117.128.68.138

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Mobile

主机名(hostname): unknown

机构(organization): China Mobile Communicaitons Corporation

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.128.68.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17597
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.128.68.138.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019042301 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Wed Apr 24 00:29:59 +08 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 138.68.128.117.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 138.68.128.117.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
177.1.214.84	attackspambots	" "	2020-05-25 14:47:28
106.54.128.79	attackbotsspam	May 25 05:22:54 *** sshd[15076]: User root from 106.54.128.79 not allowed because not listed in AllowUsers	2020-05-25 14:31:13
168.227.183.21	attackbotsspam	/user/login	2020-05-25 14:53:08
145.239.88.43	attack	Automatic report - Banned IP Access	2020-05-25 15:09:02
222.186.175.169	attackspam	May 25 06:58:05 ip-172-31-61-156 sshd[30450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.169 user=root May 25 06:58:07 ip-172-31-61-156 sshd[30450]: Failed password for root from 222.186.175.169 port 22418 ssh2 ...	2020-05-25 14:59:32
104.248.158.95	attackbots	104.248.158.95 - - \[25/May/2020:08:26:33 +0200\] "POST /wp-login.php HTTP/1.0" 200 6728 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 104.248.158.95 - - \[25/May/2020:08:26:37 +0200\] "POST /wp-login.php HTTP/1.0" 200 6558 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 104.248.158.95 - - \[25/May/2020:08:26:40 +0200\] "POST /wp-login.php HTTP/1.0" 200 6552 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2020-05-25 14:51:22
45.55.214.64	attackspambots	May 25 07:55:29 ArkNodeAT sshd\[11062\]: Invalid user j from 45.55.214.64 May 25 07:55:29 ArkNodeAT sshd\[11062\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.214.64 May 25 07:55:31 ArkNodeAT sshd\[11062\]: Failed password for invalid user j from 45.55.214.64 port 37188 ssh2	2020-05-25 14:47:43
202.137.141.45	attackspambots	Unauthorized connection attempt from IP address 202.137.141.45 on Port 445(SMB)	2020-05-25 15:00:32
167.99.75.240	attackbots	May 25 07:55:42 legacy sshd[29027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.75.240 May 25 07:55:44 legacy sshd[29027]: Failed password for invalid user oasys from 167.99.75.240 port 52168 ssh2 May 25 07:59:24 legacy sshd[29130]: Failed password for root from 167.99.75.240 port 48712 ssh2 ...	2020-05-25 14:39:38
213.166.73.27	attack	[MonMay2505:53:13.5656612020][:error][pid25813:tid47395591202560][client213.166.73.27:36921][client213.166.73.27]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch"\\\\\\\\.php"atARGS:img.[file"/usr/local/apache.ea3/conf/modsec_rules/99_asl_jitp.conf"][line"819"][id"337479"][rev"2"][msg"Atomicorp.comWAFRules-VirtualJustInTimePatch:WordpressRevslidernon-imagefiledownloadAttack"][severity"CRITICAL"][hostname"riflessologiaplantare.ch"][uri"/wp-admin/admin-ajax.php"][unique_id"XstBKeUZy-WPTVJZonzc@QAAANg"][MonMay2505:53:15.0500892020][:error][pid25618:tid47395576493824][client213.166.73.27:59789][client213.166.73.27]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch"\\\\\\\\.php"atARGS:img.[file"/usr/local/apache.ea3/conf/modsec_rules/99_asl_jitp.conf"][line"819"][id"337479"][rev"2"][msg"Atomicorp.comWAFRules-VirtualJustInTimePatch:WordpressRevslidernon-imagefiledownloadAttack"][severity"CRITICAL"][hostname"riflessologiaplantare.ch"][uri"/wp-admin/admin-ajax.ph	2020-05-25 14:32:49
203.49.234.122	attack	$f2bV_matches	2020-05-25 15:08:03
139.59.141.196	attackspambots	::ffff:139.59.141.196 - - [25/May/2020:03:45:05 +0200] "www.ruhnke.cloud" "POST /wp-login.php HTTP/1.1" 200 4986 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" ::ffff:139.59.141.196 - - [25/May/2020:03:45:08 +0200] "www.ruhnke.cloud" "POST /xmlrpc.php HTTP/1.1" 200 292 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" ::ffff:139.59.141.196 - - [25/May/2020:03:48:26 +0200] "www.ruhnke.cloud" "POST /wp-login.php HTTP/1.1" 200 4986 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" ::ffff:139.59.141.196 - - [25/May/2020:03:48:28 +0200] "www.ruhnke.cloud" "POST /xmlrpc.php HTTP/1.1" 200 292 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" ::ffff:139.59.141.196 - - [25/May/2020:05:52:18 +0200] "www.ruhnke.cloud" "POST /wp-login.php HTTP/1.1" 200 4980 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" ...	2020-05-25 15:10:20
106.13.93.199	attackbots	May 25 06:51:36 OPSO sshd\[8715\]: Invalid user student6 from 106.13.93.199 port 57576 May 25 06:51:36 OPSO sshd\[8715\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.93.199 May 25 06:51:38 OPSO sshd\[8715\]: Failed password for invalid user student6 from 106.13.93.199 port 57576 ssh2 May 25 06:56:14 OPSO sshd\[9462\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.93.199 user=root May 25 06:56:16 OPSO sshd\[9462\]: Failed password for root from 106.13.93.199 port 54890 ssh2	2020-05-25 14:54:41
185.147.215.8	attackspam	[2020-05-25 02:28:47] NOTICE[1157] chan_sip.c: Registration from '' failed for '185.147.215.8:50801' - Wrong password [2020-05-25 02:28:47] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-25T02:28:47.564-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4909",SessionID="0x7f5f10598fe8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8/50801",Challenge="5a5f6b87",ReceivedChallenge="5a5f6b87",ReceivedHash="6be3ce3138057ab5978947004601fcf5" [2020-05-25 02:29:29] NOTICE[1157] chan_sip.c: Registration from '' failed for '185.147.215.8:51058' - Wrong password [2020-05-25 02:29:29] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-25T02:29:29.873-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4302",SessionID="0x7f5f10678288",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8 ...	2020-05-25 14:42:21
35.224.121.138	attackspambots	May 25 08:24:04 PorscheCustomer sshd[9526]: Failed password for root from 35.224.121.138 port 33600 ssh2 May 25 08:27:32 PorscheCustomer sshd[9651]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.224.121.138 May 25 08:27:34 PorscheCustomer sshd[9651]: Failed password for invalid user marrah from 35.224.121.138 port 39210 ssh2 ...	2020-05-25 14:37:27

最近上报的IP列表

149.200.171.92	191.171.231.85	113.178.34.193	102.61.193.159
66.184.129.237	116.239.0.85	129.174.68.84	211.18.192.38
177.65.157.141	177.125.164.225	110.59.2.217	128.199.75.123
13.250.245.1	221.2.32.63	181.194.29.103	153.112.189.140
114.134.184.48	102.168.45.197	91.134.173.103	12.59.166.202