必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Aug 26 22:51:40 mellenthin sshd[8736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.4.131  user=root
Aug 26 22:51:42 mellenthin sshd[8736]: Failed password for invalid user root from 138.68.4.131 port 47438 ssh2
2020-08-27 07:18:51
attackbots
Aug 25 00:52:46 vps647732 sshd[19935]: Failed password for root from 138.68.4.131 port 34270 ssh2
Aug 25 00:59:53 vps647732 sshd[20175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.4.131
...
2020-08-25 07:00:14
attackspam
2020-08-24T13:45:13.702070+02:00  sshd[22551]: Failed password for invalid user sinus from 138.68.4.131 port 39732 ssh2
2020-08-25 02:33:33
attackspam
Jul 24 23:08:05 localhost sshd[23930]: Invalid user postgres from 138.68.4.131 port 39346
Jul 24 23:08:05 localhost sshd[23930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.4.131
Jul 24 23:08:05 localhost sshd[23930]: Invalid user postgres from 138.68.4.131 port 39346
Jul 24 23:08:07 localhost sshd[23930]: Failed password for invalid user postgres from 138.68.4.131 port 39346 ssh2
Jul 24 23:14:19 localhost sshd[24622]: Invalid user admin from 138.68.4.131 port 35906
...
2020-07-25 07:28:19
attackspambots
2020-07-22T13:49:03.410125mail.thespaminator.com sshd[25249]: Invalid user project from 138.68.4.131 port 50774
2020-07-22T13:49:05.477241mail.thespaminator.com sshd[25249]: Failed password for invalid user project from 138.68.4.131 port 50774 ssh2
...
2020-07-23 03:11:27
attackspambots
Invalid user meeting from 138.68.4.131 port 49996
2020-07-19 02:56:54
相同子网IP讨论:
IP 类型 评论内容 时间
138.68.4.8 attack
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-10-09T19:07:51Z and 2020-10-09T19:14:32Z
2020-10-10 06:33:05
138.68.4.8 attackspam
Oct  9 12:39:22 vps-51d81928 sshd[681499]: Failed password for root from 138.68.4.8 port 44060 ssh2
Oct  9 12:40:25 vps-51d81928 sshd[681523]: Invalid user test from 138.68.4.8 port 33238
Oct  9 12:40:25 vps-51d81928 sshd[681523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.4.8 
Oct  9 12:40:25 vps-51d81928 sshd[681523]: Invalid user test from 138.68.4.8 port 33238
Oct  9 12:40:27 vps-51d81928 sshd[681523]: Failed password for invalid user test from 138.68.4.8 port 33238 ssh2
...
2020-10-09 22:44:39
138.68.4.8 attack
Oct  9 08:19:22 pornomens sshd\[22347\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.4.8  user=root
Oct  9 08:19:24 pornomens sshd\[22347\]: Failed password for root from 138.68.4.8 port 42976 ssh2
Oct  9 08:22:54 pornomens sshd\[22392\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.4.8  user=root
...
2020-10-09 14:35:52
138.68.44.55 attackspam
2020-10-08T02:17:38.530793hostname sshd[32013]: Failed password for root from 138.68.44.55 port 50230 ssh2
2020-10-08T02:20:50.966324hostname sshd[821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55  user=root
2020-10-08T02:20:53.269048hostname sshd[821]: Failed password for root from 138.68.44.55 port 47628 ssh2
...
2020-10-08 05:19:31
138.68.44.55 attack
$f2bV_matches
2020-10-07 21:43:18
138.68.44.55 attackspambots
Oct  7 03:19:27 ns382633 sshd\[23310\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55  user=root
Oct  7 03:19:29 ns382633 sshd\[23310\]: Failed password for root from 138.68.44.55 port 34600 ssh2
Oct  7 03:32:01 ns382633 sshd\[25022\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55  user=root
Oct  7 03:32:03 ns382633 sshd\[25022\]: Failed password for root from 138.68.44.55 port 47152 ssh2
Oct  7 03:36:05 ns382633 sshd\[25759\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55  user=root
2020-10-07 13:30:05
138.68.45.164 attack
Attempt to hack Wordpress Login, XMLRPC or other login
2020-10-07 05:15:44
138.68.45.164 attackspambots
138.68.45.164 - - [06/Oct/2020:12:16:54 +0100] "POST /wp-login.php HTTP/1.1" 200 2426 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.45.164 - - [06/Oct/2020:12:17:01 +0100] "POST /wp-login.php HTTP/1.1" 200 2407 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.45.164 - - [06/Oct/2020:12:17:03 +0100] "POST /wp-login.php HTTP/1.1" 200 2405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-06 21:24:16
138.68.45.164 attackbotsspam
138.68.45.164 - - [06/Oct/2020:06:45:09 +0200] "GET /wp-login.php HTTP/1.1" 200 9061 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.45.164 - - [06/Oct/2020:06:45:13 +0200] "POST /wp-login.php HTTP/1.1" 200 9312 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
138.68.45.164 - - [06/Oct/2020:06:45:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-10-06 13:06:21
138.68.4.8 attackspam
Sep 29 01:28:03 ip106 sshd[9808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.4.8 
Sep 29 01:28:05 ip106 sshd[9808]: Failed password for invalid user mdpi from 138.68.4.8 port 47404 ssh2
...
2020-09-30 09:08:49
138.68.4.8 attack
Sep 29 01:28:03 ip106 sshd[9808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.4.8 
Sep 29 01:28:05 ip106 sshd[9808]: Failed password for invalid user mdpi from 138.68.4.8 port 47404 ssh2
...
2020-09-30 02:00:16
138.68.4.8 attack
Sep 29 01:28:03 ip106 sshd[9808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.4.8 
Sep 29 01:28:05 ip106 sshd[9808]: Failed password for invalid user mdpi from 138.68.4.8 port 47404 ssh2
...
2020-09-29 18:01:49
138.68.44.55 attackspam
2020-09-24T14:54:46.390798devel sshd[27891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55
2020-09-24T14:54:46.385075devel sshd[27891]: Invalid user arief from 138.68.44.55 port 52716
2020-09-24T14:54:48.629319devel sshd[27891]: Failed password for invalid user arief from 138.68.44.55 port 52716 ssh2
2020-09-25 03:49:45
138.68.44.55 attackbots
Sep 24 05:23:45 firewall sshd[25140]: Invalid user Administrator from 138.68.44.55
Sep 24 05:23:48 firewall sshd[25140]: Failed password for invalid user Administrator from 138.68.44.55 port 60244 ssh2
Sep 24 05:28:19 firewall sshd[25293]: Invalid user user from 138.68.44.55
...
2020-09-24 19:36:58
138.68.40.92 attackbots
firewall-block, port(s): 9976/tcp
2020-09-20 02:41:01
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.4.131
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 336
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.4.131.			IN	A

;; AUTHORITY SECTION:
.			297	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020071801 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jul 19 02:56:49 CST 2020
;; MSG SIZE  rcvd: 116
HOST信息:
Host 131.4.68.138.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 131.4.68.138.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
80.82.77.139 attack
Mar 13 12:06:49 debian-2gb-nbg1-2 kernel: \[6356743.323379\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=80.82.77.139 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=120 ID=16183 PROTO=TCP SPT=30909 DPT=21 WINDOW=35303 RES=0x00 SYN URGP=0
2020-03-13 19:29:37
91.206.15.191 attack
Mar 13 12:25:27 debian-2gb-nbg1-2 kernel: \[6357861.690055\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=91.206.15.191 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=29055 PROTO=TCP SPT=52307 DPT=52654 WINDOW=1024 RES=0x00 SYN URGP=0
2020-03-13 19:47:12
180.252.44.81 attackbots
Automatic report - Port Scan Attack
2020-03-13 19:51:00
128.199.225.104 attack
Mar 13 12:17:35 localhost sshd\[2918\]: Invalid user abdullah from 128.199.225.104 port 54880
Mar 13 12:17:35 localhost sshd\[2918\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.225.104
Mar 13 12:17:38 localhost sshd\[2918\]: Failed password for invalid user abdullah from 128.199.225.104 port 54880 ssh2
2020-03-13 19:43:10
103.10.198.121 attackbots
Lines containing failures of 103.10.198.121
/var/log/apache/pucorp.org.log:2020-03-13T06:25:06.217519+01:00 edughostname sshd[2518928]: Invalid user gzuser from 103.10.198.121 port 51030
/var/log/apache/pucorp.org.log:2020-03-13T06:25:06.245708+01:00 edughostname sshd[2518928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.10.198.121 
/var/log/apache/pucorp.org.log:2020-03-13T06:25:06.259009+01:00 edughostname sshd[2518928]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.10.198.121 user=gzuser
/var/log/apache/pucorp.org.log:2020-03-13T06:25:07.898565+01:00 edughostname sshd[2518928]: Failed password for invalid user gzuser from 103.10.198.121 port 51030 ssh2
/var/log/apache/pucorp.org.log:2020-03-13T06:25:08.712067+01:00 edughostname sshd[2518928]: Received disconnect from 103.10.198.121 port 51030:11: Bye Bye [preauth]
/var/log/apache/pucorp.org.log:2020-03-13T06:25:08.712510+01:00........
------------------------------
2020-03-13 19:20:59
222.186.52.78 attack
Mar 13 12:21:02 * sshd[25157]: Failed password for root from 222.186.52.78 port 32872 ssh2
2020-03-13 20:01:27
172.16.0.1 attack
authentication failure
2020-03-13 19:49:48
85.192.179.70 attackbots
Unauthorized connection attempt from IP address 85.192.179.70 on Port 445(SMB)
2020-03-13 19:59:16
158.46.175.83 attackbots
Chat Spam
2020-03-13 19:58:52
167.99.75.174 attack
Mar 13 11:28:49 internal-server-tf sshd\[3761\]: Invalid user siteimagecrusher from 167.99.75.174Mar 13 11:32:50 internal-server-tf sshd\[3840\]: Invalid user siteimagecrusher from 167.99.75.174
...
2020-03-13 19:44:14
222.186.30.57 attackspam
[MK-VM5] SSH login failed
2020-03-13 19:17:03
124.123.105.236 attack
$f2bV_matches
2020-03-13 19:31:39
163.172.111.59 attack
Unauthorized connection attempt detected from IP address 163.172.111.59 to port 3607
2020-03-13 19:26:12
106.12.95.45 attack
2020-03-13T06:07:39.794293shield sshd\[25125\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.95.45  user=root
2020-03-13T06:07:41.247986shield sshd\[25125\]: Failed password for root from 106.12.95.45 port 35512 ssh2
2020-03-13T06:11:23.318372shield sshd\[25795\]: Invalid user crystal from 106.12.95.45 port 49278
2020-03-13T06:11:23.327960shield sshd\[25795\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.95.45
2020-03-13T06:11:25.865921shield sshd\[25795\]: Failed password for invalid user crystal from 106.12.95.45 port 49278 ssh2
2020-03-13 19:19:39
31.15.241.237 attackspambots
2020-03-1304:46:391jCbHS-0002kW-27\<=info@whatsup2013.chH=\(localhost\)[171.4.0.237]:36179P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2313id=DFDA6C3F34E0CE7DA1A4ED55A1892042@whatsup2013.chT="fromDarya"forroxas023@gmail.combrockdurflinger@yahoo.com2020-03-1304:46:501jCbHd-0002lI-Mr\<=info@whatsup2013.chH=\(localhost\)[123.24.205.125]:36066P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2303id=D0D563303BEFC172AEABE25AAE9DEBDF@whatsup2013.chT="fromDarya"fordcitrano00@gmail.comroylind1967@gmail.com2020-03-1304:46:231jCbHC-0002jO-4p\<=info@whatsup2013.chH=\(localhost\)[14.169.140.253]:57374P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2341id=232690C3C81C32815D5811A95DAF0E43@whatsup2013.chT="fromDarya"forposliguarivaldo@gmail.coma.a.s.makita@gmail.com2020-03-1304:46:001jCbGq-0002gJ-1p\<=info@whatsup2013.chH=\(localhost\)[183.89.238.187]:48338P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-
2020-03-13 19:52:20

最近上报的IP列表

92.30.144.219 125.85.152.253 119.4.96.0 204.233.0.224
9.70.71.126 228.120.236.174 180.135.113.35 1.206.42.121
245.61.243.68 59.229.44.200 35.175.181.112 157.82.236.108
53.61.59.9 167.206.40.203 151.101.90.44 190.122.240.199
185.101.217.215 177.79.4.131 7.54.207.40 153.35.93.145