必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): unknown

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
138.68.100.102 attackbotsspam
Lines containing failures of 138.68.100.102
Oct  8 08:42:23 newdogma sshd[22234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.100.102  user=r.r
Oct  8 08:42:25 newdogma sshd[22234]: Failed password for r.r from 138.68.100.102 port 36538 ssh2
Oct  8 08:42:26 newdogma sshd[22234]: Received disconnect from 138.68.100.102 port 36538:11: Bye Bye [preauth]
Oct  8 08:42:26 newdogma sshd[22234]: Disconnected from authenticating user r.r 138.68.100.102 port 36538 [preauth]
Oct  8 08:58:51 newdogma sshd[22800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.100.102  user=r.r
Oct  8 08:58:53 newdogma sshd[22800]: Failed password for r.r from 138.68.100.102 port 37066 ssh2
Oct  8 08:58:55 newdogma sshd[22800]: Received disconnect from 138.68.100.102 port 37066:11: Bye Bye [preauth]
Oct  8 08:58:55 newdogma sshd[22800]: Disconnected from authenticating user r.r 138.68.100.102 port 37066........
------------------------------
2020-10-10 02:09:51
138.68.100.102 attackbotsspam
Lines containing failures of 138.68.100.102
Oct  8 08:42:23 newdogma sshd[22234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.100.102  user=r.r
Oct  8 08:42:25 newdogma sshd[22234]: Failed password for r.r from 138.68.100.102 port 36538 ssh2
Oct  8 08:42:26 newdogma sshd[22234]: Received disconnect from 138.68.100.102 port 36538:11: Bye Bye [preauth]
Oct  8 08:42:26 newdogma sshd[22234]: Disconnected from authenticating user r.r 138.68.100.102 port 36538 [preauth]
Oct  8 08:58:51 newdogma sshd[22800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.100.102  user=r.r
Oct  8 08:58:53 newdogma sshd[22800]: Failed password for r.r from 138.68.100.102 port 37066 ssh2
Oct  8 08:58:55 newdogma sshd[22800]: Received disconnect from 138.68.100.102 port 37066:11: Bye Bye [preauth]
Oct  8 08:58:55 newdogma sshd[22800]: Disconnected from authenticating user r.r 138.68.100.102 port 37066........
------------------------------
2020-10-09 17:54:43
138.68.100.212 attack
Brute-force attempt banned
2020-09-07 20:26:45
138.68.100.212 attackbotsspam
Sep  7 04:03:16 *** sshd[24427]: Did not receive identification string from 138.68.100.212
2020-09-07 12:11:36
138.68.100.212 attackbotsspam
2020-09-06T22:49:23.908027amanda2.illicoweb.com sshd\[40741\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.100.212  user=root
2020-09-06T22:49:25.914967amanda2.illicoweb.com sshd\[40741\]: Failed password for root from 138.68.100.212 port 53432 ssh2
2020-09-06T22:49:47.395516amanda2.illicoweb.com sshd\[40757\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.100.212  user=root
2020-09-06T22:49:49.698429amanda2.illicoweb.com sshd\[40757\]: Failed password for root from 138.68.100.212 port 60480 ssh2
2020-09-06T22:50:12.493685amanda2.illicoweb.com sshd\[40767\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.100.212  user=root
...
2020-09-07 04:55:20
138.68.100.204 attack
Jul 26 13:58:49 localhost sshd[2093694]: Unable to negotiate with 138.68.100.204 port 42368: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
...
2020-07-26 12:58:39
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.100.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38590
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.68.100.42.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:50:50 CST 2022
;; MSG SIZE  rcvd: 106
HOST信息:
Host 42.100.68.138.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 42.100.68.138.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
92.63.197.88 attackspam
07/05/2020-09:33:53.472635 92.63.197.88 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-07-05 23:01:32
185.39.11.38 attackbotsspam
firewall-block, port(s): 25702/tcp, 25706/tcp, 25748/tcp, 25784/tcp
2020-07-05 22:32:08
89.248.162.232 attackspam
ET CINS Active Threat Intelligence Poor Reputation IP group 80 - port: 21142 proto: TCP cat: Misc Attack
2020-07-05 22:41:25
45.145.66.104 attackspam
ET CINS Active Threat Intelligence Poor Reputation IP group 25 - port: 3395 proto: TCP cat: Misc Attack
2020-07-05 22:47:35
92.53.65.52 attackbots
ET CINS Active Threat Intelligence Poor Reputation IP group 85 - port: 9108 proto: TCP cat: Misc Attack
2020-07-05 23:04:02
8.34.78.237 attack
Unauthorised access (Jul  5) SRC=8.34.78.237 LEN=40 TOS=0x10 PREC=0x40 TTL=51 ID=42837 TCP DPT=8080 WINDOW=15036 SYN 
Unauthorised access (Jul  4) SRC=8.34.78.237 LEN=40 TOS=0x10 PREC=0x40 TTL=51 ID=8578 TCP DPT=8080 WINDOW=53007 SYN 
Unauthorised access (Jul  2) SRC=8.34.78.237 LEN=40 TOS=0x10 PREC=0x40 TTL=51 ID=51142 TCP DPT=8080 WINDOW=15036 SYN
2020-07-05 22:27:25
45.136.109.158 attackbots
Unauthorized connection attempt detected from IP address 45.136.109.158 to port 4489 [T]
2020-07-05 22:47:55
123.127.226.216 attack
ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic
2020-07-05 22:57:50
83.97.20.31 attackbotsspam
 TCP (SYN) 83.97.20.31:37892 -> port 8080, len 40
2020-07-05 22:42:15
92.63.196.8 attackspam
ET CINS Active Threat Intelligence Poor Reputation IP group 85 - port: 62846 proto: TCP cat: Misc Attack
2020-07-05 22:40:38
51.161.12.231 attackspambots
 TCP (SYN) 51.161.12.231:32767 -> port 8545, len 44
2020-07-05 22:45:55
185.39.11.47 attackspam
Port scan: Attack repeated for 24 hours
2020-07-05 22:54:45
89.34.27.104 attack
3702/udp 19/udp 1900/udp...
[2020-07-03/05]28pkt,8pt.(udp)
2020-07-05 23:05:45
192.241.222.110 attack
ET DROP Dshield Block Listed Source group 1 - port: 3306 proto: TCP cat: Misc Attack
2020-07-05 22:29:15
92.63.197.74 attackbots
07/05/2020-08:57:35.251224 92.63.197.74 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-07-05 22:39:09

最近上报的IP列表

138.68.100.233 138.68.100.69 118.179.31.107 198.37.123.209
118.179.31.166 118.179.31.69 118.179.31.81 138.68.128.137
138.68.128.68 138.68.128.91 138.68.129.106 138.68.128.201
138.68.128.116 10.179.237.108 138.68.128.245 138.68.128.113
138.68.128.94 138.68.13.78 138.68.129.167 138.68.129.219