必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Santa Clara

省份(region): California

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
138.68.16.40 attackspam
invalid login attempt (elasticsearch)
2020-05-07 06:10:25
138.68.16.40 attackbots
5x Failed Password
2020-04-30 06:41:12
138.68.16.40 attackspambots
$f2bV_matches
2020-04-26 12:28:35
138.68.16.40 attack
DATE:2020-04-24 19:34:45, IP:138.68.16.40, PORT:ssh SSH brute force auth (docker-dc)
2020-04-25 02:25:43
138.68.16.40 attackspam
Invalid user sql from 138.68.16.40 port 53650
2020-04-18 08:00:40
138.68.16.40 attack
Invalid user asimov from 138.68.16.40 port 52156
2020-04-12 02:16:26
138.68.168.137 attackspambots
2020-03-24T18:24:04.338629shield sshd\[1720\]: Invalid user testuser from 138.68.168.137 port 41348
2020-03-24T18:24:04.342343shield sshd\[1720\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137
2020-03-24T18:24:06.326852shield sshd\[1720\]: Failed password for invalid user testuser from 138.68.168.137 port 41348 ssh2
2020-03-24T18:31:58.513381shield sshd\[3346\]: Invalid user jeanie from 138.68.168.137 port 59402
2020-03-24T18:31:58.516640shield sshd\[3346\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137
2020-03-25 02:52:35
138.68.168.137 attackspambots
2020-03-24T18:07:52.907199shield sshd\[30137\]: Invalid user gy from 138.68.168.137 port 33476
2020-03-24T18:07:52.913682shield sshd\[30137\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137
2020-03-24T18:07:55.128671shield sshd\[30137\]: Failed password for invalid user gy from 138.68.168.137 port 33476 ssh2
2020-03-24T18:11:50.402980shield sshd\[31146\]: Invalid user office from 138.68.168.137 port 42502
2020-03-24T18:11:50.410060shield sshd\[31146\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137
2020-03-25 02:18:32
138.68.168.137 attackbotsspam
2020-03-23T15:38:43.121143abusebot-7.cloudsearch.cf sshd[19459]: Invalid user newsletter from 138.68.168.137 port 35472
2020-03-23T15:38:43.126340abusebot-7.cloudsearch.cf sshd[19459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137
2020-03-23T15:38:43.121143abusebot-7.cloudsearch.cf sshd[19459]: Invalid user newsletter from 138.68.168.137 port 35472
2020-03-23T15:38:44.916504abusebot-7.cloudsearch.cf sshd[19459]: Failed password for invalid user newsletter from 138.68.168.137 port 35472 ssh2
2020-03-23T15:47:18.433090abusebot-7.cloudsearch.cf sshd[20039]: Invalid user vix from 138.68.168.137 port 51306
2020-03-23T15:47:18.438580abusebot-7.cloudsearch.cf sshd[20039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137
2020-03-23T15:47:18.433090abusebot-7.cloudsearch.cf sshd[20039]: Invalid user vix from 138.68.168.137 port 51306
2020-03-23T15:47:20.595192abusebot-7.cloudsearch.cf s
...
2020-03-24 02:02:33
138.68.16.40 attack
Invalid user genedimen from 138.68.16.40 port 33510
2020-03-18 07:54:51
138.68.16.40 attackbotsspam
SSH brute-force attempt
2020-03-17 04:25:31
138.68.168.137 attack
Mar 12 16:58:35 lanister sshd[28250]: Failed password for invalid user paul from 138.68.168.137 port 37160 ssh2
Mar 12 17:11:50 lanister sshd[28520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137  user=root
Mar 12 17:11:53 lanister sshd[28520]: Failed password for root from 138.68.168.137 port 39500 ssh2
Mar 12 17:16:49 lanister sshd[28595]: Invalid user jira from 138.68.168.137
2020-03-13 05:41:53
138.68.16.40 attackspambots
(sshd) Failed SSH login from 138.68.16.40 (US/United States/-): 10 in the last 3600 secs
2020-03-13 04:40:23
138.68.16.40 attackbotsspam
Mar 11 00:18:30 firewall sshd[28892]: Invalid user P4sswOrd from 138.68.16.40
Mar 11 00:18:33 firewall sshd[28892]: Failed password for invalid user P4sswOrd from 138.68.16.40 port 36674 ssh2
Mar 11 00:22:41 firewall sshd[28968]: Invalid user password from 138.68.16.40
...
2020-03-11 11:28:14
138.68.168.137 attackbots
Mar  4 17:26:34 hcbbdb sshd\[8947\]: Invalid user plegrand from 138.68.168.137
Mar  4 17:26:34 hcbbdb sshd\[8947\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137
Mar  4 17:26:37 hcbbdb sshd\[8947\]: Failed password for invalid user plegrand from 138.68.168.137 port 53114 ssh2
Mar  4 17:35:44 hcbbdb sshd\[9933\]: Invalid user sshvpn from 138.68.168.137
Mar  4 17:35:44 hcbbdb sshd\[9933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.168.137
2020-03-05 01:43:06
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.16.111
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44554
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.16.111.			IN	A

;; AUTHORITY SECTION:
.			411	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020120801 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Dec 09 19:36:51 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
111.16.68.138.in-addr.arpa domain name pointer ac14953.odcmed-mautic.
NSLOOKUP信息:
Server:		183.60.82.98
Address:	183.60.82.98#53

Non-authoritative answer:
111.16.68.138.in-addr.arpa	name = ac14953.odcmed-mautic.

Authoritative answers can be found from:

相关IP信息:
最新评论:
IP 类型 评论内容 时间
118.24.55.171 attackspam
Mar  7 05:26:54 mockhub sshd[1700]: Failed password for root from 118.24.55.171 port 25984 ssh2
...
2020-03-07 23:10:39
14.34.165.243 attackspam
Honeypot attack, port: 81, PTR: PTR record not found
2020-03-07 23:51:16
71.6.232.5 attack
Unauthorized connection attempt from IP address 71.6.232.5 on Port 3306(MYSQL)
2020-03-07 23:46:59
89.248.160.150 attack
89.248.160.150 was recorded 18 times by 11 hosts attempting to connect to the following ports: 25159,27015. Incident counter (4h, 24h, all-time): 18, 129, 6932
2020-03-07 23:10:21
118.27.5.33 attack
2020-03-07T16:26:01.808138  sshd[8436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.27.5.33  user=root
2020-03-07T16:26:03.211280  sshd[8436]: Failed password for root from 118.27.5.33 port 60982 ssh2
2020-03-07T16:28:59.631411  sshd[8490]: Invalid user zhoumin from 118.27.5.33 port 50980
...
2020-03-07 23:38:56
181.48.232.108 attack
Honeypot attack, port: 445, PTR: correo.activabogados.com.co.
2020-03-07 23:36:54
111.230.223.94 attackspambots
Mar  7 16:16:25 santamaria sshd\[14746\]: Invalid user atan from 111.230.223.94
Mar  7 16:16:25 santamaria sshd\[14746\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.223.94
Mar  7 16:16:28 santamaria sshd\[14746\]: Failed password for invalid user atan from 111.230.223.94 port 55624 ssh2
...
2020-03-07 23:49:48
218.92.0.200 attackbotsspam
Mar  7 15:50:33 silence02 sshd[29226]: Failed password for root from 218.92.0.200 port 61809 ssh2
Mar  7 15:50:36 silence02 sshd[29226]: Failed password for root from 218.92.0.200 port 61809 ssh2
Mar  7 15:50:38 silence02 sshd[29226]: Failed password for root from 218.92.0.200 port 61809 ssh2
2020-03-07 23:02:57
157.245.34.72 attack
Lines containing failures of 157.245.34.72
Mar  6 22:13:02 cdb sshd[22029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.34.72  user=r.r
Mar  6 22:13:04 cdb sshd[22029]: Failed password for r.r from 157.245.34.72 port 32818 ssh2
Mar  6 22:13:04 cdb sshd[22029]: Received disconnect from 157.245.34.72 port 32818:11: Bye Bye [preauth]
Mar  6 22:13:04 cdb sshd[22029]: Disconnected from authenticating user r.r 157.245.34.72 port 32818 [preauth]
Mar  6 22:21:38 cdb sshd[23260]: Invalid user alex from 157.245.34.72 port 34768
Mar  6 22:21:38 cdb sshd[23260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.34.72
Mar  6 22:21:40 cdb sshd[23260]: Failed password for invalid user alex from 157.245.34.72 port 34768 ssh2
Mar  6 22:21:40 cdb sshd[23260]: Received disconnect from 157.245.34.72 port 34768:11: Bye Bye [preauth]
Mar  6 22:21:40 cdb sshd[23260]: Disconnected from invalid user........
------------------------------
2020-03-07 23:33:29
212.129.48.145 attack
[2020-03-07 10:13:36] NOTICE[1148] chan_sip.c: Registration from '"912"' failed for '212.129.48.145:62379' - Wrong password
[2020-03-07 10:13:36] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-03-07T10:13:36.838-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="912",SessionID="0x7fd82c40d3d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.129.48.145/62379",Challenge="24b8a29a",ReceivedChallenge="24b8a29a",ReceivedHash="c6c4b090dc5511800792186d648c15a4"
[2020-03-07 10:13:37] NOTICE[1148] chan_sip.c: Registration from '"924"' failed for '212.129.48.145:62391' - Wrong password
[2020-03-07 10:13:37] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-03-07T10:13:37.557-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="924",SessionID="0x7fd82ca712e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.
...
2020-03-07 23:27:14
213.169.39.218 attackbotsspam
Mar  7 15:24:54 silence02 sshd[27749]: Failed password for root from 213.169.39.218 port 53012 ssh2
Mar  7 15:28:06 silence02 sshd[27931]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.169.39.218
Mar  7 15:28:08 silence02 sshd[27931]: Failed password for invalid user yala from 213.169.39.218 port 42906 ssh2
2020-03-07 23:19:05
103.92.121.163 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-03-07 23:50:47
109.65.16.51 attackbotsspam
Port probing on unauthorized port 23
2020-03-07 23:28:06
182.156.209.222 attack
Mar  7 15:02:54 srv01 sshd[21438]: Invalid user lms from 182.156.209.222 port 36310
Mar  7 15:02:57 srv01 sshd[21438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.156.209.222
Mar  7 15:02:54 srv01 sshd[21438]: Invalid user lms from 182.156.209.222 port 36310
Mar  7 15:02:59 srv01 sshd[21438]: Failed password for invalid user lms from 182.156.209.222 port 36310 ssh2
Mar  7 15:07:43 srv01 sshd[21697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.156.209.222  user=root
Mar  7 15:07:45 srv01 sshd[21697]: Failed password for root from 182.156.209.222 port 11276 ssh2
...
2020-03-07 23:50:15
222.186.175.182 attack
Mar  7 16:28:24 meumeu sshd[15823]: Failed password for root from 222.186.175.182 port 44018 ssh2
Mar  7 16:28:42 meumeu sshd[15823]: error: maximum authentication attempts exceeded for root from 222.186.175.182 port 44018 ssh2 [preauth]
Mar  7 16:29:00 meumeu sshd[15898]: Failed password for root from 222.186.175.182 port 46978 ssh2
...
2020-03-07 23:36:20

最近上报的IP列表

172.69.10.160 183.171.100.60 86.154.78.102 171.76.205.249
1.82.198.224 105.155.199.202 143.137.148.112 152.243.187.232
164.90.153.200 167.249.102.139 177.45.227.240 18.188.47.126
187.213.107.121 211.21.37.216 42.234.85.180 45.5.202.39
49.83.201.190 93.109.240.250 59.99.140.115 59.99.140.91