138.68.14.244 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	2020-06-01T22:36:07.268953struts4.enskede.local sshd\[31301\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.14.244 user=root 2020-06-01T22:36:09.554311struts4.enskede.local sshd\[31301\]: Failed password for root from 138.68.14.244 port 44228 ssh2 2020-06-01T22:41:14.017537struts4.enskede.local sshd\[31332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.14.244 user=root 2020-06-01T22:41:16.317682struts4.enskede.local sshd\[31332\]: Failed password for root from 138.68.14.244 port 51756 ssh2 2020-06-01T22:42:40.558959struts4.enskede.local sshd\[31339\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.14.244 user=root ...	2020-06-02 05:33:25

类型

评论内容

时间

attackspam

2020-06-01T22:36:07.268953struts4.enskede.local sshd\[31301\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.14.244  user=root
2020-06-01T22:36:09.554311struts4.enskede.local sshd\[31301\]: Failed password for root from 138.68.14.244 port 44228 ssh2
2020-06-01T22:41:14.017537struts4.enskede.local sshd\[31332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.14.244  user=root
2020-06-01T22:41:16.317682struts4.enskede.local sshd\[31332\]: Failed password for root from 138.68.14.244 port 51756 ssh2
2020-06-01T22:42:40.558959struts4.enskede.local sshd\[31339\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.14.244  user=root
...

2020-06-02 05:33:25

相同子网IP讨论:

IP	类型	评论内容	时间
138.68.148.177	attack	DATE:2020-10-03 20:05:08, IP:138.68.148.177, PORT:ssh SSH brute force auth (docker-dc)	2020-10-04 04:04:27
138.68.148.177	attackbotsspam	Invalid user web from 138.68.148.177 port 50132	2020-10-03 20:06:41
138.68.14.219	attackbots	Invalid user admin from 138.68.14.219 port 50376	2020-09-30 05:38:13
138.68.148.177	attackspambots	2020-09-29T10:39:26.1576871495-001 sshd[4600]: Failed password for invalid user internet from 138.68.148.177 port 58416 ssh2 2020-09-29T10:43:32.3590071495-001 sshd[4775]: Invalid user seco from 138.68.148.177 port 40074 2020-09-29T10:43:32.3619891495-001 sshd[4775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.148.177 2020-09-29T10:43:32.3590071495-001 sshd[4775]: Invalid user seco from 138.68.148.177 port 40074 2020-09-29T10:43:34.4990511495-001 sshd[4775]: Failed password for invalid user seco from 138.68.148.177 port 40074 ssh2 2020-09-29T10:47:48.2306251495-001 sshd[4918]: Invalid user angel from 138.68.148.177 port 49974 ...	2020-09-30 05:07:07
138.68.14.219	attack	Invalid user admin from 138.68.14.219 port 50376	2020-09-29 21:48:14
138.68.148.177	attack	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-29T12:35:10Z and 2020-09-29T12:47:41Z	2020-09-29 21:16:31
138.68.14.219	attackspambots	Invalid user admin from 138.68.14.219 port 50376	2020-09-29 14:05:01
138.68.148.177	attackspambots	Invalid user web from 138.68.148.177 port 50132	2020-09-29 13:30:07
138.68.14.219	attackbots	Invalid user admin from 138.68.14.219 port 50376	2020-09-28 20:35:33
138.68.14.219	attackspam	TCP (SYN) 138.68.14.219:60839 -> port 22, len 48	2020-09-28 12:42:01
138.68.148.177	attackspambots	2020-09-20 11:26:01.404448-0500 localhost sshd[50098]: Failed password for root from 138.68.148.177 port 36968 ssh2	2020-09-21 01:07:52
138.68.148.177	attack	Sep 20 08:53:22 email sshd\[14903\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.148.177 user=root Sep 20 08:53:24 email sshd\[14903\]: Failed password for root from 138.68.148.177 port 41796 ssh2 Sep 20 08:57:55 email sshd\[15670\]: Invalid user dstserver from 138.68.148.177 Sep 20 08:57:55 email sshd\[15670\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.148.177 Sep 20 08:57:57 email sshd\[15670\]: Failed password for invalid user dstserver from 138.68.148.177 port 53046 ssh2 ...	2020-09-20 17:04:15
138.68.148.177	attackspambots	[f2b] sshd bruteforce, retries: 1	2020-09-15 02:31:35
138.68.148.177	attackbots	$f2bV_matches	2020-09-14 18:17:49
138.68.148.177	attackbots	SSH Invalid Login	2020-08-20 06:15:56

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.14.244
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5983
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.14.244.			IN	A

;; AUTHORITY SECTION:
.			491	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020060101 1800 900 604800 86400

;; Query time: 91 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jun 02 05:33:22 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 244.14.68.138.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 244.14.68.138.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
170.239.108.74	attackbotsspam	Aug 2 17:20:28 gw1 sshd[10338]: Failed password for root from 170.239.108.74 port 41957 ssh2 ...	2020-08-02 21:53:00
193.77.156.24	attackspam	Automatic report - Port Scan Attack	2020-08-02 22:25:37
190.152.215.77	attackbots	Brute force attempt	2020-08-02 22:04:38
190.13.80.218	attackspambots	1596370315 - 08/02/2020 14:11:55 Host: 190.13.80.218/190.13.80.218 Port: 445 TCP Blocked	2020-08-02 22:20:57
95.0.107.165	attackspambots	TCP src-port=18403 dst-port=25 Listed on abuseat-org barracuda zen-spamhaus (Project Honey Pot rated Suspicious) (32)	2020-08-02 22:25:02
51.254.37.192	attackspambots	Aug 2 16:00:29 abendstille sshd\[1064\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.37.192 user=root Aug 2 16:00:31 abendstille sshd\[1064\]: Failed password for root from 51.254.37.192 port 52014 ssh2 Aug 2 16:04:35 abendstille sshd\[4694\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.37.192 user=root Aug 2 16:04:36 abendstille sshd\[4694\]: Failed password for root from 51.254.37.192 port 33304 ssh2 Aug 2 16:08:42 abendstille sshd\[8228\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.37.192 user=root ...	2020-08-02 22:26:19
103.114.208.222	attackspambots	Aug 2 15:05:03 master sshd[28826]: Failed password for root from 103.114.208.222 port 60367 ssh2	2020-08-02 22:09:22
111.85.96.173	attackbotsspam	Aug 2 17:10:03 gw1 sshd[9947]: Failed password for root from 111.85.96.173 port 15696 ssh2 ...	2020-08-02 22:06:57
94.191.119.31	attackspambots	fail2ban -- 94.191.119.31 ...	2020-08-02 22:28:36
183.66.41.26	attack	20 attempts against mh-ssh on ice	2020-08-02 22:19:21
122.225.230.10	attackbotsspam	Aug 2 15:34:38 pornomens sshd\[14982\]: Invalid user 1q@w\#e$rt\^y\&u from 122.225.230.10 port 54840 Aug 2 15:34:38 pornomens sshd\[14982\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.225.230.10 Aug 2 15:34:40 pornomens sshd\[14982\]: Failed password for invalid user 1q@w\#e$rt\^y\&u from 122.225.230.10 port 54840 ssh2 ...	2020-08-02 21:53:55
178.33.12.237	attackspam	Aug 2 15:22:21 ip40 sshd[17018]: Failed password for root from 178.33.12.237 port 41937 ssh2 ...	2020-08-02 21:48:56
115.77.63.7	attack	Port probing on unauthorized port 445	2020-08-02 22:22:39
188.131.180.15	attackbotsspam	Failed password for root from 188.131.180.15 port 39456 ssh2	2020-08-02 22:30:25
118.27.27.136	attackbots	Aug 2 14:25:36 eventyay sshd[7444]: Failed password for root from 118.27.27.136 port 37290 ssh2 Aug 2 14:30:01 eventyay sshd[7590]: Failed password for root from 118.27.27.136 port 48924 ssh2 ...	2020-08-02 21:58:48

最近上报的IP列表

211.167.153.157	149.1.3.106	11.242.169.115	53.42.165.122
80.66.105.241	171.171.20.144	84.65.153.73	188.84.127.164
15.149.97.172	193.152.143.114	181.50.115.124	104.76.253.183
171.193.27.208	102.237.1.14	222.129.195.119	167.172.112.229
141.52.109.183	9.246.112.113	32.86.3.189	161.25.232.167