必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
138.68.254.64 attackbotsspam
Oct 12 17:27:32 *** sshd[28279]: Invalid user user from 138.68.254.64
2020-10-13 03:13:05
138.68.254.64 attackbots
SSH login attempts.
2020-10-12 18:40:22
138.68.255.120 attackspam
Oct  8 09:25:02 vps46666688 sshd[19317]: Failed password for root from 138.68.255.120 port 39298 ssh2
...
2020-10-09 05:26:55
138.68.254.244 attack
Oct  8 20:33:00 ns381471 sshd[5693]: Failed password for root from 138.68.254.244 port 60588 ssh2
2020-10-09 02:47:23
138.68.255.120 attackspam
Oct  8 09:25:02 vps46666688 sshd[19317]: Failed password for root from 138.68.255.120 port 39298 ssh2
...
2020-10-08 21:41:01
138.68.254.244 attack
Oct  8 10:29:52 vps639187 sshd\[8125\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.254.244  user=root
Oct  8 10:29:54 vps639187 sshd\[8125\]: Failed password for root from 138.68.254.244 port 43284 ssh2
Oct  8 10:33:40 vps639187 sshd\[8215\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.254.244  user=root
...
2020-10-08 18:48:25
138.68.253.149 attackspambots
$f2bV_matches
2020-10-02 03:21:08
138.68.253.149 attackspambots
Time:     Thu Oct  1 10:55:46 2020 +0000
IP:       138.68.253.149 (US/United States/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Oct  1 10:51:54 29-1 sshd[18268]: Invalid user hari from 138.68.253.149 port 58058
Oct  1 10:51:55 29-1 sshd[18268]: Failed password for invalid user hari from 138.68.253.149 port 58058 ssh2
Oct  1 10:54:06 29-1 sshd[18607]: Invalid user www from 138.68.253.149 port 37444
Oct  1 10:54:08 29-1 sshd[18607]: Failed password for invalid user www from 138.68.253.149 port 37444 ssh2
Oct  1 10:55:45 29-1 sshd[18854]: Invalid user ubuntu from 138.68.253.149 port 39752
2020-10-01 19:33:33
138.68.255.120 attack
2020-09-23T00:09:01.806877abusebot-2.cloudsearch.cf sshd[29538]: Invalid user sammy from 138.68.255.120 port 55530
2020-09-23T00:09:01.813930abusebot-2.cloudsearch.cf sshd[29538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.255.120
2020-09-23T00:09:01.806877abusebot-2.cloudsearch.cf sshd[29538]: Invalid user sammy from 138.68.255.120 port 55530
2020-09-23T00:09:03.970950abusebot-2.cloudsearch.cf sshd[29538]: Failed password for invalid user sammy from 138.68.255.120 port 55530 ssh2
2020-09-23T00:18:45.637387abusebot-2.cloudsearch.cf sshd[29560]: Invalid user ircd from 138.68.255.120 port 34316
2020-09-23T00:18:45.643419abusebot-2.cloudsearch.cf sshd[29560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.255.120
2020-09-23T00:18:45.637387abusebot-2.cloudsearch.cf sshd[29560]: Invalid user ircd from 138.68.255.120 port 34316
2020-09-23T00:18:47.639773abusebot-2.cloudsearch.cf sshd[29560]: F
...
2020-09-23 17:48:25
138.68.254.244 attackbots
Invalid user marcus from 138.68.254.244 port 54064
2020-09-23 02:35:14
138.68.254.244 attackspam
Sep 22 12:34:06 vpn01 sshd[11743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.254.244
Sep 22 12:34:08 vpn01 sshd[11743]: Failed password for invalid user ftpuser from 138.68.254.244 port 47284 ssh2
...
2020-09-22 18:40:35
138.68.253.149 attackspam
k+ssh-bruteforce
2020-09-19 20:41:34
138.68.253.149 attack
$f2bV_matches
2020-09-19 12:38:17
138.68.253.149 attackbotsspam
Sep 18 16:15:07 firewall sshd[1687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.253.149
Sep 18 16:15:07 firewall sshd[1687]: Invalid user postgres from 138.68.253.149
Sep 18 16:15:08 firewall sshd[1687]: Failed password for invalid user postgres from 138.68.253.149 port 45956 ssh2
...
2020-09-19 04:15:11
138.68.255.17 attackspambots
2020-09-18T18:58:30.846069ks3355764 sshd[14041]: Failed password for root from 138.68.255.17 port 45480 ssh2
2020-09-18T19:07:54.469420ks3355764 sshd[14150]: Invalid user feered from 138.68.255.17 port 50612
...
2020-09-19 02:50:09
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.25.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61802
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.68.25.68.			IN	A

;; AUTHORITY SECTION:
.			442	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 12:31:26 CST 2022
;; MSG SIZE  rcvd: 105
HOST信息:
68.25.68.138.in-addr.arpa domain name pointer rooter-guard.wpmudev.host.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
68.25.68.138.in-addr.arpa	name = rooter-guard.wpmudev.host.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
200.69.236.229 attackbots
Feb 17 03:27:52 gw1 sshd[23248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.69.236.229
Feb 17 03:27:55 gw1 sshd[23248]: Failed password for invalid user e from 200.69.236.229 port 58450 ssh2
...
2020-02-17 06:30:10
58.19.1.42 attackspam
Feb 17 00:27:29 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=58.19.1.42, lip=212.111.212.230, session=\
Feb 17 00:27:36 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 8 secs\): user=\, method=PLAIN, rip=58.19.1.42, lip=212.111.212.230, session=\
Feb 17 00:27:39 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 9 secs\): user=\, method=PLAIN, rip=58.19.1.42, lip=212.111.212.230, session=\
Feb 17 00:27:49 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 12 secs\): user=\, method=PLAIN, rip=58.19.1.42, lip=212.111.212.230, session=\
Feb 17 00:27:52 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 12 secs\): user=\, method=PLAIN, rip=58.19.1.42, lip=212.111.212.230, sessi
...
2020-02-17 06:32:43
189.209.121.22 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-17 07:07:41
134.175.32.95 attackspambots
Feb 17 03:27:46 gw1 sshd[23230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.32.95
Feb 17 03:27:48 gw1 sshd[23230]: Failed password for invalid user hill from 134.175.32.95 port 55710 ssh2
...
2020-02-17 06:37:15
159.203.62.249 attack
159.203.62.249 - - [16/Feb/2020:22:27:18 +0000] "POST /wp-login.php HTTP/1.1" 200 6409 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
159.203.62.249 - - [16/Feb/2020:22:27:20 +0000] "POST /wp-login.php HTTP/1.1" 200 6269 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-02-17 07:04:47
222.186.173.183 attackspambots
Feb 16 17:38:42 NPSTNNYC01T sshd[683]: Failed password for root from 222.186.173.183 port 24090 ssh2
Feb 16 17:38:45 NPSTNNYC01T sshd[683]: Failed password for root from 222.186.173.183 port 24090 ssh2
Feb 16 17:38:48 NPSTNNYC01T sshd[683]: Failed password for root from 222.186.173.183 port 24090 ssh2
Feb 16 17:38:54 NPSTNNYC01T sshd[683]: error: maximum authentication attempts exceeded for root from 222.186.173.183 port 24090 ssh2 [preauth]
...
2020-02-17 06:40:02
190.131.201.122 attackspambots
SSH Brute-Force reported by Fail2Ban
2020-02-17 06:44:20
189.209.164.30 attackspam
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-17 06:48:59
218.92.0.184 attack
Feb 16 22:47:32 game-panel sshd[24038]: Failed password for root from 218.92.0.184 port 29166 ssh2
Feb 16 22:47:44 game-panel sshd[24038]: error: maximum authentication attempts exceeded for root from 218.92.0.184 port 29166 ssh2 [preauth]
Feb 16 22:48:00 game-panel sshd[24053]: Failed password for root from 218.92.0.184 port 6907 ssh2
2020-02-17 07:09:21
185.153.199.155 attack
Feb 16 23:48:38 lnxded63 sshd[31678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.153.199.155
Feb 16 23:48:40 lnxded63 sshd[31678]: Failed password for invalid user 0 from 185.153.199.155 port 18331 ssh2
Feb 16 23:48:44 lnxded63 sshd[31683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.153.199.155
2020-02-17 06:56:40
35.201.217.165 attackspambots
Feb 16 12:55:29 sachi sshd\[15634\]: Invalid user download from 35.201.217.165
Feb 16 12:55:29 sachi sshd\[15634\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.217.201.35.bc.googleusercontent.com
Feb 16 12:55:30 sachi sshd\[15634\]: Failed password for invalid user download from 35.201.217.165 port 40236 ssh2
Feb 16 12:58:38 sachi sshd\[15932\]: Invalid user admin from 35.201.217.165
Feb 16 12:58:38 sachi sshd\[15932\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.217.201.35.bc.googleusercontent.com
2020-02-17 07:01:48
222.165.186.51 attack
Feb 16 23:11:00 server sshd[243865]: Failed password for invalid user marlon from 222.165.186.51 port 51196 ssh2
Feb 16 23:24:06 server sshd[244313]: Failed password for invalid user upload from 222.165.186.51 port 42518 ssh2
Feb 16 23:27:12 server sshd[244573]: Failed password for invalid user india from 222.165.186.51 port 43976 ssh2
2020-02-17 07:13:04
5.135.165.51 attack
Feb 16 23:39:09 srv-ubuntu-dev3 sshd[43834]: Invalid user negrete from 5.135.165.51
Feb 16 23:39:09 srv-ubuntu-dev3 sshd[43834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.165.51
Feb 16 23:39:09 srv-ubuntu-dev3 sshd[43834]: Invalid user negrete from 5.135.165.51
Feb 16 23:39:10 srv-ubuntu-dev3 sshd[43834]: Failed password for invalid user negrete from 5.135.165.51 port 43930 ssh2
Feb 16 23:42:10 srv-ubuntu-dev3 sshd[44090]: Invalid user nagios from 5.135.165.51
Feb 16 23:42:10 srv-ubuntu-dev3 sshd[44090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.165.51
Feb 16 23:42:10 srv-ubuntu-dev3 sshd[44090]: Invalid user nagios from 5.135.165.51
Feb 16 23:42:12 srv-ubuntu-dev3 sshd[44090]: Failed password for invalid user nagios from 5.135.165.51 port 44984 ssh2
Feb 16 23:45:04 srv-ubuntu-dev3 sshd[44359]: Invalid user allan from 5.135.165.51
...
2020-02-17 07:02:20
35.236.153.43 attackbots
sshd jail - ssh hack attempt
2020-02-17 06:59:34
185.53.88.29 attack
[2020-02-16 17:37:55] NOTICE[1148][C-00009c02] chan_sip.c: Call from '' (185.53.88.29:5070) to extension '5011972595778361' rejected because extension not found in context 'public'.
[2020-02-16 17:37:55] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-16T17:37:55.097-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="5011972595778361",SessionID="0x7fd82cdc4bd8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.29/5070",ACLName="no_extension_match"
[2020-02-16 17:45:30] NOTICE[1148][C-00009c5b] chan_sip.c: Call from '' (185.53.88.29:5074) to extension '1011972595778361' rejected because extension not found in context 'public'.
[2020-02-16 17:45:30] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-02-16T17:45:30.060-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="1011972595778361",SessionID="0x7fd82c7969d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/18
...
2020-02-17 07:04:33

最近上报的IP列表

138.68.255.23 138.68.27.75 138.68.27.37 138.68.248.52
138.68.251.172 138.68.255.83 138.68.249.145 138.68.25.217
97.205.232.102 138.68.252.23 138.68.28.90 138.68.26.205
138.68.30.33 138.68.31.115 138.68.31.221 138.68.31.240
138.68.36.60 138.68.37.252 138.68.3.61 138.68.31.58