必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): Ludwig-Maximilians-Universitaet Muenchen

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): University/College/School

用户上报:
类型 评论内容 时间
attackbotsspam
 TCP (SYN) 138.246.253.7:49295 -> port 53, len 40
2020-08-13 01:56:06
相同子网IP讨论:
IP 类型 评论内容 时间
138.246.253.15 attackspam
8 web app probes over 24 hour period.
2020-09-25 10:34:17
138.246.253.15 attackbots
CF RAY ID: 5ccfd7a5f8c6eda7 IP Class: unknown URI: /
2020-09-04 04:21:27
138.246.253.15 attack
Unauthorized connection attempt detected from IP address 138.246.253.15 to port 443 [T]
2020-09-03 20:03:51
138.246.253.15 attackbotsspam
CF RAY ID: 5be922ac2e11d44f IP Class: unknown URI: /
2020-08-06 23:50:03
138.246.253.15 attackspambots
Unauthorized connection attempt detected from IP address 138.246.253.15 to port 443
2020-06-24 00:44:02
138.246.253.15 attackspambots
138.246.253.15 - - [14/Apr/2020:15:20:12 +0200] "HEAD / HTTP/1.1" 400 3592 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.85 Safari/537.36"
2020-04-14 23:19:21
138.246.253.21 attackspambots
Port scan on 1 port(s): 53
2020-04-08 05:41:02
138.246.253.21 attack
Port scan on 1 port(s): 53
2020-03-31 23:58:37
138.246.253.5 attackspam
From CCTV User Interface Log
...::ffff:138.246.253.5 - - [20/Mar/2020:09:06:43 +0000] "-" 400 179
...
2020-03-21 04:04:27
138.246.253.15 attackbotsspam
port scan and connect, tcp 443 (https)
2020-03-05 15:32:29
138.246.253.5 attack
138.246.253.5 - - [23/Feb/2020:12:13:07 -0500] "HEAD / HTTP/1.1" 500 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.85 Safari/537.36"
2020-02-24 05:41:47
138.246.253.10 attackspambots
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-19 22:38:30
138.246.253.21 attack
Port scan on 1 port(s): 53
2020-02-13 23:20:48
138.246.253.21 attack
Port scan on 1 port(s): 53
2020-01-20 15:52:05
138.246.253.5 attackspambots
The IP has triggered Cloudflare WAF. CF-Ray: 54172b9bff56c29f | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: DE | CF_IPClass: unknown | Protocol: HTTP/1.1 | Method: HEAD | Host: d.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.85 Safari/537.36 | CF_DC: FRA. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 03:48:13
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.246.253.7
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48905
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.246.253.7.			IN	A

;; AUTHORITY SECTION:
.			511	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020081202 1800 900 604800 86400

;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Aug 13 01:56:00 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
7.253.246.138.in-addr.arpa domain name pointer planetlab7.net.in.tum.de.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
7.253.246.138.in-addr.arpa	name = planetlab7.net.in.tum.de.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
51.38.231.11 attackbots
...
2020-05-16 02:42:08
96.77.182.189 attackbotsspam
May 15 23:41:56 itv-usvr-02 sshd[21605]: Invalid user deploy from 96.77.182.189 port 49816
May 15 23:41:56 itv-usvr-02 sshd[21605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.77.182.189
May 15 23:41:56 itv-usvr-02 sshd[21605]: Invalid user deploy from 96.77.182.189 port 49816
May 15 23:41:58 itv-usvr-02 sshd[21605]: Failed password for invalid user deploy from 96.77.182.189 port 49816 ssh2
2020-05-16 02:30:43
106.13.90.133 attack
2020-05-15T13:10:32.226155shield sshd\[10013\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.90.133  user=root
2020-05-15T13:10:34.174130shield sshd\[10013\]: Failed password for root from 106.13.90.133 port 41566 ssh2
2020-05-15T13:15:40.223503shield sshd\[11860\]: Invalid user fop2 from 106.13.90.133 port 36024
2020-05-15T13:15:40.227710shield sshd\[11860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.90.133
2020-05-15T13:15:42.125450shield sshd\[11860\]: Failed password for invalid user fop2 from 106.13.90.133 port 36024 ssh2
2020-05-16 02:21:37
103.253.3.214 attack
2020-05-14 13:40:51 server sshd[32192]: Failed password for invalid user jboss from 103.253.3.214 port 52222 ssh2
2020-05-16 02:26:05
218.92.0.168 attackspambots
May 15 17:57:36 localhost sshd[69378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.168  user=root
May 15 17:57:38 localhost sshd[69378]: Failed password for root from 218.92.0.168 port 14184 ssh2
May 15 17:57:42 localhost sshd[69378]: Failed password for root from 218.92.0.168 port 14184 ssh2
May 15 17:57:36 localhost sshd[69378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.168  user=root
May 15 17:57:38 localhost sshd[69378]: Failed password for root from 218.92.0.168 port 14184 ssh2
May 15 17:57:42 localhost sshd[69378]: Failed password for root from 218.92.0.168 port 14184 ssh2
May 15 17:57:36 localhost sshd[69378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.168  user=root
May 15 17:57:38 localhost sshd[69378]: Failed password for root from 218.92.0.168 port 14184 ssh2
May 15 17:57:42 localhost sshd[69378]: Failed password fo
...
2020-05-16 02:40:26
66.241.128.33 attackspam
May 15 14:13:07 tux postfix/smtpd[10524]: connect from smtp1.cogecodata.com[66.241.128.33]
May x@x
May 15 14:13:14 tux postfix/smtpd[10524]: disconnect from smtp1.cogecodata.com[66.241.128.33]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=66.241.128.33
2020-05-16 02:24:24
117.87.219.212 attackbots
SpamScore above: 10.0
2020-05-16 02:42:40
186.225.43.94 attack
Sql/code injection probe
2020-05-16 02:46:51
78.37.17.226 attackbotsspam
Lines containing failures of 78.37.17.226
May 15 14:14:37 shared07 sshd[4205]: Did not receive identification string from 78.37.17.226 port 17253
May 15 14:14:41 shared07 sshd[4216]: Invalid user Adminixxxr from 78.37.17.226 port 11031
May 15 14:14:41 shared07 sshd[4216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.37.17.226
May 15 14:14:43 shared07 sshd[4216]: Failed password for invalid user Adminixxxr from 78.37.17.226 port 11031 ssh2
May 15 14:14:43 shared07 sshd[4216]: Connection closed by invalid user Adminixxxr 78.37.17.226 port 11031 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=78.37.17.226
2020-05-16 02:39:05
40.69.31.204 attackbotsspam
IDS admin
2020-05-16 02:39:31
115.74.215.224 attackspambots
May 15 14:21:21 vps339862 kernel: \[8764197.453185\] \[iptables\] PORT DENIED: IN=eth0 OUT= MAC=fa:16:3e:65:a1:f6:06:39:8f:aa:3b:a2:08:00 SRC=115.74.215.224 DST=51.254.206.43 LEN=52 TOS=0x00 PREC=0x00 TTL=107 ID=15261 DF PROTO=TCP SPT=52213 DPT=8291 SEQ=490590118 ACK=0 WINDOW=8192 RES=0x00 SYN URGP=0 OPT \(020405A00103030801010402\) 
May 15 14:21:24 vps339862 kernel: \[8764200.433833\] \[iptables\] PORT DENIED: IN=eth0 OUT= MAC=fa:16:3e:65:a1:f6:06:39:8f:aa:3b:a2:08:00 SRC=115.74.215.224 DST=51.254.206.43 LEN=52 TOS=0x00 PREC=0x00 TTL=107 ID=15831 DF PROTO=TCP SPT=52473 DPT=8291 SEQ=3455178465 ACK=0 WINDOW=8192 RES=0x00 SYN URGP=0 OPT \(020405A00103030801010402\) 
May 15 14:21:28 vps339862 kernel: \[8764203.748081\] \[iptables\] PORT DENIED: IN=eth0 OUT= MAC=fa:16:3e:65:a1:f6:06:39:8f:aa:3b:a2:08:00 SRC=115.74.215.224 DST=51.254.206.43 LEN=52 TOS=0x00 PREC=0x00 TTL=107 ID=16923 DF PROTO=TCP SPT=53001 DPT=8291 SEQ=921461566 ACK=0 WINDOW=8192 RES=0x00 SYN URGP=0 OPT \(020405A001030308010
...
2020-05-16 02:35:28
122.226.134.39 attack
May 15 12:18:34 game-panel sshd[17261]: Failed password for root from 122.226.134.39 port 20296 ssh2
May 15 12:21:24 game-panel sshd[17413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.226.134.39
May 15 12:21:26 game-panel sshd[17413]: Failed password for invalid user gok from 122.226.134.39 port 28476 ssh2
2020-05-16 02:40:57
64.227.30.91 attackbotsspam
2020-05-15T18:04:35.431907abusebot-4.cloudsearch.cf sshd[4955]: Invalid user aq from 64.227.30.91 port 33530
2020-05-15T18:04:35.438128abusebot-4.cloudsearch.cf sshd[4955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.30.91
2020-05-15T18:04:35.431907abusebot-4.cloudsearch.cf sshd[4955]: Invalid user aq from 64.227.30.91 port 33530
2020-05-15T18:04:38.131399abusebot-4.cloudsearch.cf sshd[4955]: Failed password for invalid user aq from 64.227.30.91 port 33530 ssh2
2020-05-15T18:13:02.187361abusebot-4.cloudsearch.cf sshd[5375]: Invalid user rtkit from 64.227.30.91 port 35336
2020-05-15T18:13:02.196778abusebot-4.cloudsearch.cf sshd[5375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.30.91
2020-05-15T18:13:02.187361abusebot-4.cloudsearch.cf sshd[5375]: Invalid user rtkit from 64.227.30.91 port 35336
2020-05-15T18:13:03.826059abusebot-4.cloudsearch.cf sshd[5375]: Failed password for invalid us
...
2020-05-16 02:31:07
159.203.72.14 attackbots
Invalid user esc from 159.203.72.14 port 54160
2020-05-16 02:50:09
35.231.211.161 attackspam
$f2bV_matches
2020-05-16 02:36:24

最近上报的IP列表

77.79.151.156 77.79.143.112 77.79.133.173 77.79.95.202
77.79.95.201 77.79.68.68 61.172.246.81 193.116.164.84
45.95.168.142 14.226.153.187 5.32.176.111 245.40.177.105
217.208.198.56 35.2.89.9 212.164.65.122 211.143.28.184
107.195.202.48 211.20.234.163 203.130.23.204 87.215.64.226