必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Brazil

运营商(isp): LRF Conections Servicos Ltda ME

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:
类型 评论内容 时间
attack
SSH Brute Force
2019-08-10 11:49:14
相同子网IP讨论:
IP 类型 评论内容 时间
138.0.7.143 attack
Unauthorized IMAP connection attempt
2020-05-17 03:06:35
138.0.7.194 attackspam
Invalid user admin from 138.0.7.194 port 54451
2020-04-21 01:42:46
138.0.7.218 attackspambots
Invalid user admin from 138.0.7.218 port 38529
2020-04-19 02:04:09
138.0.7.150 attackspam
Apr 14 05:45:22 *host* sshd\[19124\]: Invalid user admin from 138.0.7.150 port 49020
2020-04-14 19:52:06
138.0.7.90 attack
$f2bV_matches
2020-02-17 13:05:14
138.0.7.121 attackbots
Brute forcing email accounts
2020-01-26 14:48:03
138.0.7.214 attack
Invalid user admin from 138.0.7.214 port 53649
2020-01-21 23:18:52
138.0.7.129 attackbots
Invalid user admin from 138.0.7.129 port 40582
2020-01-19 03:18:08
138.0.7.228 attack
Unauthorized connection attempt detected from IP address 138.0.7.228 to port 22 [J]
2020-01-18 16:49:05
138.0.7.129 attackspam
Invalid user admin from 138.0.7.129 port 40582
2020-01-18 05:11:30
138.0.7.109 attack
Dec 24 15:35:03 localhost sshd\[1728\]: Invalid user admin from 138.0.7.109 port 38992
Dec 24 15:35:03 localhost sshd\[1728\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.7.109
Dec 24 15:35:05 localhost sshd\[1728\]: Failed password for invalid user admin from 138.0.7.109 port 38992 ssh2
...
2019-12-25 00:50:23
138.0.7.226 attackspam
Oct 27 05:54:12 sauna sshd[16909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.0.7.226
Oct 27 05:54:14 sauna sshd[16909]: Failed password for invalid user admin from 138.0.7.226 port 50611 ssh2
...
2019-10-27 14:43:21
138.0.7.133 attack
Invalid user admin from 138.0.7.133 port 38858
2019-10-11 21:13:11
138.0.7.205 attackspam
Invalid user admin from 138.0.7.205 port 50005
2019-10-11 21:12:56
138.0.7.229 attack
Oct  1 23:26:58 f201 sshd[13257]: Connection closed by 138.0.7.229 [preauth]
Oct  2 02:26:18 f201 sshd[11336]: Connection closed by 138.0.7.229 [preauth]
Oct  2 05:04:31 f201 sshd[18843]: Connection closed by 138.0.7.229 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=138.0.7.229
2019-10-02 15:57:24
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.0.7.135
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51604
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.0.7.135.			IN	A

;; AUTHORITY SECTION:
.			1422	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080902 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 10 11:49:06 CST 2019
;; MSG SIZE  rcvd: 115
HOST信息:
135.7.0.138.in-addr.arpa domain name pointer 138-0-7-135.static.lrfconections.com.br.
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
135.7.0.138.in-addr.arpa	name = 138-0-7-135.static.lrfconections.com.br.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
92.118.160.13 attackspam
Port Scan: Events[1] countPorts[1]: 68 ..
2020-04-18 06:56:02
112.85.42.178 attackbots
Apr 17 19:39:39 firewall sshd[26724]: Failed password for root from 112.85.42.178 port 20268 ssh2
Apr 17 19:39:43 firewall sshd[26724]: Failed password for root from 112.85.42.178 port 20268 ssh2
Apr 17 19:39:46 firewall sshd[26724]: Failed password for root from 112.85.42.178 port 20268 ssh2
...
2020-04-18 06:47:07
196.52.43.66 attackbotsspam
Port Scan: Events[1] countPorts[1]: 4567 ..
2020-04-18 06:49:02
196.52.43.53 attackspambots
Port Scan: Events[1] countPorts[1]: 1025 ..
2020-04-18 06:53:56
62.234.170.99 attackbotsspam
Invalid user huawei from 62.234.170.99 port 50468
2020-04-18 07:17:11
222.186.169.194 attackbots
Apr 18 01:03:00 vpn01 sshd[11632]: Failed password for root from 222.186.169.194 port 39274 ssh2
Apr 18 01:03:03 vpn01 sshd[11632]: Failed password for root from 222.186.169.194 port 39274 ssh2
...
2020-04-18 07:15:22
91.212.38.210 attackbots
Port Scan: Events[1] countPorts[1]: 5060 ..
2020-04-18 06:45:31
128.199.110.156 attackbotsspam
128.199.110.156 - - \[17/Apr/2020:21:20:40 +0200\] "POST /wp-login.php HTTP/1.0" 200 6533 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
128.199.110.156 - - \[17/Apr/2020:21:20:44 +0200\] "POST /wp-login.php HTTP/1.0" 200 6370 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
128.199.110.156 - - \[17/Apr/2020:21:20:45 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-04-18 07:21:59
36.27.29.21 attackbotsspam
Lines containing failures of 36.27.29.21
Apr 17 15:13:12 neweola postfix/smtpd[3171]: connect from unknown[36.27.29.21]
Apr 17 15:13:13 neweola postfix/smtpd[3171]: NOQUEUE: reject: RCPT from unknown[36.27.29.21]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=
Apr 17 15:13:13 neweola postfix/smtpd[3171]: disconnect from unknown[36.27.29.21] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4
Apr 17 15:13:14 neweola postfix/smtpd[3171]: connect from unknown[36.27.29.21]
Apr 17 15:13:15 neweola postfix/smtpd[3171]: lost connection after AUTH from unknown[36.27.29.21]
Apr 17 15:13:15 neweola postfix/smtpd[3171]: disconnect from unknown[36.27.29.21] ehlo=1 auth=0/1 commands=1/2
Apr 17 15:13:15 neweola postfix/smtpd[3171]: connect from unknown[36.27.29.21]
Apr 17 15:13:16 neweola postfix/smtpd[3171]: lost connection after AUTH from unknown[36.27.29.21]
Apr 17 15:13:16 neweola postfix/smtpd[3171]: disconnect from unknown[36.27.29.21] e........
------------------------------
2020-04-18 07:05:04
93.174.93.240 attackspambots
slow and persistent scanner
2020-04-18 07:05:23
77.232.100.223 attackbotsspam
IP blocked
2020-04-18 07:16:08
139.59.135.84 attackspambots
Invalid user cbs from 139.59.135.84 port 58564
2020-04-18 07:10:35
196.52.43.103 attackbots
Port Scan: Events[1] countPorts[1]: 50070 ..
2020-04-18 06:59:49
139.198.11.165 attackbotsspam
Lines containing failures of 139.198.11.165
Apr 17 14:03:56 linuxrulz sshd[29371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.11.165  user=r.r
Apr 17 14:03:58 linuxrulz sshd[29371]: Failed password for r.r from 139.198.11.165 port 42184 ssh2
Apr 17 14:03:59 linuxrulz sshd[29371]: Received disconnect from 139.198.11.165 port 42184:11: Bye Bye [preauth]
Apr 17 14:03:59 linuxrulz sshd[29371]: Disconnected from authenticating user r.r 139.198.11.165 port 42184 [preauth]
Apr 17 14:17:04 linuxrulz sshd[31496]: Invalid user if from 139.198.11.165 port 59258
Apr 17 14:17:04 linuxrulz sshd[31496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.11.165 
Apr 17 14:17:06 linuxrulz sshd[31496]: Failed password for invalid user if from 139.198.11.165 port 59258 ssh2
Apr 17 14:17:07 linuxrulz sshd[31496]: Received disconnect from 139.198.11.165 port 59258:11: Bye Bye [preauth]
Apr 17 14........
------------------------------
2020-04-18 06:45:05
162.243.129.245 attackspam
Port Scan: Events[1] countPorts[1]: 27019 ..
2020-04-18 07:00:15

最近上报的IP列表

79.106.44.2 151.26.34.76 49.89.227.103 165.22.21.221
212.248.9.206 77.42.104.1 49.69.207.39 2.32.251.44
65.241.199.243 88.96.122.55 62.57.6.59 89.43.78.201
47.98.190.113 180.254.153.165 177.8.254.250 77.40.45.211
195.154.38.177 213.252.47.149 170.244.37.225 41.218.224.234