必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United Kingdom of Great Britain and Northern Ireland

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspam
138.68.150.93 - - [01/Oct/2020:12:48:02 +0100] "POST /wp-login.php HTTP/1.1" 200 2252 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.150.93 - - [01/Oct/2020:12:48:03 +0100] "POST /wp-login.php HTTP/1.1" 200 2255 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.150.93 - - [01/Oct/2020:12:48:04 +0100] "POST /wp-login.php HTTP/1.1" 200 2204 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-02 05:01:01
attackbotsspam
138.68.150.93 - - [01/Oct/2020:12:48:02 +0100] "POST /wp-login.php HTTP/1.1" 200 2252 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.150.93 - - [01/Oct/2020:12:48:03 +0100] "POST /wp-login.php HTTP/1.1" 200 2255 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.150.93 - - [01/Oct/2020:12:48:04 +0100] "POST /wp-login.php HTTP/1.1" 200 2204 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-01 21:19:24
attackbotsspam
138.68.150.93 - - [01/Oct/2020:05:40:26 +0100] "POST /wp-login.php HTTP/1.1" 200 2596 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.150.93 - - [01/Oct/2020:05:40:27 +0100] "POST /wp-login.php HTTP/1.1" 200 2580 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.150.93 - - [01/Oct/2020:05:40:28 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-01 13:34:15
attackspambots
WordPress wp-login brute force :: 138.68.150.93 0.228 - [13/Sep/2020:07:49:37  0000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 2414 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "HTTP/1.1"
2020-09-13 21:16:25
attackbotsspam
138.68.150.93 - - [12/Sep/2020:10:59:08 -0600] "GET /wp-login.php HTTP/1.1" 301 478 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-13 13:09:53
attackbotsspam
138.68.150.93 - - [12/Sep/2020:10:59:08 -0600] "GET /wp-login.php HTTP/1.1" 301 478 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-13 04:56:37
attackbotsspam
138.68.150.93 - - [01/Sep/2020:09:56:59 +0100] "POST /wp-login.php HTTP/1.1" 200 1801 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.150.93 - - [01/Sep/2020:09:56:59 +0100] "POST /wp-login.php HTTP/1.1" 200 1779 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.150.93 - - [01/Sep/2020:09:57:00 +0100] "POST /wp-login.php HTTP/1.1" 200 1781 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-01 18:04:51
attackspambots
138.68.150.93 - - [16/Aug/2020:08:22:33 +0200] "GET /wp-login.php HTTP/1.1" 200 1901 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.150.93 - - [16/Aug/2020:08:22:33 +0200] "POST /wp-login.php HTTP/1.1" 200 2031 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.150.93 - - [16/Aug/2020:08:22:33 +0200] "GET /wp-login.php HTTP/1.1" 200 1901 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.150.93 - - [16/Aug/2020:08:22:33 +0200] "POST /wp-login.php HTTP/1.1" 200 2007 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.150.93 - - [16/Aug/2020:08:22:33 +0200] "GET /wp-login.php HTTP/1.1" 200 1901 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.150.93 - - [16/Aug/2020:08:22:33 +0200] "POST /wp-login.php HTTP/1.1" 200 2008 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Fir
...
2020-08-16 15:16:56
attack
"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:
2020-08-07 21:20:56
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.150.93
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11484
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.150.93.			IN	A

;; AUTHORITY SECTION:
.			441	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020080700 1800 900 604800 86400

;; Query time: 29 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 07 21:20:49 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
Host 93.150.68.138.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 93.150.68.138.in-addr.arpa: NXDOMAIN

相关IP信息:
最新评论:
IP 类型 评论内容 时间
118.24.202.214 attackbots
Jul  8 11:22:53 abendstille sshd\[22558\]: Invalid user tujikai from 118.24.202.214
Jul  8 11:22:53 abendstille sshd\[22558\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.202.214
Jul  8 11:22:54 abendstille sshd\[22558\]: Failed password for invalid user tujikai from 118.24.202.214 port 51062 ssh2
Jul  8 11:28:47 abendstille sshd\[28172\]: Invalid user homes from 118.24.202.214
Jul  8 11:28:47 abendstille sshd\[28172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.202.214
...
2020-07-08 18:48:06
125.124.32.85 attackbots
Fail2Ban - SSH Bruteforce Attempt
2020-07-08 18:58:07
139.155.7.129 attackspambots
Jul  8 17:38:00 webhost01 sshd[14380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.7.129
Jul  8 17:38:03 webhost01 sshd[14380]: Failed password for invalid user user from 139.155.7.129 port 34052 ssh2
...
2020-07-08 18:44:57
200.108.143.6 attackspam
Jul  8 11:14:24 mail sshd[18565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.108.143.6 
Jul  8 11:14:26 mail sshd[18565]: Failed password for invalid user www from 200.108.143.6 port 41108 ssh2
...
2020-07-08 18:52:10
106.52.133.45 attackbotsspam
Jul  8 04:40:58 l03 sshd[26236]: Invalid user ROOT from 106.52.133.45 port 35390
...
2020-07-08 18:39:13
106.12.60.246 attackspam
$f2bV_matches
2020-07-08 18:59:29
165.22.185.159 attack
2020-07-08T06:20:00.1220031495-001 sshd[9168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.185.159  user=mail
2020-07-08T06:20:01.3489421495-001 sshd[9168]: Failed password for mail from 165.22.185.159 port 48028 ssh2
2020-07-08T06:22:27.2839891495-001 sshd[9267]: Invalid user pxe from 165.22.185.159 port 33690
2020-07-08T06:22:27.2909811495-001 sshd[9267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.185.159
2020-07-08T06:22:27.2839891495-001 sshd[9267]: Invalid user pxe from 165.22.185.159 port 33690
2020-07-08T06:22:29.3660171495-001 sshd[9267]: Failed password for invalid user pxe from 165.22.185.159 port 33690 ssh2
...
2020-07-08 19:08:15
38.143.100.17 attackbots
Back again trying to access private pages from banned ISP/IP Ranges despite previous 403 returns - PEST
2020-07-08 18:49:31
221.163.133.48 attackspambots
Port probing on unauthorized port 9530
2020-07-08 18:51:51
180.76.158.139 attackbotsspam
Jul  8 13:45:49 gw1 sshd[9540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.158.139
Jul  8 13:45:51 gw1 sshd[9540]: Failed password for invalid user user from 180.76.158.139 port 37520 ssh2
...
2020-07-08 18:34:30
62.234.182.174 attack
Jul  8 06:31:28 h2779839 sshd[20267]: Invalid user sofrom from 62.234.182.174 port 51960
Jul  8 06:31:28 h2779839 sshd[20267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.182.174
Jul  8 06:31:28 h2779839 sshd[20267]: Invalid user sofrom from 62.234.182.174 port 51960
Jul  8 06:31:30 h2779839 sshd[20267]: Failed password for invalid user sofrom from 62.234.182.174 port 51960 ssh2
Jul  8 06:35:27 h2779839 sshd[20403]: Invalid user claudia from 62.234.182.174 port 39012
Jul  8 06:35:27 h2779839 sshd[20403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.182.174
Jul  8 06:35:27 h2779839 sshd[20403]: Invalid user claudia from 62.234.182.174 port 39012
Jul  8 06:35:29 h2779839 sshd[20403]: Failed password for invalid user claudia from 62.234.182.174 port 39012 ssh2
Jul  8 06:39:20 h2779839 sshd[20576]: Invalid user mytest from 62.234.182.174 port 54300
...
2020-07-08 18:46:45
49.235.90.32 attackspam
Jul  8 05:40:37 sxvn sshd[155024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.90.32
2020-07-08 18:56:55
128.1.135.158 attackbotsspam
Lines containing failures of 128.1.135.158
Jul  8 01:43:32 kmh-vmh-002-fsn07 sshd[13141]: Invalid user iocha from 128.1.135.158 port 57468
Jul  8 01:43:32 kmh-vmh-002-fsn07 sshd[13141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.1.135.158 
Jul  8 01:43:34 kmh-vmh-002-fsn07 sshd[13141]: Failed password for invalid user iocha from 128.1.135.158 port 57468 ssh2
Jul  8 01:43:35 kmh-vmh-002-fsn07 sshd[13141]: Received disconnect from 128.1.135.158 port 57468:11: Bye Bye [preauth]
Jul  8 01:43:35 kmh-vmh-002-fsn07 sshd[13141]: Disconnected from invalid user iocha 128.1.135.158 port 57468 [preauth]
Jul  8 01:50:25 kmh-vmh-002-fsn07 sshd[23801]: Invalid user olaf from 128.1.135.158 port 49318
Jul  8 01:50:25 kmh-vmh-002-fsn07 sshd[23801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.1.135.158 


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=128.1.135.158
2020-07-08 19:03:52
41.60.195.11 attackspambots
20/7/7@23:41:01: FAIL: Alarm-Intrusion address from=41.60.195.11
...
2020-07-08 18:35:34
196.52.43.99 attackspam
3389/tcp 11211/tcp 1443/tcp...
[2020-05-07/07-08]67pkt,42pt.(tcp),6pt.(udp)
2020-07-08 18:54:11

最近上报的IP列表

221.151.207.173 201.230.37.11 106.12.33.134 61.135.223.109
112.119.28.92 183.88.33.71 222.95.67.127 151.11.249.34
118.10.80.185 105.115.33.110 45.78.38.122 46.101.164.27
113.91.91.16 94.25.181.154 59.126.75.110 189.141.248.32
122.51.161.231 117.199.220.238 58.240.196.6 117.218.150.156