城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 138.68.44.55 | attackspam | 2020-10-08T02:17:38.530793hostname sshd[32013]: Failed password for root from 138.68.44.55 port 50230 ssh2 2020-10-08T02:20:50.966324hostname sshd[821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55 user=root 2020-10-08T02:20:53.269048hostname sshd[821]: Failed password for root from 138.68.44.55 port 47628 ssh2 ... |
2020-10-08 05:19:31 |
| 138.68.44.55 | attack | $f2bV_matches |
2020-10-07 21:43:18 |
| 138.68.44.55 | attackspambots | Oct 7 03:19:27 ns382633 sshd\[23310\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55 user=root Oct 7 03:19:29 ns382633 sshd\[23310\]: Failed password for root from 138.68.44.55 port 34600 ssh2 Oct 7 03:32:01 ns382633 sshd\[25022\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55 user=root Oct 7 03:32:03 ns382633 sshd\[25022\]: Failed password for root from 138.68.44.55 port 47152 ssh2 Oct 7 03:36:05 ns382633 sshd\[25759\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55 user=root |
2020-10-07 13:30:05 |
| 138.68.44.55 | attackspam | 2020-09-24T14:54:46.390798devel sshd[27891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55 2020-09-24T14:54:46.385075devel sshd[27891]: Invalid user arief from 138.68.44.55 port 52716 2020-09-24T14:54:48.629319devel sshd[27891]: Failed password for invalid user arief from 138.68.44.55 port 52716 ssh2 |
2020-09-25 03:49:45 |
| 138.68.44.55 | attackbots | Sep 24 05:23:45 firewall sshd[25140]: Invalid user Administrator from 138.68.44.55 Sep 24 05:23:48 firewall sshd[25140]: Failed password for invalid user Administrator from 138.68.44.55 port 60244 ssh2 Sep 24 05:28:19 firewall sshd[25293]: Invalid user user from 138.68.44.55 ... |
2020-09-24 19:36:58 |
| 138.68.44.55 | attack | (sshd) Failed SSH login from 138.68.44.55 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 15 06:53:46 optimus sshd[19869]: Invalid user mcserver from 138.68.44.55 Sep 15 06:53:46 optimus sshd[19869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55 Sep 15 06:53:48 optimus sshd[19869]: Failed password for invalid user mcserver from 138.68.44.55 port 58078 ssh2 Sep 15 06:57:43 optimus sshd[21202]: Invalid user alfred from 138.68.44.55 Sep 15 06:57:43 optimus sshd[21202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55 |
2020-09-15 20:27:52 |
| 138.68.44.55 | attack | Banned for a week because repeated abuses, for example SSH, but not only |
2020-09-15 12:29:30 |
| 138.68.44.55 | attack | $f2bV_matches |
2020-09-15 04:38:59 |
| 138.68.44.55 | attack | Sep 9 03:41:43 web9 sshd\[8545\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55 user=root Sep 9 03:41:46 web9 sshd\[8545\]: Failed password for root from 138.68.44.55 port 33664 ssh2 Sep 9 03:45:32 web9 sshd\[8965\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55 user=root Sep 9 03:45:33 web9 sshd\[8965\]: Failed password for root from 138.68.44.55 port 39214 ssh2 Sep 9 03:49:22 web9 sshd\[9395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55 user=root |
2020-09-09 21:52:14 |
| 138.68.44.55 | attack | 2020-09-09T11:17:06.575198paragon sshd[259184]: Failed password for invalid user conter from 138.68.44.55 port 36638 ssh2 2020-09-09T11:20:48.403075paragon sshd[259393]: Invalid user admin from 138.68.44.55 port 42688 2020-09-09T11:20:48.407403paragon sshd[259393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55 2020-09-09T11:20:48.403075paragon sshd[259393]: Invalid user admin from 138.68.44.55 port 42688 2020-09-09T11:20:50.465369paragon sshd[259393]: Failed password for invalid user admin from 138.68.44.55 port 42688 ssh2 ... |
2020-09-09 15:40:20 |
| 138.68.44.55 | attackbotsspam | Lines containing failures of 138.68.44.55 (max 1000) Sep 7 02:33:56 archiv sshd[5814]: Invalid user sogo from 138.68.44.55 port 60232 Sep 7 02:33:56 archiv sshd[5814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55 Sep 7 02:33:58 archiv sshd[5814]: Failed password for invalid user sogo from 138.68.44.55 port 60232 ssh2 Sep 7 02:33:58 archiv sshd[5814]: Received disconnect from 138.68.44.55 port 60232:11: Bye Bye [preauth] Sep 7 02:33:58 archiv sshd[5814]: Disconnected from 138.68.44.55 port 60232 [preauth] Sep 7 02:39:20 archiv sshd[5842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55 user=r.r Sep 7 02:39:21 archiv sshd[5842]: Failed password for r.r from 138.68.44.55 port 46094 ssh2 Sep 7 02:39:21 archiv sshd[5842]: Received disconnect from 138.68.44.55 port 46094:11: Bye Bye [preauth] Sep 7 02:39:21 archiv sshd[5842]: Disconnected from 138.68.44.55 por........ ------------------------------ |
2020-09-09 07:49:33 |
| 138.68.44.204 | attackbotsspam | xmlrpc attack |
2020-08-08 08:28:06 |
| 138.68.44.236 | attackbots | Invalid user chenyu from 138.68.44.236 port 54320 |
2020-07-27 07:21:00 |
| 138.68.44.236 | attackspambots | $f2bV_matches |
2020-07-24 21:23:32 |
| 138.68.44.236 | attackspambots | Invalid user carla from 138.68.44.236 port 46422 |
2020-07-18 23:13:46 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.44.164
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45464
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;138.68.44.164. IN A
;; AUTHORITY SECTION:
. 454 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400
;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 11:58:38 CST 2022
;; MSG SIZE rcvd: 106
Host 164.44.68.138.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 164.44.68.138.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 179.162.89.252 | attackspambots | Automatic report - Port Scan Attack |
2019-10-02 04:52:56 |
| 23.129.64.188 | attackbots | Oct 1 19:21:56 rotator sshd\[4142\]: Failed password for root from 23.129.64.188 port 10732 ssh2Oct 1 19:21:59 rotator sshd\[4142\]: Failed password for root from 23.129.64.188 port 10732 ssh2Oct 1 19:22:02 rotator sshd\[4142\]: Failed password for root from 23.129.64.188 port 10732 ssh2Oct 1 19:22:04 rotator sshd\[4142\]: Failed password for root from 23.129.64.188 port 10732 ssh2Oct 1 19:22:08 rotator sshd\[4142\]: Failed password for root from 23.129.64.188 port 10732 ssh2Oct 1 19:22:12 rotator sshd\[4142\]: Failed password for root from 23.129.64.188 port 10732 ssh2 ... |
2019-10-02 04:39:13 |
| 201.249.141.138 | attackbots | 445/tcp 445/tcp [2019-09-28/10-01]2pkt |
2019-10-02 04:12:53 |
| 103.21.148.51 | attackspambots | ssh brute force |
2019-10-02 04:28:58 |
| 80.93.182.145 | attackspambots | Oct 1 06:31:47 server6 sshd[27456]: Address 80.93.182.145 maps to mail.dogpetfish.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 1 06:31:49 server6 sshd[27456]: Failed password for invalid user kennedy from 80.93.182.145 port 54198 ssh2 Oct 1 06:31:49 server6 sshd[27456]: Received disconnect from 80.93.182.145: 11: Bye Bye [preauth] Oct 1 06:49:09 server6 sshd[13960]: Address 80.93.182.145 maps to mail.dogpetfish.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 1 06:49:10 server6 sshd[13960]: Failed password for invalid user alessandro from 80.93.182.145 port 58708 ssh2 Oct 1 06:49:10 server6 sshd[13960]: Received disconnect from 80.93.182.145: 11: Bye Bye [preauth] Oct 1 06:52:48 server6 sshd[17461]: Address 80.93.182.145 maps to mail.dogpetfish.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 1 06:52:49 server6 sshd[17461]: Failed password for invalid user super from........ ------------------------------- |
2019-10-02 04:45:58 |
| 45.136.109.198 | attackspambots | 10/01/2019-15:57:45.348415 45.136.109.198 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2019-10-02 04:30:04 |
| 158.69.222.2 | attack | ssh brute force |
2019-10-02 04:48:15 |
| 138.197.93.133 | attack | Oct 1 19:36:54 tux-35-217 sshd\[7796\]: Invalid user administrator from 138.197.93.133 port 58894 Oct 1 19:36:54 tux-35-217 sshd\[7796\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.93.133 Oct 1 19:36:57 tux-35-217 sshd\[7796\]: Failed password for invalid user administrator from 138.197.93.133 port 58894 ssh2 Oct 1 19:40:35 tux-35-217 sshd\[7823\]: Invalid user more from 138.197.93.133 port 43012 Oct 1 19:40:35 tux-35-217 sshd\[7823\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.93.133 ... |
2019-10-02 04:35:43 |
| 49.88.112.85 | attackspam | SSH Brute Force, server-1 sshd[15666]: Failed password for root from 49.88.112.85 port 37628 ssh2 |
2019-10-02 04:43:32 |
| 119.187.28.233 | attackbotsspam | Oct 1 19:57:50 mail sshd[24439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.187.28.233 Oct 1 19:57:52 mail sshd[24439]: Failed password for invalid user wot from 119.187.28.233 port 48058 ssh2 ... |
2019-10-02 04:14:46 |
| 45.80.64.246 | attackspam | Invalid user hacluster from 45.80.64.246 port 60412 |
2019-10-02 04:23:48 |
| 222.186.175.217 | attackbotsspam | Oct 1 16:31:57 xtremcommunity sshd\[81240\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.217 user=root Oct 1 16:31:59 xtremcommunity sshd\[81240\]: Failed password for root from 222.186.175.217 port 43136 ssh2 Oct 1 16:32:03 xtremcommunity sshd\[81240\]: Failed password for root from 222.186.175.217 port 43136 ssh2 Oct 1 16:32:08 xtremcommunity sshd\[81240\]: Failed password for root from 222.186.175.217 port 43136 ssh2 Oct 1 16:32:12 xtremcommunity sshd\[81240\]: Failed password for root from 222.186.175.217 port 43136 ssh2 ... |
2019-10-02 04:34:44 |
| 119.51.70.227 | attack | Automated reporting of FTP Brute Force |
2019-10-02 04:12:17 |
| 159.203.201.164 | attackspambots | firewall-block, port(s): 3389/tcp |
2019-10-02 04:52:22 |
| 58.16.160.152 | attack | Automated reporting of FTP Brute Force |
2019-10-02 04:27:01 |