138.68.14.219 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Invalid user admin from 138.68.14.219 port 50376	2020-09-30 05:38:13
attack	Invalid user admin from 138.68.14.219 port 50376	2020-09-29 21:48:14
attackspambots	Invalid user admin from 138.68.14.219 port 50376	2020-09-29 14:05:01
attackbots	Invalid user admin from 138.68.14.219 port 50376	2020-09-28 20:35:33
attackspam	TCP (SYN) 138.68.14.219:60839 -> port 22, len 48	2020-09-28 12:42:01

相同子网IP讨论:

IP	类型	评论内容	时间
138.68.148.177	attack	DATE:2020-10-03 20:05:08, IP:138.68.148.177, PORT:ssh SSH brute force auth (docker-dc)	2020-10-04 04:04:27
138.68.148.177	attackbotsspam	Invalid user web from 138.68.148.177 port 50132	2020-10-03 20:06:41
138.68.148.177	attackspambots	2020-09-29T10:39:26.1576871495-001 sshd[4600]: Failed password for invalid user internet from 138.68.148.177 port 58416 ssh2 2020-09-29T10:43:32.3590071495-001 sshd[4775]: Invalid user seco from 138.68.148.177 port 40074 2020-09-29T10:43:32.3619891495-001 sshd[4775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.148.177 2020-09-29T10:43:32.3590071495-001 sshd[4775]: Invalid user seco from 138.68.148.177 port 40074 2020-09-29T10:43:34.4990511495-001 sshd[4775]: Failed password for invalid user seco from 138.68.148.177 port 40074 ssh2 2020-09-29T10:47:48.2306251495-001 sshd[4918]: Invalid user angel from 138.68.148.177 port 49974 ...	2020-09-30 05:07:07
138.68.148.177	attack	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-29T12:35:10Z and 2020-09-29T12:47:41Z	2020-09-29 21:16:31
138.68.148.177	attackspambots	Invalid user web from 138.68.148.177 port 50132	2020-09-29 13:30:07
138.68.148.177	attackspambots	2020-09-20 11:26:01.404448-0500 localhost sshd[50098]: Failed password for root from 138.68.148.177 port 36968 ssh2	2020-09-21 01:07:52
138.68.148.177	attack	Sep 20 08:53:22 email sshd\[14903\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.148.177 user=root Sep 20 08:53:24 email sshd\[14903\]: Failed password for root from 138.68.148.177 port 41796 ssh2 Sep 20 08:57:55 email sshd\[15670\]: Invalid user dstserver from 138.68.148.177 Sep 20 08:57:55 email sshd\[15670\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.148.177 Sep 20 08:57:57 email sshd\[15670\]: Failed password for invalid user dstserver from 138.68.148.177 port 53046 ssh2 ...	2020-09-20 17:04:15
138.68.148.177	attackspambots	[f2b] sshd bruteforce, retries: 1	2020-09-15 02:31:35
138.68.148.177	attackbots	$f2bV_matches	2020-09-14 18:17:49
138.68.148.177	attackbots	SSH Invalid Login	2020-08-20 06:15:56
138.68.148.177	attack	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-08-08T03:43:35Z and 2020-08-08T03:53:21Z	2020-08-08 17:24:00
138.68.148.177	attack	SSH Brute Force	2020-08-06 20:13:40
138.68.148.177	attackspam	Aug 2 13:48:42 vpn01 sshd[1565]: Failed password for root from 138.68.148.177 port 45518 ssh2 ...	2020-08-03 04:25:54
138.68.148.177	attack	Jul 24 16:27:52 rancher-0 sshd[554547]: Invalid user dky from 138.68.148.177 port 42582 Jul 24 16:27:55 rancher-0 sshd[554547]: Failed password for invalid user dky from 138.68.148.177 port 42582 ssh2 ...	2020-07-24 22:44:04
138.68.148.177	attackspam	Jul 24 05:21:22 scw-tender-jepsen sshd[17464]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.148.177 Jul 24 05:21:24 scw-tender-jepsen sshd[17464]: Failed password for invalid user refat from 138.68.148.177 port 54928 ssh2	2020-07-24 14:59:27

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.14.219
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23925
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.14.219.			IN	A

;; AUTHORITY SECTION:
.			575	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020092701 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 28 12:41:52 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 219.14.68.138.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 219.14.68.138.in-addr.arpa: NXDOMAIN

IP	类型	评论内容	时间
79.126.115.160	attackbots	20/3/22@08:56:58: FAIL: Alarm-Network address from=79.126.115.160 ...	2020-03-23 04:53:14
50.23.2.38	attackspam	Unauthorized connection attempt detected from IP address 50.23.2.38 to port 445	2020-03-23 04:37:23
196.202.121.194	attackbotsspam	Unauthorized connection attempt from IP address 196.202.121.194 on Port 445(SMB)	2020-03-23 04:53:28
162.247.73.192	attackbotsspam	$f2bV_matches	2020-03-23 04:54:51
37.15.158.203	attack	Automatic report - Port Scan Attack	2020-03-23 04:27:53
82.138.50.172	attackbotsspam	Unauthorized connection attempt detected from IP address 82.138.50.172 to port 445	2020-03-23 04:50:02
124.123.34.179	attackbotsspam	Honeypot attack, port: 81, PTR: broadband.actcorp.in.	2020-03-23 04:44:27
103.25.248.241	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-03-23 05:02:37
106.13.232.184	attackbotsspam	$f2bV_matches	2020-03-23 04:41:19
198.98.52.141	attackbotsspam	22.03.2020 17:33:34 Connection to port 8080 blocked by firewall	2020-03-23 04:59:06
1.52.244.126	attackspam	1584881801 - 03/22/2020 13:56:41 Host: 1.52.244.126/1.52.244.126 Port: 445 TCP Blocked	2020-03-23 05:01:30
117.160.141.43	attackspam	Mar 22 20:31:55 vpn01 sshd[31461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.160.141.43 Mar 22 20:31:57 vpn01 sshd[31461]: Failed password for invalid user bismarck from 117.160.141.43 port 54780 ssh2 ...	2020-03-23 05:00:59
217.182.169.183	attackbotsspam	2020-03-22T09:10:12.877364sorsha.thespaminator.com sshd[18231]: Invalid user weizeding from 217.182.169.183 port 38848 2020-03-22T09:10:14.624152sorsha.thespaminator.com sshd[18231]: Failed password for invalid user weizeding from 217.182.169.183 port 38848 ssh2 ...	2020-03-23 04:32:24
222.186.173.180	attack	SSH Authentication Attempts Exceeded	2020-03-23 05:00:13
49.232.141.44	attackbotsspam	Invalid user eg from 49.232.141.44 port 44040	2020-03-23 04:48:25

最近上报的IP列表

112.85.42.110	62.210.103.204	23.224.245.199	165.232.72.42
123.206.188.77	92.207.86.210	119.38.189.164	59.50.31.11
15.207.30.208	228.142.150.143	220.186.188.205	211.232.30.117
36.148.23.50	112.85.42.231	51.210.14.124	137.116.91.11
104.128.87.34	49.233.164.146	31.14.72.26	228.248.221.196