必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Toronto

省份(region): Ontario

国家(country): Canada

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspambots
Sep  4 13:08:14 sigma sshd\[10630\]: Failed password for root from 138.197.130.138 port 42912 ssh2Sep  4 13:16:52 sigma sshd\[11175\]: Invalid user cactiuser from 138.197.130.138
...
2020-09-04 23:16:07
attackspambots
2020-09-04T08:17:48+0200 Failed SSH Authentication/Brute Force Attack. (Server 9)
2020-09-04 14:47:52
attackspambots
Sep  4 00:58:50 inter-technics sshd[15068]: Invalid user openlava from 138.197.130.138 port 40176
Sep  4 00:58:50 inter-technics sshd[15068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138
Sep  4 00:58:50 inter-technics sshd[15068]: Invalid user openlava from 138.197.130.138 port 40176
Sep  4 00:58:52 inter-technics sshd[15068]: Failed password for invalid user openlava from 138.197.130.138 port 40176 ssh2
Sep  4 01:01:59 inter-technics sshd[15248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138  user=root
Sep  4 01:02:01 inter-technics sshd[15248]: Failed password for root from 138.197.130.138 port 52128 ssh2
...
2020-09-04 07:11:47
attackspam
Aug 29 15:01:07 vps647732 sshd[32382]: Failed password for root from 138.197.130.138 port 46624 ssh2
...
2020-08-29 22:57:42
attackspambots
2020-08-20T04:52:58.084834linuxbox-skyline sshd[15626]: Invalid user teamspeak from 138.197.130.138 port 47936
...
2020-08-20 18:54:49
attackspam
Aug  4 11:17:58 abendstille sshd\[5651\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138  user=root
Aug  4 11:18:01 abendstille sshd\[5651\]: Failed password for root from 138.197.130.138 port 57802 ssh2
Aug  4 11:22:35 abendstille sshd\[9924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138  user=root
Aug  4 11:22:37 abendstille sshd\[9924\]: Failed password for root from 138.197.130.138 port 41574 ssh2
Aug  4 11:27:18 abendstille sshd\[14848\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138  user=root
...
2020-08-04 18:41:57
attack
Total attacks: 2
2020-07-19 19:24:16
attackbotsspam
Invalid user shu from 138.197.130.138 port 51326
2020-07-19 01:07:55
attack
Invalid user direccion from 138.197.130.138 port 51756
2020-07-14 19:17:53
attack
Brute-force attempt banned
2020-07-08 09:51:15
attack
Jul  3 21:19:50 scw-6657dc sshd[18044]: Failed password for root from 138.197.130.138 port 46520 ssh2
Jul  3 21:19:50 scw-6657dc sshd[18044]: Failed password for root from 138.197.130.138 port 46520 ssh2
Jul  3 21:21:18 scw-6657dc sshd[18104]: Invalid user takahashi from 138.197.130.138 port 37902
...
2020-07-04 05:55:11
attack
2020-06-25T12:20:59+0000 Failed SSH Authentication/Brute Force Attack. (Server 6)
2020-06-26 04:02:33
attackspambots
2020-06-15T22:31:29.824125amanda2.illicoweb.com sshd\[5141\]: Invalid user git from 138.197.130.138 port 43666
2020-06-15T22:31:29.826967amanda2.illicoweb.com sshd\[5141\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138
2020-06-15T22:31:31.864776amanda2.illicoweb.com sshd\[5141\]: Failed password for invalid user git from 138.197.130.138 port 43666 ssh2
2020-06-15T22:41:03.012389amanda2.illicoweb.com sshd\[5690\]: Invalid user lcy from 138.197.130.138 port 46086
2020-06-15T22:41:03.015131amanda2.illicoweb.com sshd\[5690\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138
...
2020-06-16 08:18:27
attackbotsspam
2020-06-05T20:39:29.283845sd-86998 sshd[5036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138  user=root
2020-06-05T20:39:31.297466sd-86998 sshd[5036]: Failed password for root from 138.197.130.138 port 51974 ssh2
2020-06-05T20:43:48.307136sd-86998 sshd[6107]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138  user=root
2020-06-05T20:43:50.210712sd-86998 sshd[6107]: Failed password for root from 138.197.130.138 port 47106 ssh2
2020-06-05T20:45:26.958146sd-86998 sshd[6513]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138  user=root
2020-06-05T20:45:28.981173sd-86998 sshd[6513]: Failed password for root from 138.197.130.138 port 37648 ssh2
...
2020-06-06 02:55:45
attackspam
May 24 14:09:09 plex sshd[14849]: Invalid user urd from 138.197.130.138 port 48378
May 24 14:09:09 plex sshd[14849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138
May 24 14:09:09 plex sshd[14849]: Invalid user urd from 138.197.130.138 port 48378
May 24 14:09:11 plex sshd[14849]: Failed password for invalid user urd from 138.197.130.138 port 48378 ssh2
May 24 14:13:26 plex sshd[14923]: Invalid user lvv from 138.197.130.138 port 54808
2020-05-24 22:59:53
attackspam
May 11 07:50:06 server1 sshd\[28504\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138  user=ubuntu
May 11 07:50:08 server1 sshd\[28504\]: Failed password for ubuntu from 138.197.130.138 port 60216 ssh2
May 11 07:54:11 server1 sshd\[29808\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.130.138  user=root
May 11 07:54:13 server1 sshd\[29808\]: Failed password for root from 138.197.130.138 port 42014 ssh2
May 11 07:58:23 server1 sshd\[31229\]: Invalid user alex from 138.197.130.138
...
2020-05-11 22:25:56
attackspam
$f2bV_matches
2020-05-08 20:01:13
attack
Unauthorized access or intrusion attempt detected from Thor banned IP
2020-05-06 06:00:05
相同子网IP讨论:
IP 类型 评论内容 时间
138.197.130.225 attack
xmlrpc attack
2019-12-26 04:17:35
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.197.130.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42362
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.197.130.138.		IN	A

;; AUTHORITY SECTION:
.			511	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050502 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 06 06:00:02 CST 2020
;; MSG SIZE  rcvd: 119
HOST信息:
138.130.197.138.in-addr.arpa domain name pointer shitcointopia-grana.com.py-clima.grana.com.py.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
138.130.197.138.in-addr.arpa	name = shitcointopia-grana.com.py-clima.grana.com.py.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
95.167.39.12 attackspambots
2020-06-08T05:43:19.217194amanda2.illicoweb.com sshd\[3607\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.167.39.12  user=root
2020-06-08T05:43:21.191137amanda2.illicoweb.com sshd\[3607\]: Failed password for root from 95.167.39.12 port 53814 ssh2
2020-06-08T05:48:01.698694amanda2.illicoweb.com sshd\[3775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.167.39.12  user=root
2020-06-08T05:48:03.722376amanda2.illicoweb.com sshd\[3775\]: Failed password for root from 95.167.39.12 port 51968 ssh2
2020-06-08T05:49:27.573225amanda2.illicoweb.com sshd\[3790\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.167.39.12  user=root
...
2020-06-08 16:47:12
51.91.11.62 attackspambots
Jun  8 15:02:04 webhost01 sshd[27707]: Failed password for root from 51.91.11.62 port 59376 ssh2
...
2020-06-08 16:32:47
93.241.77.57 attack
Hits on port : 445(x2)
2020-06-08 17:03:41
61.140.220.62 attack
Jun  8 10:49:18 legacy sshd[24619]: Failed password for root from 61.140.220.62 port 54763 ssh2
Jun  8 10:51:50 legacy sshd[24745]: Failed password for root from 61.140.220.62 port 55284 ssh2
...
2020-06-08 16:54:32
211.169.234.55 attackbots
Jun  8 06:50:47 * sshd[29932]: Failed password for root from 211.169.234.55 port 38062 ssh2
2020-06-08 16:45:00
85.238.101.190 attack
Jun  7 23:47:07 euve59663 sshd[27780]: pam_unix(sshd:auth): authenticat=
ion failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D85-=
238-101-190.broadband.tenet.odessa.ua  user=3Dr.r
Jun  7 23:47:09 euve59663 sshd[27780]: Failed password for r.r from 85=
.238.101.190 port 45994 ssh2
Jun  7 23:47:09 euve59663 sshd[27780]: Received disconnect from 85.238.=
101.190: 11: Bye Bye [preauth]
Jun  7 23:50:43 euve59663 sshd[27872]: pam_unix(sshd:auth): authenticat=
ion failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D85-=
238-101-190.broadband.tenet.odessa.ua  user=3Dr.r
Jun  7 23:50:45 euve59663 sshd[27872]: Failed password for r.r from 85=
.238.101.190 port 49142 ssh2
Jun  7 23:50:45 euve59663 sshd[27872]: Received disconnect from 85.238.=
101.190: 11: Bye Bye [preauth]
Jun  7 23:53:37 euve59663 sshd[27929]: pam_unix(sshd:auth): authenticat=
ion failure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D85-=
238-101-190.broadband.tenet.odessa.u........
-------------------------------
2020-06-08 16:26:06
106.54.119.121 attack
$f2bV_matches
2020-06-08 16:44:09
49.235.193.207 attack
Jun  8 05:09:08 xxxxxxx sshd[7233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.193.207  user=r.r
Jun  8 05:09:11 xxxxxxx sshd[7233]: Failed password for r.r from 49.235.193.207 port 50396 ssh2
Jun  8 05:09:11 xxxxxxx sshd[7233]: Received disconnect from 49.235.193.207: 11: Bye Bye [preauth]
Jun  8 05:28:24 xxxxxxx sshd[16981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.193.207  user=r.r
Jun  8 05:28:26 xxxxxxx sshd[16981]: Failed password for r.r from 49.235.193.207 port 37398 ssh2
Jun  8 05:28:26 xxxxxxx sshd[16981]: Received disconnect from 49.235.193.207: 11: Bye Bye [preauth]
Jun  8 05:33:06 xxxxxxx sshd[17788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.193.207  user=r.r
Jun  8 05:33:07 xxxxxxx sshd[17788]: Failed password for r.r from 49.235.193.207 port 60244 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en
2020-06-08 16:32:11
212.64.71.173 attackspambots
Brute-force attempt banned
2020-06-08 16:21:05
222.186.180.8 attackbots
Jun  8 10:24:30 PorscheCustomer sshd[15865]: Failed password for root from 222.186.180.8 port 8898 ssh2
Jun  8 10:24:34 PorscheCustomer sshd[15865]: Failed password for root from 222.186.180.8 port 8898 ssh2
Jun  8 10:24:37 PorscheCustomer sshd[15865]: Failed password for root from 222.186.180.8 port 8898 ssh2
Jun  8 10:24:40 PorscheCustomer sshd[15865]: Failed password for root from 222.186.180.8 port 8898 ssh2
...
2020-06-08 16:34:51
27.59.131.128 attackspam
1591588176 - 06/08/2020 05:49:36 Host: 27.59.131.128/27.59.131.128 Port: 445 TCP Blocked
2020-06-08 16:39:46
173.219.87.30 attackspam
Jun  8 06:04:19 hcbbdb sshd\[14920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.loganpride.com  user=root
Jun  8 06:04:21 hcbbdb sshd\[14920\]: Failed password for root from 173.219.87.30 port 13120 ssh2
Jun  8 06:07:58 hcbbdb sshd\[15316\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.loganpride.com  user=root
Jun  8 06:08:01 hcbbdb sshd\[15316\]: Failed password for root from 173.219.87.30 port 58396 ssh2
Jun  8 06:11:34 hcbbdb sshd\[15643\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.loganpride.com  user=root
2020-06-08 16:32:26
118.89.161.136 attack
Jun  8 08:09:45 * sshd[5895]: Failed password for root from 118.89.161.136 port 45526 ssh2
2020-06-08 16:46:28
220.134.181.2 attackbotsspam
 TCP (SYN) 220.134.181.2:54950 -> port 8080, len 40
2020-06-08 16:42:00
106.54.205.236 attackbotsspam
Lines containing failures of 106.54.205.236
Jun  8 03:27:56 supported sshd[14838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.205.236  user=r.r
Jun  8 03:27:58 supported sshd[14838]: Failed password for r.r from 106.54.205.236 port 44818 ssh2
Jun  8 03:28:01 supported sshd[14838]: Received disconnect from 106.54.205.236 port 44818:11: Bye Bye [preauth]
Jun  8 03:28:01 supported sshd[14838]: Disconnected from authenticating user r.r 106.54.205.236 port 44818 [preauth]
Jun  8 03:39:10 supported sshd[16619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.205.236  user=r.r
Jun  8 03:39:11 supported sshd[16619]: Failed password for r.r from 106.54.205.236 port 53764 ssh2
Jun  8 03:39:13 supported sshd[16619]: Received disconnect from 106.54.205.236 port 53764:11: Bye Bye [preauth]
Jun  8 03:39:13 supported sshd[16619]: Disconnected from authenticating user r.r 106.54.205.236 po........
------------------------------
2020-06-08 16:40:53

最近上报的IP列表

10.12.26.49 39.26.104.165 196.52.84.4 76.99.110.131
67.254.144.12 107.122.192.17 94.81.45.44 103.65.183.82
20.157.80.48 175.172.160.150 67.6.21.52 183.51.28.97
70.125.51.31 49.43.42.108 70.193.212.3 159.83.170.68
200.166.110.15 187.176.65.152 152.75.219.70 154.235.125.161