必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Santa Clara

省份(region): California

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
138.68.21.125 attackspam
(sshd) Failed SSH login from 138.68.21.125 (US/United States/-): 5 in the last 3600 secs
2020-10-13 01:48:43
138.68.21.125 attackbots
Connection to SSH Honeypot - Detected by HoneypotDB
2020-10-12 17:12:21
138.68.21.125 attackspambots
Oct 10 14:12:04 mellenthin sshd[24260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.21.125  user=root
Oct 10 14:12:06 mellenthin sshd[24260]: Failed password for invalid user root from 138.68.21.125 port 59036 ssh2
2020-10-10 21:39:49
138.68.21.125 attackbotsspam
SSH login attempts.
2020-10-01 05:18:06
138.68.21.125 attackbots
Sep 30 00:44:05 sip sshd[1771970]: Invalid user testuser1 from 138.68.21.125 port 37546
Sep 30 00:44:07 sip sshd[1771970]: Failed password for invalid user testuser1 from 138.68.21.125 port 37546 ssh2
Sep 30 00:46:29 sip sshd[1771979]: Invalid user user2 from 138.68.21.125 port 45384
...
2020-09-30 21:34:28
138.68.21.125 attackspam
Sep 30 00:44:05 sip sshd[1771970]: Invalid user testuser1 from 138.68.21.125 port 37546
Sep 30 00:44:07 sip sshd[1771970]: Failed password for invalid user testuser1 from 138.68.21.125 port 37546 ssh2
Sep 30 00:46:29 sip sshd[1771979]: Invalid user user2 from 138.68.21.125 port 45384
...
2020-09-30 14:05:48
138.68.21.125 attack
Sep  7 10:44:00 [host] sshd[27947]: pam_unix(sshd:
Sep  7 10:44:02 [host] sshd[27947]: Failed passwor
Sep  7 10:48:05 [host] sshd[28065]: pam_unix(sshd:
2020-09-08 02:02:35
138.68.21.125 attack
Sep  7 10:44:00 [host] sshd[27947]: pam_unix(sshd:
Sep  7 10:44:02 [host] sshd[27947]: Failed passwor
Sep  7 10:48:05 [host] sshd[28065]: pam_unix(sshd:
2020-09-07 17:27:51
138.68.21.125 attackspam
Sep  5 17:14:58 MainVPS sshd[24608]: Invalid user web from 138.68.21.125 port 53064
Sep  5 17:14:58 MainVPS sshd[24608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.21.125
Sep  5 17:14:58 MainVPS sshd[24608]: Invalid user web from 138.68.21.125 port 53064
Sep  5 17:14:59 MainVPS sshd[24608]: Failed password for invalid user web from 138.68.21.125 port 53064 ssh2
Sep  5 17:22:30 MainVPS sshd[32625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.21.125  user=root
Sep  5 17:22:32 MainVPS sshd[32625]: Failed password for root from 138.68.21.125 port 57294 ssh2
...
2020-09-06 00:23:27
138.68.21.125 attackspam
Sep  5 09:41:31 eventyay sshd[6232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.21.125
Sep  5 09:41:33 eventyay sshd[6232]: Failed password for invalid user chan from 138.68.21.125 port 57746 ssh2
Sep  5 09:45:46 eventyay sshd[6302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.21.125
...
2020-09-05 15:54:09
138.68.21.125 attackspambots
2020-09-04T01:46:15.592998correo.[domain] sshd[33728]: Invalid user wangxu from 138.68.21.125 port 49354 2020-09-04T01:46:18.140171correo.[domain] sshd[33728]: Failed password for invalid user wangxu from 138.68.21.125 port 49354 ssh2 2020-09-04T01:51:05.205025correo.[domain] sshd[34199]: Invalid user fast from 138.68.21.125 port 55028 ...
2020-09-05 08:31:13
138.68.21.125 attackbots
Aug 19 23:05:51 srv-ubuntu-dev3 sshd[94835]: Invalid user itc from 138.68.21.125
Aug 19 23:05:51 srv-ubuntu-dev3 sshd[94835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.21.125
Aug 19 23:05:51 srv-ubuntu-dev3 sshd[94835]: Invalid user itc from 138.68.21.125
Aug 19 23:05:53 srv-ubuntu-dev3 sshd[94835]: Failed password for invalid user itc from 138.68.21.125 port 53710 ssh2
Aug 19 23:10:42 srv-ubuntu-dev3 sshd[95400]: Invalid user stp from 138.68.21.125
Aug 19 23:10:42 srv-ubuntu-dev3 sshd[95400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.21.125
Aug 19 23:10:42 srv-ubuntu-dev3 sshd[95400]: Invalid user stp from 138.68.21.125
Aug 19 23:10:44 srv-ubuntu-dev3 sshd[95400]: Failed password for invalid user stp from 138.68.21.125 port 34366 ssh2
Aug 19 23:15:29 srv-ubuntu-dev3 sshd[96045]: Invalid user odoo from 138.68.21.125
...
2020-08-20 06:27:37
138.68.21.125 attackspam
Aug 19 08:05:46 eventyay sshd[979]: Failed password for root from 138.68.21.125 port 52196 ssh2
Aug 19 08:10:10 eventyay sshd[1092]: Failed password for root from 138.68.21.125 port 33466 ssh2
Aug 19 08:14:33 eventyay sshd[1251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.21.125
...
2020-08-19 17:12:07
138.68.21.125 attack
Aug  5 14:19:05 ajax sshd[13363]: Failed password for root from 138.68.21.125 port 53556 ssh2
2020-08-05 21:27:02
138.68.21.125 attackspam
Jul 27 12:00:19 sso sshd[17366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.21.125
Jul 27 12:00:21 sso sshd[17366]: Failed password for invalid user customerservice from 138.68.21.125 port 49594 ssh2
...
2020-07-27 19:04:57
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.21.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58915
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.68.21.56.			IN	A

;; AUTHORITY SECTION:
.			115	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2021110202 1800 900 604800 86400

;; Query time: 71 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 03 08:09:20 CST 2021
;; MSG SIZE  rcvd: 105
HOST信息:
56.21.68.138.in-addr.arpa domain name pointer www.ekoparty.org.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
56.21.68.138.in-addr.arpa	name = www.ekoparty.org.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
35.225.222.169 attackspambots
Wordpress_xmlrpc_attack
2020-04-07 06:05:03
103.145.12.50 attackbotsspam
Fail2Ban Ban Triggered
2020-04-07 06:08:52
77.222.116.55 attackspam
Unauthorized connection attempt from IP address 77.222.116.55 on Port 445(SMB)
2020-04-07 06:31:02
117.95.102.220 attack
2020-04-06T17:30:53.075558 X postfix/smtpd[28879]: lost connection after AUTH from unknown[117.95.102.220]
2020-04-06T17:30:54.783795 X postfix/smtpd[27238]: lost connection after AUTH from unknown[117.95.102.220]
2020-04-06T17:30:55.672248 X postfix/smtpd[28879]: lost connection after AUTH from unknown[117.95.102.220]
2020-04-07 06:12:31
106.12.139.138 attack
k+ssh-bruteforce
2020-04-07 06:38:19
36.80.249.54 attack
Unauthorized connection attempt from IP address 36.80.249.54 on Port 445(SMB)
2020-04-07 06:04:37
165.22.90.187 attack
Port 22 Scan, PTR: None
2020-04-07 06:18:23
50.70.229.239 attackspam
Apr  6 23:48:23 legacy sshd[3947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.70.229.239
Apr  6 23:48:26 legacy sshd[3947]: Failed password for invalid user test from 50.70.229.239 port 47582 ssh2
Apr  6 23:51:12 legacy sshd[4045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.70.229.239
...
2020-04-07 06:00:59
187.7.231.60 attackspambots
Unauthorized connection attempt from IP address 187.7.231.60 on Port 445(SMB)
2020-04-07 06:16:49
115.236.8.152 attackbots
Apr  6 23:16:25 gw1 sshd[6664]: Failed password for root from 115.236.8.152 port 41452 ssh2
...
2020-04-07 06:04:16
164.163.99.10 attackspam
SASL PLAIN auth failed: ruser=...
2020-04-07 06:12:00
14.162.77.91 attackbots
Unauthorized connection attempt from IP address 14.162.77.91 on Port 445(SMB)
2020-04-07 06:31:58
149.140.20.213 attack
Apr  6 17:30:57 server postfix/smtpd[28694]: NOQUEUE: reject: RCPT from unknown[149.140.20.213]: 554 5.7.1 Service unavailable; Client host [149.140.20.213] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/149.140.20.213; from= to=<7927378anav@anavveneto.it> proto=ESMTP helo=<[149.140.20.213]>
2020-04-07 06:09:44
46.228.199.119 attack
Suspicious access to SMTP/POP/IMAP services.
2020-04-07 06:25:21
184.22.118.193 attackspam
Unauthorized connection attempt from IP address 184.22.118.193 on Port 445(SMB)
2020-04-07 06:13:47

最近上报的IP列表

165.227.74.151 5.191.32.44 5.191.32.49 5.191.32.112
66.181.169.99 103.85.197.50 103.85.197.194 5.191.32.43
5.191.32.45 212.42.117.239 177.232.88.119 187.252.205.213
187.252.205.162 111.150.90.93 111.150.90.81 191.98.147.109
191.98.147.173 170.238.201.143 186.148.211.223 103.222.40.146