-Maximilians-Universitaet Muenchen
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): University/College/School
| 类型 | 评论内容 | 时间 |
|---|---|---|
| attackspam | From CCTV User Interface Log ...::ffff:138.246.253.5 - - [20/Mar/2020:09:06:43 +0000] "-" 400 179 ... |
2020-03-21 04:04:27 |
| attack | 138.246.253.5 - - [23/Feb/2020:12:13:07 -0500] "HEAD / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.85 Safari/537.36" |
2020-02-24 05:41:47 |
| attackspambots | The IP has triggered Cloudflare WAF. CF-Ray: 54172b9bff56c29f | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: DE | CF_IPClass: unknown | Protocol: HTTP/1.1 | Method: HEAD | Host: d.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.85 Safari/537.36 | CF_DC: FRA. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 03:48:13 |
| attackspam | Open Proxy "PROMETHEUS" Node. |
2019-11-04 18:34:33 |
| attack | UTC: 2019-10-21 port: 443/tcp |
2019-10-22 13:54:40 |
| attack | firewall-block_invalid_GET_Request |
2019-08-07 10:37:17 |
| attack | scans system |
2019-07-19 20:01:02 |
| attack | firewall-block_invalid_GET_Request |
2019-06-27 08:30:19 |
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 138.246.253.15 | attackspam | 8 web app probes over 24 hour period. |
2020-09-25 10:34:17 |
| 138.246.253.15 | attackbots | CF RAY ID: 5ccfd7a5f8c6eda7 IP Class: unknown URI: / |
2020-09-04 04:21:27 |
| 138.246.253.15 | attack | Unauthorized connection attempt detected from IP address 138.246.253.15 to port 443 [T] |
2020-09-03 20:03:51 |
| 138.246.253.7 | attackbotsspam |
|
2020-08-13 01:56:06 |
| 138.246.253.15 | attackbotsspam | CF RAY ID: 5be922ac2e11d44f IP Class: unknown URI: / |
2020-08-06 23:50:03 |
| 138.246.253.15 | attackspambots | Unauthorized connection attempt detected from IP address 138.246.253.15 to port 443 |
2020-06-24 00:44:02 |
| 138.246.253.15 | attackspambots | 138.246.253.15 - - [14/Apr/2020:15:20:12 +0200] "HEAD / HTTP/1.1" 400 3592 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.85 Safari/537.36" |
2020-04-14 23:19:21 |
| 138.246.253.21 | attackspambots | Port scan on 1 port(s): 53 |
2020-04-08 05:41:02 |
| 138.246.253.21 | attack | Port scan on 1 port(s): 53 |
2020-03-31 23:58:37 |
| 138.246.253.15 | attackbotsspam | port scan and connect, tcp 443 (https) |
2020-03-05 15:32:29 |
| 138.246.253.10 | attackspambots | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-19 22:38:30 |
| 138.246.253.21 | attack | Port scan on 1 port(s): 53 |
2020-02-13 23:20:48 |
| 138.246.253.21 | attack | Port scan on 1 port(s): 53 |
2020-01-20 15:52:05 |
| 138.246.253.21 | attack | *Port Scan* detected from 138.246.253.21 (DE/Germany/planetlab21.net.in.tum.de). 5 hits in the last 270 seconds |
2019-10-16 05:00:35 |
| 138.246.253.21 | attackbotsspam | Port scan on 1 port(s): 53 |
2019-09-07 16:08:43 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.246.253.5
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28729
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.246.253.5. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019052200 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed May 22 13:46:29 CST 2019
;; MSG SIZE rcvd: 117
5.253.246.138.in-addr.arpa domain name pointer planetlab5.net.in.tum.de.
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
5.253.246.138.in-addr.arpa name = planetlab5.net.in.tum.de.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 120.92.80.15 | attack | $f2bV_matches | Triggered by Fail2Ban at Vostok web server |
2020-04-22 01:06:33 |
| 123.27.52.7 | attack | Invalid user anna from 123.27.52.7 port 57048 |
2020-04-22 01:03:36 |
| 109.173.40.60 | attack | Apr 21 18:56:52 h2779839 sshd[17699]: Invalid user hc from 109.173.40.60 port 36020 Apr 21 18:56:52 h2779839 sshd[17699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.173.40.60 Apr 21 18:56:52 h2779839 sshd[17699]: Invalid user hc from 109.173.40.60 port 36020 Apr 21 18:56:54 h2779839 sshd[17699]: Failed password for invalid user hc from 109.173.40.60 port 36020 ssh2 Apr 21 19:00:50 h2779839 sshd[17789]: Invalid user test from 109.173.40.60 port 48586 Apr 21 19:00:50 h2779839 sshd[17789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.173.40.60 Apr 21 19:00:50 h2779839 sshd[17789]: Invalid user test from 109.173.40.60 port 48586 Apr 21 19:00:51 h2779839 sshd[17789]: Failed password for invalid user test from 109.173.40.60 port 48586 ssh2 Apr 21 19:04:40 h2779839 sshd[17926]: Invalid user tests from 109.173.40.60 port 32904 ... |
2020-04-22 01:17:48 |
| 120.70.97.233 | attackspambots | Invalid user qn from 120.70.97.233 port 36088 |
2020-04-22 01:07:00 |
| 134.175.59.225 | attackbots | Invalid user id from 134.175.59.225 port 36324 |
2020-04-22 00:59:26 |
| 106.12.178.249 | attackspambots | Invalid user test from 106.12.178.249 port 49020 |
2020-04-22 01:21:57 |
| 106.250.131.11 | attack | Apr 21 17:13:33 server4-pi sshd[22173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.250.131.11 Apr 21 17:13:35 server4-pi sshd[22173]: Failed password for invalid user admin01 from 106.250.131.11 port 50902 ssh2 |
2020-04-22 01:18:32 |
| 106.12.33.78 | attackspambots | Apr 21 18:20:09 mail sshd[24114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.33.78 user=root Apr 21 18:20:11 mail sshd[24114]: Failed password for root from 106.12.33.78 port 60336 ssh2 ... |
2020-04-22 01:23:37 |
| 138.68.4.8 | attack | Invalid user r from 138.68.4.8 port 38076 |
2020-04-22 00:58:59 |
| 106.54.83.45 | attack | Apr 21 11:32:44 ny01 sshd[32712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.83.45 Apr 21 11:32:46 ny01 sshd[32712]: Failed password for invalid user jenkins from 106.54.83.45 port 48116 ssh2 Apr 21 11:35:44 ny01 sshd[586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.83.45 |
2020-04-22 01:19:15 |
| 120.131.14.125 | attackspam | Apr 21 16:36:10 OPSO sshd\[2460\]: Invalid user git from 120.131.14.125 port 25950 Apr 21 16:36:10 OPSO sshd\[2460\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.131.14.125 Apr 21 16:36:11 OPSO sshd\[2460\]: Failed password for invalid user git from 120.131.14.125 port 25950 ssh2 Apr 21 16:40:56 OPSO sshd\[3187\]: Invalid user hu from 120.131.14.125 port 15866 Apr 21 16:40:56 OPSO sshd\[3187\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.131.14.125 |
2020-04-22 01:06:06 |
| 129.211.62.131 | attack | Found by fail2ban |
2020-04-22 01:01:48 |
| 91.121.145.227 | attack | Apr 21 19:20:33 srv-ubuntu-dev3 sshd[88549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.145.227 user=root Apr 21 19:20:35 srv-ubuntu-dev3 sshd[88549]: Failed password for root from 91.121.145.227 port 44000 ssh2 Apr 21 19:24:17 srv-ubuntu-dev3 sshd[89131]: Invalid user yd from 91.121.145.227 Apr 21 19:24:17 srv-ubuntu-dev3 sshd[89131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.145.227 Apr 21 19:24:17 srv-ubuntu-dev3 sshd[89131]: Invalid user yd from 91.121.145.227 Apr 21 19:24:19 srv-ubuntu-dev3 sshd[89131]: Failed password for invalid user yd from 91.121.145.227 port 33442 ssh2 Apr 21 19:28:07 srv-ubuntu-dev3 sshd[89723]: Invalid user oracle from 91.121.145.227 Apr 21 19:28:07 srv-ubuntu-dev3 sshd[89723]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.145.227 Apr 21 19:28:07 srv-ubuntu-dev3 sshd[89723]: Invalid user oracle from 91.12 ... |
2020-04-22 01:30:47 |
| 106.12.31.186 | attackbotsspam | prod3 ... |
2020-04-22 01:24:11 |
| 101.231.37.169 | attack | Apr 21 16:25:36 *** sshd[20324]: User root from 101.231.37.169 not allowed because not listed in AllowUsers |
2020-04-22 01:28:35 |