138.94.94.19 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Brazil

运营商(isp): Facilnet Provedor e Servicos Ltda-ME

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Commercial

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Automatic report - Port Scan Attack	2020-07-28 04:58:07

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.94.94.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52709
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.94.94.19.			IN	A

;; AUTHORITY SECTION:
.			121	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020072702 1800 900 604800 86400

;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jul 28 04:58:04 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

Host 19.94.94.138.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 19.94.94.138.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
104.248.147.78	attackspambots	Sep 27 17:51:39 vlre-nyc-1 sshd\[4032\]: Invalid user charlie from 104.248.147.78 Sep 27 17:51:39 vlre-nyc-1 sshd\[4032\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.147.78 Sep 27 17:51:41 vlre-nyc-1 sshd\[4032\]: Failed password for invalid user charlie from 104.248.147.78 port 39384 ssh2 Sep 27 17:55:00 vlre-nyc-1 sshd\[4090\]: Invalid user python from 104.248.147.78 Sep 27 17:55:00 vlre-nyc-1 sshd\[4090\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.147.78 ...	2020-09-28 05:54:43
195.62.46.94	attackbotsspam	389/udp [2020-09-26]1pkt	2020-09-28 06:04:45
212.83.148.177	attackspambots	[2020-09-27 17:36:10] NOTICE[1159] chan_sip.c: Registration from '"128"' failed for '212.83.148.177:3737' - Wrong password [2020-09-27 17:36:10] SECURITY[1198] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-27T17:36:10.350-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="128",SessionID="0x7fcaa0223ec8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.148.177/3737",Challenge="367e8367",ReceivedChallenge="367e8367",ReceivedHash="e2c7eccdc7c5a751f36d9a23def2cabb" [2020-09-27 17:43:52] NOTICE[1159] chan_sip.c: Registration from '"129"' failed for '212.83.148.177:3777' - Wrong password [2020-09-27 17:43:52] SECURITY[1198] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-27T17:43:52.674-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="129",SessionID="0x7fcaa0092e98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83. ...	2020-09-28 05:48:44
122.117.77.22	attack	Unauthorised access (Sep 27) SRC=122.117.77.22 LEN=40 TTL=45 ID=34632 TCP DPT=23 WINDOW=9271 SYN	2020-09-28 05:46:32
154.115.221.225	spambotsattackproxynormal	4994821	2020-09-28 05:51:20
154.115.221.225	spambotsattackproxynormal	4994821	2020-09-28 05:51:10
181.30.28.201	attack	Sep 27 21:15:50 raspberrypi sshd[4593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.30.28.201 Sep 27 21:15:51 raspberrypi sshd[4593]: Failed password for invalid user prova from 181.30.28.201 port 42294 ssh2 ...	2020-09-28 05:57:10
111.172.193.40	attackspam	Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-09-28 05:34:28
40.124.11.135	attack	Sep 27 05:00:49 main sshd[23874]: Failed password for invalid user 244 from 40.124.11.135 port 4045 ssh2	2020-09-28 06:02:36
125.167.98.47	attack	445/tcp [2020-09-26]1pkt	2020-09-28 05:52:08
201.11.70.28	attack	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "ashish" at 2020-09-27T19:16:06Z	2020-09-28 06:03:16
154.115.221.225	spambotsattackproxynormal	4994821	2020-09-28 05:48:11
106.12.117.62	attackbots	$f2bV_matches	2020-09-28 06:05:08
180.245.78.106	attackbotsspam	Invalid user user from 180.245.78.106	2020-09-28 05:39:10
154.221.18.237	attack	Sep 27 18:23:31 prod4 sshd\[7026\]: Invalid user flink from 154.221.18.237 Sep 27 18:23:33 prod4 sshd\[7026\]: Failed password for invalid user flink from 154.221.18.237 port 54504 ssh2 Sep 27 18:27:39 prod4 sshd\[8727\]: Failed password for root from 154.221.18.237 port 33112 ssh2 ...	2020-09-28 05:40:57

最近上报的IP列表

162.252.57.90	106.13.139.79	201.11.248.141	145.51.140.217
79.124.62.59	149.56.23.18	107.173.181.20	46.8.23.52
124.114.120.147	42.159.104.37	190.60.246.71	55.122.203.105
210.22.94.42	113.236.27.207	45.160.233.75	51.210.113.122
112.111.249.31	52.117.124.44	246.44.175.137	115.84.178.225