138.68.13.52 - IPInfo

基本信息:

城市(city): Santa Clara

省份(region): California

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
138.68.134.188	attack	Invalid user peter from 138.68.134.188 port 52192	2020-07-19 02:24:51
138.68.134.188	attack	leo_www	2020-07-13 22:04:41
138.68.134.188	attackbots	Jul 13 00:03:37 PorscheCustomer sshd[9091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.134.188 Jul 13 00:03:40 PorscheCustomer sshd[9091]: Failed password for invalid user sergi from 138.68.134.188 port 58318 ssh2 Jul 13 00:06:49 PorscheCustomer sshd[9221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.134.188 ...	2020-07-13 06:15:48
138.68.134.188	attackspambots	DATE:2020-07-11 06:11:54,IP:138.68.134.188,MATCHES:11,PORT:ssh	2020-07-11 12:32:39
138.68.134.188	attackbots	$f2bV_matches	2020-07-04 04:10:04
138.68.13.226	attackspam	Unauthorized connection attempt from IP address 138.68.13.226 on port 3389	2020-05-28 23:04:26
138.68.137.20	attack	Unauthorized connection attempt detected from IP address 138.68.137.20 to port 6765 [T]	2020-04-12 16:10:23
138.68.137.20	attackbots	Brute force attempt	2020-04-09 18:16:43
138.68.13.76	attackbots	Port 22 Scan, PTR: None	2020-04-08 02:35:46
138.68.137.20	attack	Apr 4 06:51:24 site3 sshd\[187581\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.137.20 user=root Apr 4 06:51:26 site3 sshd\[187581\]: Failed password for root from 138.68.137.20 port 55852 ssh2 Apr 4 06:52:29 site3 sshd\[187593\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.137.20 user=root Apr 4 06:52:32 site3 sshd\[187593\]: Failed password for root from 138.68.137.20 port 42846 ssh2 Apr 4 06:53:44 site3 sshd\[187603\]: Invalid user admin from 138.68.137.20 ...	2020-04-04 17:59:15
138.68.136.152	attackbotsspam	$f2bV_matches	2020-03-18 13:00:56
138.68.136.152	attackbots	Wordpress login scanning	2020-03-18 01:18:28
138.68.13.73	attack	phpunit attack	2020-03-13 18:41:11
138.68.13.73	attackbotsspam	Digital Ocean - should be called Digital Cesspool //vendor/phpunit/phpunit/phpunit.xsd	2020-03-13 04:51:54
138.68.13.73	attack	Web bot without proper user agent declaration scraping website pages	2020-03-11 12:41:24

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.13.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14350
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.68.13.52.			IN	A

;; AUTHORITY SECTION:
.			285	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023061400 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 14 23:02:41 CST 2023
;; MSG SIZE  rcvd: 105

HOST信息:

Host 52.13.68.138.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 52.13.68.138.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
139.59.89.7	attackspam	Oct 8 21:16:56 xxxxxxx0 sshd[29683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.89.7 user=r.r Oct 8 21:16:58 xxxxxxx0 sshd[29683]: Failed password for r.r from 139.59.89.7 port 55626 ssh2 Oct 8 21:31:10 xxxxxxx0 sshd[31954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.89.7 user=r.r Oct 8 21:31:12 xxxxxxx0 sshd[31954]: Failed password for r.r from 139.59.89.7 port 38212 ssh2 Oct 8 21:35:37 xxxxxxx0 sshd[300]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.89.7 user=r.r ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=139.59.89.7	2019-10-14 02:01:26
114.98.239.5	attack	Oct 13 12:13:08 plusreed sshd[4105]: Invalid user Qwerty321 from 114.98.239.5 ...	2019-10-14 01:52:52
128.199.243.138	attackbotsspam	Invalid user 123 from 128.199.243.138 port 46260	2019-10-14 02:22:10
201.49.127.212	attackspambots	Oct 13 14:15:23 firewall sshd[20095]: Invalid user 123Apple from 201.49.127.212 Oct 13 14:15:25 firewall sshd[20095]: Failed password for invalid user 123Apple from 201.49.127.212 port 56886 ssh2 Oct 13 14:19:23 firewall sshd[20212]: Invalid user Automatique2017 from 201.49.127.212 ...	2019-10-14 02:08:22
181.40.122.2	attackbots	2019-10-13T18:09:25.388132abusebot-8.cloudsearch.cf sshd\[17417\]: Invalid user Admin@1 from 181.40.122.2 port 3194	2019-10-14 02:26:37
158.69.241.207	attack	\[2019-10-13 13:50:17\] SECURITY\[1898\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-13T13:50:17.257-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441923937030",SessionID="0x7fc3ac2ed548",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/158.69.241.207/54838",ACLName="no_extension_match" \[2019-10-13 13:52:15\] SECURITY\[1898\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-13T13:52:15.537-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011441923937030",SessionID="0x7fc3acc3d768",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/158.69.241.207/54891",ACLName="no_extension_match" \[2019-10-13 13:54:13\] SECURITY\[1898\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-10-13T13:54:13.062-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="001441923937030",SessionID="0x7fc3ac5226d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/158.69.241.207/52826",ACLName="no	2019-10-14 02:02:31
62.216.233.132	attack	2019-10-13T12:47:54.587364hub.schaetter.us sshd\[14323\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.216.233.132 user=root 2019-10-13T12:47:56.503261hub.schaetter.us sshd\[14323\]: Failed password for root from 62.216.233.132 port 18291 ssh2 2019-10-13T12:51:14.929677hub.schaetter.us sshd\[14364\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.216.233.132 user=root 2019-10-13T12:51:17.303079hub.schaetter.us sshd\[14364\]: Failed password for root from 62.216.233.132 port 8053 ssh2 2019-10-13T12:54:42.791844hub.schaetter.us sshd\[14403\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.216.233.132 user=root ...	2019-10-14 02:12:04
182.227.25.26	attackspam	$f2bV_matches	2019-10-14 02:07:40
185.88.196.30	attackspam	2019-10-13T11:47:34.211583abusebot-5.cloudsearch.cf sshd\[5487\]: Invalid user test from 185.88.196.30 port 28370	2019-10-14 01:55:55
193.32.160.136	attackbots	Oct 13 19:41:06 relay postfix/smtpd\[22075\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.136\]: 554 5.7.1 \: Relay access denied\; from=\<03kqhzkm369t650x@orenschool.ru\> to=\ proto=ESMTP helo=\<\[193.32.160.142\]\> Oct 13 19:41:06 relay postfix/smtpd\[22075\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.136\]: 554 5.7.1 \: Relay access denied\; from=\<03kqhzkm369t650x@orenschool.ru\> to=\ proto=ESMTP helo=\<\[193.32.160.142\]\> Oct 13 19:41:06 relay postfix/smtpd\[22075\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.136\]: 554 5.7.1 \: Relay access denied\; from=\<03kqhzkm369t650x@orenschool.ru\> to=\ proto=ESMTP helo=\<\[193.32.160.142\]\> Oct 13 19:41:06 relay postfix/smtpd\[22075\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.136\]: 554 5.7.1 \	2019-10-14 02:05:09
37.57.146.221	attackspambots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/37.57.146.221/ UA - 1H : (31) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : UA NAME ASN : ASN13188 IP : 37.57.146.221 CIDR : 37.57.146.0/24 PREFIX COUNT : 1599 UNIQUE IP COUNT : 409344 WYKRYTE ATAKI Z ASN13188 : 1H - 1 3H - 1 6H - 1 12H - 3 24H - 3 DateTime : 2019-10-13 13:47:45 INFO : Port SERVER 80 Scan Detected and Blocked by ADMIN - data recovery	2019-10-14 01:52:34
129.211.125.143	attack	Oct 13 07:28:26 sachi sshd\[27307\]: Invalid user Root123qwe from 129.211.125.143 Oct 13 07:28:26 sachi sshd\[27307\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.125.143 Oct 13 07:28:28 sachi sshd\[27307\]: Failed password for invalid user Root123qwe from 129.211.125.143 port 46322 ssh2 Oct 13 07:33:43 sachi sshd\[27760\]: Invalid user Root123qwe from 129.211.125.143 Oct 13 07:33:43 sachi sshd\[27760\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.125.143	2019-10-14 01:46:44
222.233.53.132	attackspambots	2019-10-13T18:13:27.896713abusebot-3.cloudsearch.cf sshd\[14652\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.233.53.132 user=root	2019-10-14 02:28:02
119.29.170.170	attackbots	SSH authentication failure x 6 reported by Fail2Ban ...	2019-10-14 02:06:15
81.196.228.29	attackspam	" "	2019-10-14 02:26:23

最近上报的IP列表

1.219.251.129	194.26.135.118	178.214.220.106	15.230.152.57
118.179.129.113	209.148.57.170	166.49.246.110	131.72.69.133
34.201.15.254	47.184.184.187	137.205.89.216	67.254.191.150
15.188.60.30	45.226.193.75	46.162.7.153	68.183.203.199
200.175.5.139	39.131.145.167	87.98.167.145	87.98.167.242