必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): unknown

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
138.68.191.85 attackproxy
Malicious IP / Malware
2024-04-26 12:55:20
138.68.100.102 attackbotsspam
Lines containing failures of 138.68.100.102
Oct  8 08:42:23 newdogma sshd[22234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.100.102  user=r.r
Oct  8 08:42:25 newdogma sshd[22234]: Failed password for r.r from 138.68.100.102 port 36538 ssh2
Oct  8 08:42:26 newdogma sshd[22234]: Received disconnect from 138.68.100.102 port 36538:11: Bye Bye [preauth]
Oct  8 08:42:26 newdogma sshd[22234]: Disconnected from authenticating user r.r 138.68.100.102 port 36538 [preauth]
Oct  8 08:58:51 newdogma sshd[22800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.100.102  user=r.r
Oct  8 08:58:53 newdogma sshd[22800]: Failed password for r.r from 138.68.100.102 port 37066 ssh2
Oct  8 08:58:55 newdogma sshd[22800]: Received disconnect from 138.68.100.102 port 37066:11: Bye Bye [preauth]
Oct  8 08:58:55 newdogma sshd[22800]: Disconnected from authenticating user r.r 138.68.100.102 port 37066........
------------------------------
2020-10-10 02:09:51
138.68.100.102 attackbotsspam
Lines containing failures of 138.68.100.102
Oct  8 08:42:23 newdogma sshd[22234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.100.102  user=r.r
Oct  8 08:42:25 newdogma sshd[22234]: Failed password for r.r from 138.68.100.102 port 36538 ssh2
Oct  8 08:42:26 newdogma sshd[22234]: Received disconnect from 138.68.100.102 port 36538:11: Bye Bye [preauth]
Oct  8 08:42:26 newdogma sshd[22234]: Disconnected from authenticating user r.r 138.68.100.102 port 36538 [preauth]
Oct  8 08:58:51 newdogma sshd[22800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.100.102  user=r.r
Oct  8 08:58:53 newdogma sshd[22800]: Failed password for r.r from 138.68.100.102 port 37066 ssh2
Oct  8 08:58:55 newdogma sshd[22800]: Received disconnect from 138.68.100.102 port 37066:11: Bye Bye [preauth]
Oct  8 08:58:55 newdogma sshd[22800]: Disconnected from authenticating user r.r 138.68.100.102 port 37066........
------------------------------
2020-10-09 17:54:43
138.68.178.64 attack
Invalid user dev from 138.68.178.64 port 36768
2020-10-05 06:30:12
138.68.178.64 attack
Brute%20Force%20SSH
2020-10-04 22:31:37
138.68.148.177 attack
DATE:2020-10-03 20:05:08, IP:138.68.148.177, PORT:ssh SSH brute force auth (docker-dc)
2020-10-04 04:04:27
138.68.148.177 attackbotsspam
Invalid user web from 138.68.148.177 port 50132
2020-10-03 20:06:41
138.68.150.93 attackspam
138.68.150.93 - - [01/Oct/2020:12:48:02 +0100] "POST /wp-login.php HTTP/1.1" 200 2252 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.150.93 - - [01/Oct/2020:12:48:03 +0100] "POST /wp-login.php HTTP/1.1" 200 2255 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.150.93 - - [01/Oct/2020:12:48:04 +0100] "POST /wp-login.php HTTP/1.1" 200 2204 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-02 05:01:01
138.68.176.38 attackbotsspam
2020-10-01T13:52:46.3242641495-001 sshd[6947]: Invalid user techuser from 138.68.176.38 port 43908
2020-10-01T13:52:47.9374071495-001 sshd[6947]: Failed password for invalid user techuser from 138.68.176.38 port 43908 ssh2
2020-10-01T13:55:43.7073231495-001 sshd[7097]: Invalid user socks from 138.68.176.38 port 56220
2020-10-01T13:55:43.7108621495-001 sshd[7097]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.176.38
2020-10-01T13:55:43.7073231495-001 sshd[7097]: Invalid user socks from 138.68.176.38 port 56220
2020-10-01T13:55:45.6148271495-001 sshd[7097]: Failed password for invalid user socks from 138.68.176.38 port 56220 ssh2
...
2020-10-02 02:31:30
138.68.150.93 attackbotsspam
138.68.150.93 - - [01/Oct/2020:12:48:02 +0100] "POST /wp-login.php HTTP/1.1" 200 2252 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.150.93 - - [01/Oct/2020:12:48:03 +0100] "POST /wp-login.php HTTP/1.1" 200 2255 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.150.93 - - [01/Oct/2020:12:48:04 +0100] "POST /wp-login.php HTTP/1.1" 200 2204 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-01 21:19:24
138.68.150.93 attackbotsspam
138.68.150.93 - - [01/Oct/2020:05:40:26 +0100] "POST /wp-login.php HTTP/1.1" 200 2596 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.150.93 - - [01/Oct/2020:05:40:27 +0100] "POST /wp-login.php HTTP/1.1" 200 2580 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.150.93 - - [01/Oct/2020:05:40:28 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-01 13:34:15
138.68.106.62 attack
[ssh] SSH attack
2020-10-01 02:37:08
138.68.106.62 attackspam
Brute force attempt
2020-09-30 18:46:41
138.68.14.219 attackbots
Invalid user admin from 138.68.14.219 port 50376
2020-09-30 05:38:13
138.68.148.177 attackspambots
2020-09-29T10:39:26.1576871495-001 sshd[4600]: Failed password for invalid user internet from 138.68.148.177 port 58416 ssh2
2020-09-29T10:43:32.3590071495-001 sshd[4775]: Invalid user seco from 138.68.148.177 port 40074
2020-09-29T10:43:32.3619891495-001 sshd[4775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.148.177
2020-09-29T10:43:32.3590071495-001 sshd[4775]: Invalid user seco from 138.68.148.177 port 40074
2020-09-29T10:43:34.4990511495-001 sshd[4775]: Failed password for invalid user seco from 138.68.148.177 port 40074 ssh2
2020-09-29T10:47:48.2306251495-001 sshd[4918]: Invalid user angel from 138.68.148.177 port 49974
...
2020-09-30 05:07:07
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.1.229
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29213
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.68.1.229.			IN	A

;; AUTHORITY SECTION:
.			59	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:50:46 CST 2022
;; MSG SIZE  rcvd: 105
HOST信息:
Host 229.1.68.138.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 229.1.68.138.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
2a00:d680:30:50::67 attackbots
WordPress login Brute force / Web App Attack on client site.
2020-05-20 16:35:43
106.13.41.93 attackspam
2020-05-20T10:17:58.6207581240 sshd\[19666\]: Invalid user gyw from 106.13.41.93 port 54254
2020-05-20T10:17:58.6247971240 sshd\[19666\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.41.93
2020-05-20T10:18:00.7926501240 sshd\[19666\]: Failed password for invalid user gyw from 106.13.41.93 port 54254 ssh2
...
2020-05-20 16:43:38
107.180.71.116 attackbotsspam
Attempt to hack Wordpress Login, XMLRPC or other login
2020-05-20 16:59:23
128.199.218.137 attackbotsspam
 TCP (SYN) 128.199.218.137:56467 -> port 14160, len 44
2020-05-20 16:56:16
2604:a880:800:a1::58:d001 attackspam
WordPress login Brute force / Web App Attack on client site.
2020-05-20 16:48:04
91.121.30.96 attack
May 20 10:37:39 buvik sshd[27532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.30.96
May 20 10:37:42 buvik sshd[27532]: Failed password for invalid user mep from 91.121.30.96 port 39770 ssh2
May 20 10:41:02 buvik sshd[28096]: Invalid user rwu from 91.121.30.96
...
2020-05-20 16:42:35
139.199.25.110 attackspam
202. On May 18 2020 experienced a Brute Force SSH login attempt -> 1 unique times by 139.199.25.110.
2020-05-20 16:47:24
45.172.108.63 attackbots
May 20 17:04:50 web1 sshd[16439]: Invalid user dht from 45.172.108.63 port 46356
May 20 17:04:50 web1 sshd[16439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.172.108.63
May 20 17:04:50 web1 sshd[16439]: Invalid user dht from 45.172.108.63 port 46356
May 20 17:04:52 web1 sshd[16439]: Failed password for invalid user dht from 45.172.108.63 port 46356 ssh2
May 20 17:19:45 web1 sshd[20049]: Invalid user lbf from 45.172.108.63 port 51106
May 20 17:19:45 web1 sshd[20049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.172.108.63
May 20 17:19:45 web1 sshd[20049]: Invalid user lbf from 45.172.108.63 port 51106
May 20 17:19:48 web1 sshd[20049]: Failed password for invalid user lbf from 45.172.108.63 port 51106 ssh2
May 20 17:49:28 web1 sshd[27347]: Invalid user passer from 45.172.108.63 port 60566
...
2020-05-20 16:33:38
222.186.175.154 attack
SSH/22 MH Probe, BF, Hack -
2020-05-20 17:01:56
62.173.147.229 attackbots
[2020-05-20 04:01:49] NOTICE[1157][C-000071d5] chan_sip.c: Call from '' (62.173.147.229:49369) to extension '100501148585359043' rejected because extension not found in context 'public'.
[2020-05-20 04:01:49] SECURITY[1173] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-05-20T04:01:49.295-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="100501148585359043",SessionID="0x7f5f10385c48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.173.147.229/49369",ACLName="no_extension_match"
[2020-05-20 04:05:07] NOTICE[1157][C-000071d9] chan_sip.c: Call from '' (62.173.147.229:62859) to extension '100601148585359043' rejected because extension not found in context 'public'.
[2020-05-20 04:05:07] SECURITY[1173] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-05-20T04:05:07.757-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="100601148585359043",SessionID="0x7f5f1051dd08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAdd
...
2020-05-20 16:35:20
137.119.55.25 attackspambots
197. On May 18 2020 experienced a Brute Force SSH login attempt -> 2 unique times by 137.119.55.25.
2020-05-20 16:51:15
51.91.127.201 attackbots
(sshd) Failed SSH login from 51.91.127.201 (FR/France/201.ip-51-91-127.eu): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 20 10:05:12 ubnt-55d23 sshd[31453]: Invalid user vds from 51.91.127.201 port 37370
May 20 10:05:13 ubnt-55d23 sshd[31453]: Failed password for invalid user vds from 51.91.127.201 port 37370 ssh2
2020-05-20 16:38:13
80.73.91.130 attackspambots
Icarus honeypot on github
2020-05-20 16:40:32
125.27.182.221 attack
182. On May 18 2020 experienced a Brute Force SSH login attempt -> 1 unique times by 125.27.182.221.
2020-05-20 17:01:14
109.93.111.173 attackspambots
Brute forcing RDP port 3389
2020-05-20 16:38:57

最近上报的IP列表

138.68.1.104 138.68.1.223 138.68.10.183 138.68.1.56
138.68.1.233 138.68.10.223 138.68.10.76 138.68.100.13
138.68.100.137 118.179.28.198 138.68.100.159 138.68.100.184
138.68.100.244 138.68.100.233 138.68.100.42 138.68.100.69
118.179.31.107 198.37.123.209 118.179.31.166 118.179.31.69