必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): unknown

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
138.68.134.188 attack
Invalid user peter from 138.68.134.188 port 52192
2020-07-19 02:24:51
138.68.134.188 attack
leo_www
2020-07-13 22:04:41
138.68.134.188 attackbots
Jul 13 00:03:37 PorscheCustomer sshd[9091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.134.188
Jul 13 00:03:40 PorscheCustomer sshd[9091]: Failed password for invalid user sergi from 138.68.134.188 port 58318 ssh2
Jul 13 00:06:49 PorscheCustomer sshd[9221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.134.188
...
2020-07-13 06:15:48
138.68.134.188 attackspambots
DATE:2020-07-11 06:11:54,IP:138.68.134.188,MATCHES:11,PORT:ssh
2020-07-11 12:32:39
138.68.134.188 attackbots
$f2bV_matches
2020-07-04 04:10:04
138.68.13.226 attackspam
Unauthorized connection attempt from IP address 138.68.13.226 on port 3389
2020-05-28 23:04:26
138.68.137.20 attack
Unauthorized connection attempt detected from IP address 138.68.137.20 to port 6765 [T]
2020-04-12 16:10:23
138.68.137.20 attackbots
Brute force attempt
2020-04-09 18:16:43
138.68.13.76 attackbots
Port 22 Scan, PTR: None
2020-04-08 02:35:46
138.68.137.20 attack
Apr  4 06:51:24 site3 sshd\[187581\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.137.20  user=root
Apr  4 06:51:26 site3 sshd\[187581\]: Failed password for root from 138.68.137.20 port 55852 ssh2
Apr  4 06:52:29 site3 sshd\[187593\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.137.20  user=root
Apr  4 06:52:32 site3 sshd\[187593\]: Failed password for root from 138.68.137.20 port 42846 ssh2
Apr  4 06:53:44 site3 sshd\[187603\]: Invalid user admin from 138.68.137.20
...
2020-04-04 17:59:15
138.68.136.152 attackbotsspam
$f2bV_matches
2020-03-18 13:00:56
138.68.136.152 attackbots
Wordpress login scanning
2020-03-18 01:18:28
138.68.13.73 attack
phpunit attack
2020-03-13 18:41:11
138.68.13.73 attackbotsspam
Digital Ocean - should be called Digital Cesspool
//vendor/phpunit/phpunit/phpunit.xsd
2020-03-13 04:51:54
138.68.13.73 attack
Web bot without proper user agent declaration scraping website pages
2020-03-11 12:41:24
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.13.78
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28592
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.68.13.78.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030803 1800 900 604800 86400

;; Query time: 23 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 07:51:10 CST 2022
;; MSG SIZE  rcvd: 105
HOST信息:
Host 78.13.68.138.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 78.13.68.138.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
93.107.168.96 attackbots
Sep 15 14:11:13 ArkNodeAT sshd\[15190\]: Invalid user hong from 93.107.168.96
Sep 15 14:11:13 ArkNodeAT sshd\[15190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.107.168.96
Sep 15 14:11:14 ArkNodeAT sshd\[15190\]: Failed password for invalid user hong from 93.107.168.96 port 55256 ssh2
2019-09-15 21:11:46
91.121.110.97 attackspambots
Invalid user oleta from 91.121.110.97 port 33894
2019-09-15 21:12:20
80.82.65.60 attackbotsspam
Sep 15 14:20:34 relay dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=80.82.65.60, lip=176.9.177.164, session=\
Sep 15 14:20:45 relay dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=80.82.65.60, lip=176.9.177.164, session=\
Sep 15 14:21:01 relay dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 10 secs\): user=\, method=PLAIN, rip=80.82.65.60, lip=176.9.177.164, session=\
Sep 15 14:23:03 relay dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=80.82.65.60, lip=176.9.177.164, session=\
Sep 15 14:25:26 relay dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=
...
2019-09-15 20:39:18
49.88.112.55 attackspambots
2019-09-15T18:16:06.330241enmeeting.mahidol.ac.th sshd\[30270\]: User root from 49.88.112.55 not allowed because not listed in AllowUsers
2019-09-15T18:16:06.735830enmeeting.mahidol.ac.th sshd\[30270\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.55  user=root
2019-09-15T18:16:08.477778enmeeting.mahidol.ac.th sshd\[30270\]: Failed password for invalid user root from 49.88.112.55 port 12791 ssh2
...
2019-09-15 20:40:23
202.114.122.193 attackbots
SSH brutforce
2019-09-15 20:55:10
58.222.107.253 attackspam
Sep 15 13:35:02 nextcloud sshd\[9279\]: Invalid user weblogic from 58.222.107.253
Sep 15 13:35:02 nextcloud sshd\[9279\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.222.107.253
Sep 15 13:35:04 nextcloud sshd\[9279\]: Failed password for invalid user weblogic from 58.222.107.253 port 6460 ssh2
...
2019-09-15 20:25:01
178.128.55.52 attack
Sep 15 12:30:45 XXX sshd[5115]: Invalid user ofsaa from 178.128.55.52 port 46020
2019-09-15 20:34:14
210.242.157.12 attack
SSH Bruteforce attempt
2019-09-15 20:30:16
195.208.116.246 attack
Sep 15 10:19:14 heissa sshd\[15291\]: Invalid user mmills from 195.208.116.246 port 43810
Sep 15 10:19:14 heissa sshd\[15291\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.208.116.246
Sep 15 10:19:16 heissa sshd\[15291\]: Failed password for invalid user mmills from 195.208.116.246 port 43810 ssh2
Sep 15 10:25:20 heissa sshd\[16075\]: Invalid user staff2 from 195.208.116.246 port 45810
Sep 15 10:25:20 heissa sshd\[16075\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.208.116.246
2019-09-15 20:56:42
43.245.218.15 attackbots
KH - 1H : (6)  Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : KH 
 NAME ASN : ASN24492 
 
 IP : 43.245.218.15 
 
 CIDR : 43.245.218.0/24 
 
 PREFIX COUNT : 48 
 
 UNIQUE IP COUNT : 12288 
 
 
 WYKRYTE ATAKI Z ASN24492 :  
  1H - 1 
  3H - 1 
  6H - 2 
 12H - 2 
 24H - 2 
 
 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN  - data recovery 
  https://help-dysk.pl
2019-09-15 21:18:58
142.4.204.122 attack
$f2bV_matches_ltvn
2019-09-15 20:35:37
103.125.191.29 attack
103.125.191.29 - - \[15/Sep/2019:09:33:32 +0200\] "GET / HTTP/1.1" 200 36161 "-" "Mozilla/4.0 \(compatible\; MSIE 5.0\; Windows NT\; DigExt\; DTS Agent"
2019-09-15 20:38:34
51.68.188.67 attack
Sep 15 02:30:44 web9 sshd\[6655\]: Invalid user butter from 51.68.188.67
Sep 15 02:30:44 web9 sshd\[6655\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.188.67
Sep 15 02:30:45 web9 sshd\[6655\]: Failed password for invalid user butter from 51.68.188.67 port 37260 ssh2
Sep 15 02:34:38 web9 sshd\[7607\]: Invalid user happy from 51.68.188.67
Sep 15 02:34:38 web9 sshd\[7607\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.188.67
2019-09-15 20:47:52
139.155.83.106 attackbotsspam
Invalid user suporte from 139.155.83.106 port 55824
2019-09-15 21:03:43
62.169.99.34 attackspam
Sep 14 21:24:09 ingram sshd[28429]: Invalid user sysadmin from 62.169.99.34
Sep 14 21:24:09 ingram sshd[28429]: Failed none for invalid user sysadmin from 62.169.99.34 port 58705 ssh2
Sep 14 21:24:09 ingram sshd[28429]: Failed password for invalid user sysadmin from 62.169.99.34 port 58705 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=62.169.99.34
2019-09-15 21:15:19

最近上报的IP列表

138.68.128.94 138.68.129.167 138.68.129.219 118.179.36.123
138.68.130.246 138.68.130.69 138.68.131.161 138.68.132.156
138.68.131.205 138.68.132.167 138.68.132.43 138.68.132.250
138.68.131.209 138.68.131.163 138.68.130.35 138.68.131.188
138.68.133.169 138.68.133.253 118.179.36.125 138.68.134.58