必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
138.197.94.75 has been banned for [WebApp Attack]
...
2020-03-25 22:50:21
attackbotsspam
138.197.94.75 has been banned for [WebApp Attack]
...
2020-03-21 05:24:39
attackbotsspam
Automatic report - XMLRPC Attack
2019-12-28 14:49:37
attackspam
138.197.94.75 - - [19/Dec/2019:22:35:31 +0000] "POST /wp-login.php HTTP/1.1" 200 6393 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.197.94.75 - - [19/Dec/2019:22:35:32 +0000] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2019-12-20 06:58:58
attackbotsspam
[munged]::443 138.197.94.75 - - [19/Dec/2019:20:56:18 +0100] "POST /[munged]: HTTP/1.1" 200 9083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 138.197.94.75 - - [19/Dec/2019:20:56:21 +0100] "POST /[munged]: HTTP/1.1" 200 9083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 138.197.94.75 - - [19/Dec/2019:20:56:23 +0100] "POST /[munged]: HTTP/1.1" 200 9083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 138.197.94.75 - - [19/Dec/2019:20:56:26 +0100] "POST /[munged]: HTTP/1.1" 200 9083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 138.197.94.75 - - [19/Dec/2019:20:56:28 +0100] "POST /[munged]: HTTP/1.1" 200 9083 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 138.197.94.75 - - [19/Dec/2019:20:56:31 +0100] "POST /[munged]: HTTP/1.1" 200 9083 "-" "Mozilla/5.0 (X11; Ubun
2019-12-20 04:53:21
attackbotsspam
Automatic report - XMLRPC Attack
2019-12-18 18:54:55
attackspam
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
2019-12-12 10:27:38
attack
windhundgang.de 138.197.94.75 [17/Nov/2019:07:28:22 +0100] "POST /wp-login.php HTTP/1.1" 200 8382 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
windhundgang.de 138.197.94.75 [17/Nov/2019:07:28:22 +0100] "POST /xmlrpc.php HTTP/1.1" 200 4186 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-11-17 16:00:33
attackbots
138.197.94.75 - - \[29/Oct/2019:03:58:09 +0000\] "POST /wp-login.php HTTP/1.1" 200 4358 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
138.197.94.75 - - \[29/Oct/2019:03:58:09 +0000\] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
...
2019-10-29 12:37:05
相同子网IP讨论:
IP 类型 评论内容 时间
138.197.94.57 attack
Sep 29 15:16:06 host sshd[18668]: Invalid user wwwdata1 from 138.197.94.57 port 35364
...
2020-09-30 00:26:34
138.197.94.57 attackspam
Sep  9 21:25:11 localhost sshd[32658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.94.57  user=root
Sep  9 21:25:13 localhost sshd[32658]: Failed password for root from 138.197.94.57 port 50262 ssh2
Sep  9 21:28:38 localhost sshd[33038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.94.57  user=root
Sep  9 21:28:41 localhost sshd[33038]: Failed password for root from 138.197.94.57 port 54820 ssh2
Sep  9 21:32:08 localhost sshd[33387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.94.57  user=root
Sep  9 21:32:10 localhost sshd[33387]: Failed password for root from 138.197.94.57 port 59378 ssh2
...
2020-09-10 20:45:21
138.197.94.57 attack
Sep  9 21:25:11 localhost sshd[32658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.94.57  user=root
Sep  9 21:25:13 localhost sshd[32658]: Failed password for root from 138.197.94.57 port 50262 ssh2
Sep  9 21:28:38 localhost sshd[33038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.94.57  user=root
Sep  9 21:28:41 localhost sshd[33038]: Failed password for root from 138.197.94.57 port 54820 ssh2
Sep  9 21:32:08 localhost sshd[33387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.94.57  user=root
Sep  9 21:32:10 localhost sshd[33387]: Failed password for root from 138.197.94.57 port 59378 ssh2
...
2020-09-10 12:31:40
138.197.94.57 attack
Sep  9 18:55:40 localhost sshd[14104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.94.57  user=root
Sep  9 18:55:42 localhost sshd[14104]: Failed password for root from 138.197.94.57 port 42568 ssh2
Sep  9 18:58:54 localhost sshd[14454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.94.57  user=root
Sep  9 18:58:56 localhost sshd[14454]: Failed password for root from 138.197.94.57 port 47128 ssh2
Sep  9 19:02:13 localhost sshd[14888]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.94.57  user=root
Sep  9 19:02:16 localhost sshd[14888]: Failed password for root from 138.197.94.57 port 51686 ssh2
...
2020-09-10 03:20:03
138.197.94.57 attack
Aug 28 14:06:56 home sshd[2034502]: Failed password for invalid user wzy from 138.197.94.57 port 36146 ssh2
Aug 28 14:09:53 home sshd[2035597]: Invalid user commun from 138.197.94.57 port 33356
Aug 28 14:09:53 home sshd[2035597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.94.57 
Aug 28 14:09:53 home sshd[2035597]: Invalid user commun from 138.197.94.57 port 33356
Aug 28 14:09:55 home sshd[2035597]: Failed password for invalid user commun from 138.197.94.57 port 33356 ssh2
...
2020-08-28 20:23:11
138.197.94.57 attack
Invalid user test from 138.197.94.57 port 41024
2020-08-23 01:36:18
138.197.94.57 attackspambots
Aug 14 07:47:33 vpn01 sshd[11366]: Failed password for root from 138.197.94.57 port 42778 ssh2
...
2020-08-14 14:41:30
138.197.94.57 attackspambots
Aug 11 19:21:20 vps46666688 sshd[7244]: Failed password for root from 138.197.94.57 port 53692 ssh2
...
2020-08-12 06:24:34
138.197.94.57 attack
Jul 30 17:19:11 xxxxxxx8 sshd[2472]: Invalid user dove from 138.197.94.57 port 45240
Jul 30 17:19:11 xxxxxxx8 sshd[2472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.94.57
Jul 30 17:19:13 xxxxxxx8 sshd[2472]: Failed password for invalid user dove from 138.197.94.57 port 45240 ssh2
Jul 30 17:24:43 xxxxxxx8 sshd[2788]: Invalid user syy from 138.197.94.57 port 49148
Jul 30 17:24:43 xxxxxxx8 sshd[2788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.94.57
Jul 30 17:24:45 xxxxxxx8 sshd[2788]: Failed password for invalid user syy from 138.197.94.57 port 49148 ssh2
Jul 30 17:28:40 xxxxxxx8 sshd[3079]: Invalid user zhaoshaojing from 138.197.94.57 port 33452
Jul 30 17:28:40 xxxxxxx8 sshd[3079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.94.57
Jul 30 17:28:42 xxxxxxx8 sshd[3079]: Failed password for invalid user zhaoshaojing from........
------------------------------
2020-08-04 21:04:36
138.197.94.57 attackbots
2020-07-31T15:13:17.812020+02:00  sshd[8857]: Failed password for root from 138.197.94.57 port 37694 ssh2
2020-07-31 21:23:35
138.197.94.57 attackspam
This client attempted to login to an administrator account on a Website, or abused from another resource.
2020-07-26 17:00:45
138.197.94.209 attackspambots
C2,WP GET /home/wp-includes/wlwmanifest.xml
2020-07-13 16:36:41
138.197.94.209 attackspambots
miraniessen.de 138.197.94.209 [25/Jun/2020:01:07:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4860 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
MIRANIESSEN.DE 138.197.94.209 [25/Jun/2020:01:07:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4860 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36"
2020-06-25 07:55:52
138.197.94.209 attackbots
ENG,WP GET /v2/wp-includes/wlwmanifest.xml
2020-06-02 00:33:08
138.197.94.164 attack
Mar  4 02:29:33 auw2 sshd\[18620\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.94.164  user=root
Mar  4 02:29:35 auw2 sshd\[18620\]: Failed password for root from 138.197.94.164 port 38928 ssh2
Mar  4 02:29:36 auw2 sshd\[18625\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.94.164  user=root
Mar  4 02:29:38 auw2 sshd\[18625\]: Failed password for root from 138.197.94.164 port 39024 ssh2
Mar  4 02:29:39 auw2 sshd\[18627\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.94.164  user=root
2020-03-04 20:35:50
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.197.94.75
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63582
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.197.94.75.			IN	A

;; AUTHORITY SECTION:
.			233	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102801 1800 900 604800 86400

;; Query time: 112 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 29 12:37:02 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
Host 75.94.197.138.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 75.94.197.138.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
191.8.187.245 attackbotsspam
Aug  5 22:44:23 mail sshd[31631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.8.187.245  user=root
Aug  5 22:44:25 mail sshd[31631]: Failed password for root from 191.8.187.245 port 56528 ssh2
...
2020-08-06 05:57:59
114.6.41.68 attackspambots
DATE:2020-08-05 23:08:07,IP:114.6.41.68,MATCHES:10,PORT:ssh
2020-08-06 06:10:57
152.32.229.63 attackspam
Aug  5 22:27:40 myvps sshd[19319]: Failed password for root from 152.32.229.63 port 45562 ssh2
Aug  5 22:36:39 myvps sshd[25368]: Failed password for root from 152.32.229.63 port 35572 ssh2
...
2020-08-06 06:08:23
94.102.53.112 attack
Aug  6 00:22:33 debian-2gb-nbg1-2 kernel: \[18924612.262920\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=94.102.53.112 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=35027 PROTO=TCP SPT=44873 DPT=14969 WINDOW=1024 RES=0x00 SYN URGP=0
2020-08-06 06:23:22
198.71.239.34 attackbotsspam
This client attempted to login to an administrator account on a Website, or abused from another resource.
2020-08-06 06:02:26
180.76.183.218 attackspam
Aug  5 18:41:53 vps46666688 sshd[26727]: Failed password for root from 180.76.183.218 port 36900 ssh2
...
2020-08-06 06:27:33
141.98.9.160 attack
2020-08-05T21:52:56.269548abusebot-4.cloudsearch.cf sshd[17271]: Invalid user user from 141.98.9.160 port 37343
2020-08-05T21:52:56.276853abusebot-4.cloudsearch.cf sshd[17271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.160
2020-08-05T21:52:56.269548abusebot-4.cloudsearch.cf sshd[17271]: Invalid user user from 141.98.9.160 port 37343
2020-08-05T21:52:58.190670abusebot-4.cloudsearch.cf sshd[17271]: Failed password for invalid user user from 141.98.9.160 port 37343 ssh2
2020-08-05T21:53:21.169887abusebot-4.cloudsearch.cf sshd[17376]: Invalid user guest from 141.98.9.160 port 39167
2020-08-05T21:53:21.176643abusebot-4.cloudsearch.cf sshd[17376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.160
2020-08-05T21:53:21.169887abusebot-4.cloudsearch.cf sshd[17376]: Invalid user guest from 141.98.9.160 port 39167
2020-08-05T21:53:23.857839abusebot-4.cloudsearch.cf sshd[17376]: Failed password 
...
2020-08-06 06:05:19
122.51.147.181 attackspam
Aug  5 23:53:04 rancher-0 sshd[822307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.147.181  user=root
Aug  5 23:53:06 rancher-0 sshd[822307]: Failed password for root from 122.51.147.181 port 55852 ssh2
...
2020-08-06 06:02:50
83.174.221.153 attackspam
RDP Brute-Force
2020-08-06 06:09:36
150.95.31.150 attackspambots
Aug  6 03:39:10 itv-usvr-01 sshd[28278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.95.31.150  user=root
Aug  6 03:39:12 itv-usvr-01 sshd[28278]: Failed password for root from 150.95.31.150 port 60502 ssh2
Aug  6 03:41:51 itv-usvr-01 sshd[28374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.95.31.150  user=root
Aug  6 03:41:53 itv-usvr-01 sshd[28374]: Failed password for root from 150.95.31.150 port 60344 ssh2
Aug  6 03:44:44 itv-usvr-01 sshd[28495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.95.31.150  user=root
Aug  6 03:44:46 itv-usvr-01 sshd[28495]: Failed password for root from 150.95.31.150 port 34222 ssh2
2020-08-06 06:17:11
177.128.216.5 attackbotsspam
Aug  5 22:28:43 xeon sshd[25894]: Failed password for root from 177.128.216.5 port 48697 ssh2
2020-08-06 06:07:32
106.52.209.36 attackspambots
Aug  5 23:54:01 vps647732 sshd[28982]: Failed password for root from 106.52.209.36 port 60978 ssh2
...
2020-08-06 06:00:26
111.230.241.110 attack
Aug  6 00:55:53 hosting sshd[16654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.241.110  user=root
Aug  6 00:55:55 hosting sshd[16654]: Failed password for root from 111.230.241.110 port 56510 ssh2
Aug  6 01:01:51 hosting sshd[17212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.241.110  user=root
Aug  6 01:01:52 hosting sshd[17212]: Failed password for root from 111.230.241.110 port 34708 ssh2
...
2020-08-06 06:13:08
120.70.103.239 attackspambots
Aug  5 16:52:37 NPSTNNYC01T sshd[22098]: Failed password for root from 120.70.103.239 port 55135 ssh2
Aug  5 16:55:50 NPSTNNYC01T sshd[23140]: Failed password for root from 120.70.103.239 port 49998 ssh2
...
2020-08-06 06:16:41
122.114.239.22 attack
Aug  5 21:09:27 plex-server sshd[29095]: Failed password for root from 122.114.239.22 port 38608 ssh2
Aug  5 21:10:39 plex-server sshd[29165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.114.239.22  user=root
Aug  5 21:10:41 plex-server sshd[29165]: Failed password for root from 122.114.239.22 port 53702 ssh2
Aug  5 21:11:53 plex-server sshd[29275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.114.239.22  user=root
Aug  5 21:11:55 plex-server sshd[29275]: Failed password for root from 122.114.239.22 port 40556 ssh2
...
2020-08-06 06:12:00

最近上报的IP列表

95.85.68.110 217.68.209.236 121.159.161.241 198.71.235.15
191.239.252.114 92.118.222.248 157.55.39.184 46.176.237.114
188.72.6.98 98.219.219.29 180.241.137.73 166.106.31.47
202.53.173.138 96.80.240.14 113.173.167.120 59.153.235.9
139.59.42.114 66.85.133.144 66.249.75.206 84.162.142.199