138.68.212.231

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Unauthorized connection attempt from IP address 138.68.212.231 on Port 587(SMTP-MSA)	2019-09-03 22:46:15

相同子网IP讨论:

IP	类型	评论内容	时间
138.68.212.139	attackbots	" "	2019-11-29 08:49:47
138.68.212.45	attackspam	Mozilla/5.0 zgrab/0.x	2019-11-22 22:48:08
138.68.212.139	attackbots	port scan and connect, tcp 443 (https)	2019-11-10 21:03:29
138.68.212.113	attackspambots	Honeypot hit.	2019-11-10 01:07:35
138.68.212.139	attackspam	138.68.212.139 was recorded 5 times by 5 hosts attempting to connect to the following ports: 1028. Incident counter (4h, 24h, all-time): 5, 16, 23	2019-11-09 22:03:05
138.68.212.45	attackspam	Connection by 138.68.212.45 on port: 10009 got caught by honeypot at 11/8/2019 10:05:03 AM	2019-11-08 21:20:49
138.68.212.113	attackbotsspam	179/tcp 1433/tcp 5060/udp... [2019-09-02/10-31]51pkt,43pt.(tcp),4pt.(udp)	2019-11-02 19:20:16
138.68.212.45	attackbotsspam	53169/tcp 49738/tcp 8118/tcp... [2019-08-31/10-30]49pkt,37pt.(tcp),3pt.(udp)	2019-10-31 01:38:00
138.68.212.139	attack	firewall-block, port(s): 990/tcp	2019-10-14 16:56:22
138.68.212.113	attack	firewall-block, port(s): 465/tcp	2019-10-03 02:45:27
138.68.212.45	attackspam	port scan and connect, tcp 22 (ssh)	2019-09-27 14:35:48
138.68.212.45	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2019-09-13 12:22:35
138.68.212.185	attackbotsspam	" "	2019-09-06 04:29:10
138.68.212.207	attackbotsspam	2525/tcp 8443/tcp 5902/tcp... [2019-08-29/09-05]7pkt,7pt.(tcp)	2019-09-05 22:31:56
138.68.212.210	attackbotsspam	Honeypot hit, critical abuseConfidenceScore, incoming Traffic from this IP	2019-09-04 02:34:53

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.212.231
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59964
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.212.231.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019090300 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Sep 03 22:46:03 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

231.212.68.138.in-addr.arpa domain name pointer zg-0829a-16.stretchoid.com.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
231.212.68.138.in-addr.arpa	name = zg-0829a-16.stretchoid.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
178.237.0.229	attackbotsspam	May 26 02:28:14 server1 sshd\[4598\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.237.0.229 user=root May 26 02:28:16 server1 sshd\[4598\]: Failed password for root from 178.237.0.229 port 45136 ssh2 May 26 02:32:12 server1 sshd\[7344\]: Invalid user anish from 178.237.0.229 May 26 02:32:12 server1 sshd\[7344\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.237.0.229 May 26 02:32:14 server1 sshd\[7344\]: Failed password for invalid user anish from 178.237.0.229 port 52544 ssh2 ...	2020-05-26 16:47:46
185.64.209.151	attack	2020-05-2609:31:021jdU3B-000822-R9\<=info@whatsup2013.chH=\(localhost\)[45.190.220.101]:56546P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2132id=797CCA999246692AF6F3BA02C639E54B@whatsup2013.chT="Mygoalistoresidenearifsomeonewillsimplyturntheirownbackuponyou"forvtailman1@gmail.com2020-05-2609:31:471jdU3u-00087m-Ti\<=info@whatsup2013.chH=\(localhost\)[14.169.249.14]:41126P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2209id=B9BC0A595286A9EA36337AC2064CE53E@whatsup2013.chT="Hopefullylateronwewilloftenthinkofeachother"fordannymorris214@gmail.com2020-05-2609:32:281jdU4Z-0008AJ-89\<=info@whatsup2013.chH=\(localhost\)[14.169.150.68]:60800P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2205id=909523707BAF80C31F1A53EB2F79210B@whatsup2013.chT="Ihavetofindanotherpersonwhodesirestobecometrulyhappy"foraspero3048@hotmail.com2020-05-2609:29:441jdU1u-0007vL-Jd\<=info@whatsup2013.chH=\(loc	2020-05-26 16:34:13
119.195.69.212	attack	Port probing on unauthorized port 23	2020-05-26 16:50:11
222.186.175.215	attackbotsspam	May 26 10:24:29 MainVPS sshd[12659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.215 user=root May 26 10:24:31 MainVPS sshd[12659]: Failed password for root from 222.186.175.215 port 53166 ssh2 May 26 10:24:44 MainVPS sshd[12659]: error: maximum authentication attempts exceeded for root from 222.186.175.215 port 53166 ssh2 [preauth] May 26 10:24:29 MainVPS sshd[12659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.215 user=root May 26 10:24:31 MainVPS sshd[12659]: Failed password for root from 222.186.175.215 port 53166 ssh2 May 26 10:24:44 MainVPS sshd[12659]: error: maximum authentication attempts exceeded for root from 222.186.175.215 port 53166 ssh2 [preauth] May 26 10:24:56 MainVPS sshd[12909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.215 user=root May 26 10:24:59 MainVPS sshd[12909]: Failed password for root from 222.186.175.215 port	2020-05-26 16:25:40
14.185.189.85	attack	Unauthorized connection attempt from IP address 14.185.189.85 on Port 445(SMB)	2020-05-26 16:58:10
218.161.0.190	attack	Telnet/23 MH Probe, Scan, BF, Hack -	2020-05-26 16:46:22
187.189.24.72	attackbotsspam	May 26 01:32:30 Host-KLAX-C dovecot: imap-login: Disconnected (auth failed, 1 attempts in 7 secs): user=, method=PLAIN, rip=187.189.24.72, lip=185.198.26.142, TLS: Disconnected, session=<0ZC0GIimd+m7vRhI> ...	2020-05-26 16:56:48
219.150.233.197	attackbots	Unauthorized connection attempt from IP address 219.150.233.197 on Port 445(SMB)	2020-05-26 16:55:47
36.233.239.81	attackbots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-05-26 16:54:53
187.160.239.74	attackbots	Unauthorized connection attempt from IP address 187.160.239.74 on Port 445(SMB)	2020-05-26 17:00:35
222.186.175.212	attackspambots	May 26 08:24:46 sshgateway sshd\[23898\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.212 user=root May 26 08:24:48 sshgateway sshd\[23898\]: Failed password for root from 222.186.175.212 port 42270 ssh2 May 26 08:25:03 sshgateway sshd\[23898\]: Failed password for root from 222.186.175.212 port 42270 ssh2	2020-05-26 16:44:06
111.250.85.239	attackspam	Telnet/23 MH Probe, Scan, BF, Hack -	2020-05-26 16:25:24
177.25.200.222	attackbots	SSH/22 MH Probe, BF, Hack -	2020-05-26 16:57:04
14.231.159.230	attack	2020-05-2609:31:021jdU3B-000822-R9\<=info@whatsup2013.chH=\(localhost\)[45.190.220.101]:56546P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2132id=797CCA999246692AF6F3BA02C639E54B@whatsup2013.chT="Mygoalistoresidenearifsomeonewillsimplyturntheirownbackuponyou"forvtailman1@gmail.com2020-05-2609:31:471jdU3u-00087m-Ti\<=info@whatsup2013.chH=\(localhost\)[14.169.249.14]:41126P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2209id=B9BC0A595286A9EA36337AC2064CE53E@whatsup2013.chT="Hopefullylateronwewilloftenthinkofeachother"fordannymorris214@gmail.com2020-05-2609:32:281jdU4Z-0008AJ-89\<=info@whatsup2013.chH=\(localhost\)[14.169.150.68]:60800P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2205id=909523707BAF80C31F1A53EB2F79210B@whatsup2013.chT="Ihavetofindanotherpersonwhodesirestobecometrulyhappy"foraspero3048@hotmail.com2020-05-2609:29:441jdU1u-0007vL-Jd\<=info@whatsup2013.chH=\(loc	2020-05-26 16:35:47
36.68.54.87	attack	Unauthorized connection attempt from IP address 36.68.54.87 on Port 445(SMB)	2020-05-26 16:45:11

最近上报的IP列表

31.173.82.68	45.160.26.25	14.162.233.222	149.45.58.240
90.117.42.106	104.70.228.219	6.67.18.61	187.28.226.26
82.45.255.105	36.65.121.191	62.157.0.1	117.211.106.15
113.132.111.190	34.79.250.251	101.109.177.36	162.198.236.96
135.134.26.39	91.23.33.175	134.246.102.101	127.32.230.200