必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspam
Sep 14 15:50:46 ws12vmsma01 sshd[44246]: Failed password for invalid user chandra from 138.68.221.125 port 51050 ssh2
Sep 14 15:55:14 ws12vmsma01 sshd[44941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.221.125  user=root
Sep 14 15:55:16 ws12vmsma01 sshd[44941]: Failed password for root from 138.68.221.125 port 43254 ssh2
...
2020-09-15 03:34:19
attackspambots
Sep 14 15:59:07 gw1 sshd[22982]: Failed password for root from 138.68.221.125 port 38184 ssh2
...
2020-09-14 19:30:01
attack
$lgm
2020-09-01 05:12:23
attack
<6 unauthorized SSH connections
2020-08-28 16:16:56
attack
Invalid user vimal from 138.68.221.125 port 50792
2020-08-23 18:50:38
attackbotsspam
2020-08-20T12:36:47.747281vps-d63064a2 sshd[4303]: Invalid user webapp from 138.68.221.125 port 58738
2020-08-20T12:36:49.917369vps-d63064a2 sshd[4303]: Failed password for invalid user webapp from 138.68.221.125 port 58738 ssh2
2020-08-20T12:40:34.439328vps-d63064a2 sshd[4356]: User root from 138.68.221.125 not allowed because not listed in AllowUsers
2020-08-20T12:40:34.457321vps-d63064a2 sshd[4356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.221.125  user=root
2020-08-20T12:40:34.439328vps-d63064a2 sshd[4356]: User root from 138.68.221.125 not allowed because not listed in AllowUsers
2020-08-20T12:40:36.111770vps-d63064a2 sshd[4356]: Failed password for invalid user root from 138.68.221.125 port 40020 ssh2
...
2020-08-20 23:06:21
attackbots
Aug  6 15:25:01 rancher-0 sshd[844998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.221.125  user=root
Aug  6 15:25:03 rancher-0 sshd[844998]: Failed password for root from 138.68.221.125 port 34710 ssh2
...
2020-08-06 23:11:36
attackspam
Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-08-04 04:29:57
attack
Jul 31 01:09:32 root sshd[21974]: Failed password for root from 138.68.221.125 port 33480 ssh2
Jul 31 01:18:04 root sshd[23103]: Failed password for root from 138.68.221.125 port 49456 ssh2
...
2020-07-31 07:45:00
attackbotsspam
Jul 23 18:55:43 ns382633 sshd\[27921\]: Invalid user edmond from 138.68.221.125 port 48400
Jul 23 18:55:43 ns382633 sshd\[27921\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.221.125
Jul 23 18:55:45 ns382633 sshd\[27921\]: Failed password for invalid user edmond from 138.68.221.125 port 48400 ssh2
Jul 23 19:00:51 ns382633 sshd\[28870\]: Invalid user student from 138.68.221.125 port 41082
Jul 23 19:00:51 ns382633 sshd\[28870\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.221.125
2020-07-24 02:51:19
attackbotsspam
2020-07-17T12:21:56+0000 Failed SSH Authentication/Brute Force Attack. (Server 6)
2020-07-17 20:24:37
attackbotsspam
Jul 16 19:20:10 vps-51d81928 sshd[1236]: Invalid user valentin from 138.68.221.125 port 38034
Jul 16 19:20:10 vps-51d81928 sshd[1236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.221.125 
Jul 16 19:20:10 vps-51d81928 sshd[1236]: Invalid user valentin from 138.68.221.125 port 38034
Jul 16 19:20:12 vps-51d81928 sshd[1236]: Failed password for invalid user valentin from 138.68.221.125 port 38034 ssh2
Jul 16 19:24:19 vps-51d81928 sshd[1341]: Invalid user data from 138.68.221.125 port 55650
...
2020-07-17 04:12:47
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.221.125
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26409
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.221.125.			IN	A

;; AUTHORITY SECTION:
.			426	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020071603 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jul 17 04:12:44 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
Host 125.221.68.138.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 125.221.68.138.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
222.186.175.140 attackspambots
Oct 18 07:10:14 dcd-gentoo sshd[16409]: User root from 222.186.175.140 not allowed because none of user's groups are listed in AllowGroups
Oct 18 07:10:19 dcd-gentoo sshd[16409]: error: PAM: Authentication failure for illegal user root from 222.186.175.140
Oct 18 07:10:14 dcd-gentoo sshd[16409]: User root from 222.186.175.140 not allowed because none of user's groups are listed in AllowGroups
Oct 18 07:10:19 dcd-gentoo sshd[16409]: error: PAM: Authentication failure for illegal user root from 222.186.175.140
Oct 18 07:10:14 dcd-gentoo sshd[16409]: User root from 222.186.175.140 not allowed because none of user's groups are listed in AllowGroups
Oct 18 07:10:19 dcd-gentoo sshd[16409]: error: PAM: Authentication failure for illegal user root from 222.186.175.140
Oct 18 07:10:19 dcd-gentoo sshd[16409]: Failed keyboard-interactive/pam for invalid user root from 222.186.175.140 port 9348 ssh2
...
2019-10-18 13:11:00
106.13.12.76 attackbotsspam
Oct 15 09:12:00 HOSTNAME sshd[27948]: User r.r from 106.13.12.76 not allowed because not listed in AllowUsers
Oct 15 09:12:00 HOSTNAME sshd[27948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.12.76  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=106.13.12.76
2019-10-18 12:49:59
189.79.11.67 attackspam
Oct 18 06:47:57 v22019058497090703 sshd[19125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.79.11.67
Oct 18 06:48:00 v22019058497090703 sshd[19125]: Failed password for invalid user 1234567890 from 189.79.11.67 port 44640 ssh2
Oct 18 06:52:51 v22019058497090703 sshd[19492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.79.11.67
...
2019-10-18 13:06:48
185.217.71.155 attackspam
fell into ViewStateTrap:berlin
2019-10-18 12:48:56
194.61.26.34 attackspam
Invalid user test from 194.61.26.34 port 43297
2019-10-18 13:03:53
51.158.184.28 attackspambots
Oct 18 05:55:10 rotator sshd\[28346\]: Failed password for root from 51.158.184.28 port 42338 ssh2Oct 18 05:55:13 rotator sshd\[28346\]: Failed password for root from 51.158.184.28 port 42338 ssh2Oct 18 05:55:17 rotator sshd\[28346\]: Failed password for root from 51.158.184.28 port 42338 ssh2Oct 18 05:55:19 rotator sshd\[28346\]: Failed password for root from 51.158.184.28 port 42338 ssh2Oct 18 05:55:22 rotator sshd\[28346\]: Failed password for root from 51.158.184.28 port 42338 ssh2Oct 18 05:55:25 rotator sshd\[28346\]: Failed password for root from 51.158.184.28 port 42338 ssh2
...
2019-10-18 13:20:38
159.203.27.87 attackspambots
Wordpress bruteforce
2019-10-18 13:24:26
60.190.222.173 attackspam
10/18/2019-05:55:15.161187 60.190.222.173 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433
2019-10-18 13:26:33
159.89.36.171 attack
Oct 18 06:52:33 www sshd\[13466\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.36.171  user=root
Oct 18 06:52:35 www sshd\[13466\]: Failed password for root from 159.89.36.171 port 33434 ssh2
Oct 18 06:56:06 www sshd\[13530\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.36.171  user=root
...
2019-10-18 12:53:09
54.39.75.1 attackspambots
Oct 18 07:12:38 SilenceServices sshd[11067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.75.1
2019-10-18 13:25:02
27.111.43.195 attack
xmlrpc attack
2019-10-18 13:13:11
181.176.163.164 attackbots
Oct 18 06:31:27 vtv3 sshd\[27557\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.176.163.164  user=root
Oct 18 06:31:29 vtv3 sshd\[27557\]: Failed password for root from 181.176.163.164 port 33196 ssh2
Oct 18 06:35:47 vtv3 sshd\[29879\]: Invalid user user from 181.176.163.164 port 44022
Oct 18 06:35:47 vtv3 sshd\[29879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.176.163.164
Oct 18 06:35:49 vtv3 sshd\[29879\]: Failed password for invalid user user from 181.176.163.164 port 44022 ssh2
Oct 18 06:49:24 vtv3 sshd\[3955\]: Invalid user nt from 181.176.163.164 port 48306
Oct 18 06:49:24 vtv3 sshd\[3955\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.176.163.164
Oct 18 06:49:26 vtv3 sshd\[3955\]: Failed password for invalid user nt from 181.176.163.164 port 48306 ssh2
Oct 18 06:54:21 vtv3 sshd\[6592\]: Invalid user danny.kwan from 181.176.163.164 port 59142
Oct 18 0
2019-10-18 12:49:39
45.236.129.32 attack
Oct 18 04:48:47 vz239 sshd[6723]: reveeclipse mapping checking getaddrinfo for technicpro.cl [45.236.129.32] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct 18 04:48:47 vz239 sshd[6714]: reveeclipse mapping checking getaddrinfo for technicpro.cl [45.236.129.32] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct 18 04:48:47 vz239 sshd[6723]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.236.129.32  user=r.r
Oct 18 04:48:47 vz239 sshd[6714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.236.129.32  user=r.r
Oct 18 04:48:48 vz239 sshd[6725]: reveeclipse mapping checking getaddrinfo for technicpro.cl [45.236.129.32] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct 18 04:48:48 vz239 sshd[6715]: reveeclipse mapping checking getaddrinfo for technicpro.cl [45.236.129.32] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct 18 04:48:48 vz239 sshd[6722]: reveeclipse mapping checking getaddrinfo for technicpro.cl [45.236.129.32] fai........
-------------------------------
2019-10-18 12:57:15
111.120.133.247 attackspambots
scan z
2019-10-18 13:21:15
42.81.160.96 attackbots
SSH/22 MH Probe, BF, Hack -
2019-10-18 13:02:12

最近上报的IP列表

173.252.127.118 38.242.16.3 215.208.211.111 234.20.117.176
97.189.154.70 211.54.165.29 166.175.188.185 170.83.35.94
45.148.232.249 7.80.209.255 185.188.128.189 50.39.241.119
224.242.56.39 163.169.92.249 104.78.246.61 113.164.46.132
178.224.65.161 220.191.56.57 11.2.42.149 155.143.147.225