必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspam
Sep 14 15:50:46 ws12vmsma01 sshd[44246]: Failed password for invalid user chandra from 138.68.221.125 port 51050 ssh2
Sep 14 15:55:14 ws12vmsma01 sshd[44941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.221.125  user=root
Sep 14 15:55:16 ws12vmsma01 sshd[44941]: Failed password for root from 138.68.221.125 port 43254 ssh2
...
2020-09-15 03:34:19
attackspambots
Sep 14 15:59:07 gw1 sshd[22982]: Failed password for root from 138.68.221.125 port 38184 ssh2
...
2020-09-14 19:30:01
attack
$lgm
2020-09-01 05:12:23
attack
<6 unauthorized SSH connections
2020-08-28 16:16:56
attack
Invalid user vimal from 138.68.221.125 port 50792
2020-08-23 18:50:38
attackbotsspam
2020-08-20T12:36:47.747281vps-d63064a2 sshd[4303]: Invalid user webapp from 138.68.221.125 port 58738
2020-08-20T12:36:49.917369vps-d63064a2 sshd[4303]: Failed password for invalid user webapp from 138.68.221.125 port 58738 ssh2
2020-08-20T12:40:34.439328vps-d63064a2 sshd[4356]: User root from 138.68.221.125 not allowed because not listed in AllowUsers
2020-08-20T12:40:34.457321vps-d63064a2 sshd[4356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.221.125  user=root
2020-08-20T12:40:34.439328vps-d63064a2 sshd[4356]: User root from 138.68.221.125 not allowed because not listed in AllowUsers
2020-08-20T12:40:36.111770vps-d63064a2 sshd[4356]: Failed password for invalid user root from 138.68.221.125 port 40020 ssh2
...
2020-08-20 23:06:21
attackbots
Aug  6 15:25:01 rancher-0 sshd[844998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.221.125  user=root
Aug  6 15:25:03 rancher-0 sshd[844998]: Failed password for root from 138.68.221.125 port 34710 ssh2
...
2020-08-06 23:11:36
attackspam
Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-08-04 04:29:57
attack
Jul 31 01:09:32 root sshd[21974]: Failed password for root from 138.68.221.125 port 33480 ssh2
Jul 31 01:18:04 root sshd[23103]: Failed password for root from 138.68.221.125 port 49456 ssh2
...
2020-07-31 07:45:00
attackbotsspam
Jul 23 18:55:43 ns382633 sshd\[27921\]: Invalid user edmond from 138.68.221.125 port 48400
Jul 23 18:55:43 ns382633 sshd\[27921\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.221.125
Jul 23 18:55:45 ns382633 sshd\[27921\]: Failed password for invalid user edmond from 138.68.221.125 port 48400 ssh2
Jul 23 19:00:51 ns382633 sshd\[28870\]: Invalid user student from 138.68.221.125 port 41082
Jul 23 19:00:51 ns382633 sshd\[28870\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.221.125
2020-07-24 02:51:19
attackbotsspam
2020-07-17T12:21:56+0000 Failed SSH Authentication/Brute Force Attack. (Server 6)
2020-07-17 20:24:37
attackbotsspam
Jul 16 19:20:10 vps-51d81928 sshd[1236]: Invalid user valentin from 138.68.221.125 port 38034
Jul 16 19:20:10 vps-51d81928 sshd[1236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.221.125 
Jul 16 19:20:10 vps-51d81928 sshd[1236]: Invalid user valentin from 138.68.221.125 port 38034
Jul 16 19:20:12 vps-51d81928 sshd[1236]: Failed password for invalid user valentin from 138.68.221.125 port 38034 ssh2
Jul 16 19:24:19 vps-51d81928 sshd[1341]: Invalid user data from 138.68.221.125 port 55650
...
2020-07-17 04:12:47
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.221.125
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26409
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.221.125.			IN	A

;; AUTHORITY SECTION:
.			426	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020071603 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jul 17 04:12:44 CST 2020
;; MSG SIZE  rcvd: 118
HOST信息:
Host 125.221.68.138.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 125.221.68.138.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
178.49.9.210 attack
Invalid user dns from 178.49.9.210 port 33702
2019-06-29 20:43:14
92.50.150.78 attackbotsspam
Unauthorized connection attempt from IP address 92.50.150.78 on Port 445(SMB)
2019-06-29 20:47:53
5.77.254.109 attack
Unauthorized connection attempt from IP address 5.77.254.109 on Port 445(SMB)
2019-06-29 20:56:50
198.27.67.17 attackspam
Automatic report - Web App Attack
2019-06-29 20:56:32
177.221.98.154 attack
libpam_shield report: forced login attempt
2019-06-29 20:37:45
190.90.63.98 attack
timhelmke.de 190.90.63.98 \[29/Jun/2019:10:34:47 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4067 "-" "Mozilla/5.0 \(Windows NT 6.1\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/59.0.3071.109 Safari/537.36"
timhelmke.de 190.90.63.98 \[29/Jun/2019:10:34:51 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4067 "-" "Mozilla/5.0 \(Windows NT 6.1\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/59.0.3071.109 Safari/537.36"
2019-06-29 20:26:14
206.189.65.11 attackbots
Jun 29 13:55:32 srv206 sshd[7775]: Invalid user ftpuser from 206.189.65.11
Jun 29 13:55:32 srv206 sshd[7775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.65.11
Jun 29 13:55:32 srv206 sshd[7775]: Invalid user ftpuser from 206.189.65.11
Jun 29 13:55:34 srv206 sshd[7775]: Failed password for invalid user ftpuser from 206.189.65.11 port 60262 ssh2
...
2019-06-29 20:50:58
137.74.44.162 attackbots
Invalid user user from 137.74.44.162 port 56745
2019-06-29 21:01:03
165.227.97.108 attackbots
Invalid user test3 from 165.227.97.108 port 33388
2019-06-29 20:20:43
117.201.176.13 attackbots
Unauthorized connection attempt from IP address 117.201.176.13 on Port 445(SMB)
2019-06-29 20:53:46
69.45.61.64 attackbotsspam
2019-06-29 03:33:21 H=(00010250.paincareback.icu) [69.45.61.64]:39685 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in zen.spamhaus.org (127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-06-29 03:35:10 H=(00fcacee.paincareback.icu) [69.45.61.64]:46247 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in zen.spamhaus.org (127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-06-29 03:35:10 H=(004719fc.paincareback.icu) [69.45.61.64]:42690 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in zen.spamhaus.org (127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS)
...
2019-06-29 20:19:15
164.151.136.178 attackspambots
Unauthorized connection attempt from IP address 164.151.136.178 on Port 445(SMB)
2019-06-29 21:03:15
218.92.0.192 attackbotsspam
Jun 29 12:46:38 mail sshd\[19978\]: Failed password for root from 218.92.0.192 port 41322 ssh2
Jun 29 13:02:02 mail sshd\[20106\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.192  user=root
...
2019-06-29 20:17:57
203.175.73.186 attack
Unauthorized connection attempt from IP address 203.175.73.186 on Port 445(SMB)
2019-06-29 20:53:12
188.131.241.152 attackbotsspam
Jun 29 14:20:09 lnxmysql61 sshd[13720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.241.152
Jun 29 14:20:10 lnxmysql61 sshd[13720]: Failed password for invalid user vnc_user from 188.131.241.152 port 45654 ssh2
Jun 29 14:24:29 lnxmysql61 sshd[14144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.241.152
2019-06-29 20:25:47

最近上报的IP列表

173.252.127.118 38.242.16.3 215.208.211.111 234.20.117.176
97.189.154.70 211.54.165.29 166.175.188.185 170.83.35.94
45.148.232.249 7.80.209.255 185.188.128.189 50.39.241.119
224.242.56.39 163.169.92.249 104.78.246.61 113.164.46.132
178.224.65.161 220.191.56.57 11.2.42.149 155.143.147.225