必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Santa Clara

省份(region): California

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
138.68.44.55 attackspam
2020-10-08T02:17:38.530793hostname sshd[32013]: Failed password for root from 138.68.44.55 port 50230 ssh2
2020-10-08T02:20:50.966324hostname sshd[821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55  user=root
2020-10-08T02:20:53.269048hostname sshd[821]: Failed password for root from 138.68.44.55 port 47628 ssh2
...
2020-10-08 05:19:31
138.68.44.55 attack
$f2bV_matches
2020-10-07 21:43:18
138.68.44.55 attackspambots
Oct  7 03:19:27 ns382633 sshd\[23310\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55  user=root
Oct  7 03:19:29 ns382633 sshd\[23310\]: Failed password for root from 138.68.44.55 port 34600 ssh2
Oct  7 03:32:01 ns382633 sshd\[25022\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55  user=root
Oct  7 03:32:03 ns382633 sshd\[25022\]: Failed password for root from 138.68.44.55 port 47152 ssh2
Oct  7 03:36:05 ns382633 sshd\[25759\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55  user=root
2020-10-07 13:30:05
138.68.44.55 attackspam
2020-09-24T14:54:46.390798devel sshd[27891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55
2020-09-24T14:54:46.385075devel sshd[27891]: Invalid user arief from 138.68.44.55 port 52716
2020-09-24T14:54:48.629319devel sshd[27891]: Failed password for invalid user arief from 138.68.44.55 port 52716 ssh2
2020-09-25 03:49:45
138.68.44.55 attackbots
Sep 24 05:23:45 firewall sshd[25140]: Invalid user Administrator from 138.68.44.55
Sep 24 05:23:48 firewall sshd[25140]: Failed password for invalid user Administrator from 138.68.44.55 port 60244 ssh2
Sep 24 05:28:19 firewall sshd[25293]: Invalid user user from 138.68.44.55
...
2020-09-24 19:36:58
138.68.44.55 attack
(sshd) Failed SSH login from 138.68.44.55 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 15 06:53:46 optimus sshd[19869]: Invalid user mcserver from 138.68.44.55
Sep 15 06:53:46 optimus sshd[19869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55 
Sep 15 06:53:48 optimus sshd[19869]: Failed password for invalid user mcserver from 138.68.44.55 port 58078 ssh2
Sep 15 06:57:43 optimus sshd[21202]: Invalid user alfred from 138.68.44.55
Sep 15 06:57:43 optimus sshd[21202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55
2020-09-15 20:27:52
138.68.44.55 attack
Banned for a week because repeated abuses, for example SSH, but not only
2020-09-15 12:29:30
138.68.44.55 attack
$f2bV_matches
2020-09-15 04:38:59
138.68.44.55 attack
Sep  9 03:41:43 web9 sshd\[8545\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55  user=root
Sep  9 03:41:46 web9 sshd\[8545\]: Failed password for root from 138.68.44.55 port 33664 ssh2
Sep  9 03:45:32 web9 sshd\[8965\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55  user=root
Sep  9 03:45:33 web9 sshd\[8965\]: Failed password for root from 138.68.44.55 port 39214 ssh2
Sep  9 03:49:22 web9 sshd\[9395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55  user=root
2020-09-09 21:52:14
138.68.44.55 attack
2020-09-09T11:17:06.575198paragon sshd[259184]: Failed password for invalid user conter from 138.68.44.55 port 36638 ssh2
2020-09-09T11:20:48.403075paragon sshd[259393]: Invalid user admin from 138.68.44.55 port 42688
2020-09-09T11:20:48.407403paragon sshd[259393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55
2020-09-09T11:20:48.403075paragon sshd[259393]: Invalid user admin from 138.68.44.55 port 42688
2020-09-09T11:20:50.465369paragon sshd[259393]: Failed password for invalid user admin from 138.68.44.55 port 42688 ssh2
...
2020-09-09 15:40:20
138.68.44.55 attackbotsspam
Lines containing failures of 138.68.44.55 (max 1000)
Sep  7 02:33:56 archiv sshd[5814]: Invalid user sogo from 138.68.44.55 port 60232
Sep  7 02:33:56 archiv sshd[5814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55
Sep  7 02:33:58 archiv sshd[5814]: Failed password for invalid user sogo from 138.68.44.55 port 60232 ssh2
Sep  7 02:33:58 archiv sshd[5814]: Received disconnect from 138.68.44.55 port 60232:11: Bye Bye [preauth]
Sep  7 02:33:58 archiv sshd[5814]: Disconnected from 138.68.44.55 port 60232 [preauth]
Sep  7 02:39:20 archiv sshd[5842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.44.55  user=r.r
Sep  7 02:39:21 archiv sshd[5842]: Failed password for r.r from 138.68.44.55 port 46094 ssh2
Sep  7 02:39:21 archiv sshd[5842]: Received disconnect from 138.68.44.55 port 46094:11: Bye Bye [preauth]
Sep  7 02:39:21 archiv sshd[5842]: Disconnected from 138.68.44.55 por........
------------------------------
2020-09-09 07:49:33
138.68.44.204 attackbotsspam
xmlrpc attack
2020-08-08 08:28:06
138.68.44.236 attackbots
Invalid user chenyu from 138.68.44.236 port 54320
2020-07-27 07:21:00
138.68.44.236 attackspambots
$f2bV_matches
2020-07-24 21:23:32
138.68.44.236 attackspambots
Invalid user carla from 138.68.44.236 port 46422
2020-07-18 23:13:46
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.44.180
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8607
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.68.44.180.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025093002 1800 900 604800 86400

;; Query time: 32 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 01 04:00:25 CST 2025
;; MSG SIZE  rcvd: 106
HOST信息:
180.44.68.138.in-addr.arpa domain name pointer prod-boron-sfo2-53.do.binaryedge.ninja.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
180.44.68.138.in-addr.arpa	name = prod-boron-sfo2-53.do.binaryedge.ninja.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
122.144.134.27 attackspam
Mar 18 14:05:42 plex sshd[31478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.144.134.27  user=root
Mar 18 14:05:44 plex sshd[31478]: Failed password for root from 122.144.134.27 port 3220 ssh2
2020-03-19 04:49:36
82.45.17.179 attackbotsspam
Honeypot attack, port: 5555, PTR: cpc87815-haye26-2-0-cust178.17-4.cable.virginm.net.
2020-03-19 04:48:13
66.240.219.146 attackbots
ET CINS Active Threat Intelligence Poor Reputation IP group 55 - port: 3048 proto: TCP cat: Misc Attack
2020-03-19 04:52:07
222.236.198.50 attackbots
(sshd) Failed SSH login from 222.236.198.50 (KR/South Korea/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 18 19:00:00 ubnt-55d23 sshd[13891]: Invalid user postgres from 222.236.198.50 port 55294
Mar 18 19:00:02 ubnt-55d23 sshd[13891]: Failed password for invalid user postgres from 222.236.198.50 port 55294 ssh2
2020-03-19 05:04:40
52.183.128.237 attackbots
SSH authentication failure x 6 reported by Fail2Ban
...
2020-03-19 05:13:49
37.110.18.242 attackbots
Fail2Ban Ban Triggered (2)
2020-03-19 04:59:41
49.232.162.235 attackbotsspam
Mar 18 22:25:19 lukav-desktop sshd\[791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.162.235  user=root
Mar 18 22:25:21 lukav-desktop sshd\[791\]: Failed password for root from 49.232.162.235 port 47630 ssh2
Mar 18 22:30:08 lukav-desktop sshd\[827\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.162.235  user=root
Mar 18 22:30:09 lukav-desktop sshd\[827\]: Failed password for root from 49.232.162.235 port 44778 ssh2
Mar 18 22:35:00 lukav-desktop sshd\[899\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.162.235  user=root
2020-03-19 05:06:12
5.196.71.132 attack
SSH login attempts with user root.
2020-03-19 04:50:30
159.65.144.36 attackbotsspam
SSH Brute Force
2020-03-19 04:59:58
103.197.57.240 attackspam
2020-03-18T20:49:34.019298shield sshd\[9860\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.197.57.240  user=root
2020-03-18T20:49:36.059870shield sshd\[9860\]: Failed password for root from 103.197.57.240 port 52134 ssh2
2020-03-18T20:52:16.045099shield sshd\[10525\]: Invalid user ns2cserver from 103.197.57.240 port 38210
2020-03-18T20:52:16.050407shield sshd\[10525\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.197.57.240
2020-03-18T20:52:18.135886shield sshd\[10525\]: Failed password for invalid user ns2cserver from 103.197.57.240 port 38210 ssh2
2020-03-19 04:55:00
60.130.173.117 attack
SSH login attempts with user root.
2020-03-19 05:10:45
167.114.226.137 attackbots
Too many connections or unauthorized access detected from Arctic banned ip
2020-03-19 05:06:39
104.18.70.28 spam
AGAIN and AGAIN and ALWAYS the same REGISTRAR as 1api.net TO STOP IMMEDIATELY for keeping SPAMMERS, LIERS, ROBERS and else since too many years ! The cheapest service, as usual...
Dossier transmis aux autorités Européennes et Françaises pour CONDAMNATION à 750 € par POURRIEL émis les SOUS MERDES, OK ?

From: Joka 
Date: Wed, 18 Mar 2020 16:46:18 +0000
Subject: LE CASINO JOKA. =?utf-8?b?T8OZ?= LES FORTUNES SE PROFILENT
Message-Id: <4WMA.BA1D.F33KVOH670.20200318164618859@bestoffer-today.com>

live@bestoffer-today.com which send to « https://bestoffer-today.com/4WMA-BA1D-F33KVOH670/uauto.aspx » to BURN / CLOSE / DELETTE / STOP IMMEDIATELY for SPAM, PHISHING and SCAM on STOLLEN List ! ! !

bestoffer-today.com => 1api.net

bestoffer-today.com => 104.16.209.86

104.16.209.86 => cloudflare.com AS USUAL...

1api.net => 84.200.110.124

84.200.110.124 => accelerated.de

live@bestoffer-today.com => 94.143.106.199

94.143.106.199 => dotmailer.com

dotmailer.com => 104.18.70.28

104.18.70.28 => cloudflare.com AS USUAL...

dotmailer.com send to dotdigital.com

dotdigital.com => 104.19.144.113

104.19.144.113 => cloudflare.com

https://www.mywot.com/scorecard/dotmailer.com

https://www.mywot.com/scorecard/dotdigital.com

https://www.mywot.com/scorecard/bestoffer-today.com

https://www.mywot.com/scorecard/1api.net AS USUAL...

https://en.asytech.cn/check-ip/104.16.209.86

https://en.asytech.cn/check-ip/84.200.110.124

https://en.asytech.cn/check-ip/94.143.106.199

https://en.asytech.cn/check-ip/104.18.70.28

https://en.asytech.cn/check-ip/104.19.144.113
2020-03-19 05:04:23
113.108.88.78 attack
Mar 18 20:27:41 dev0-dcde-rnet sshd[15058]: Failed password for root from 113.108.88.78 port 35016 ssh2
Mar 18 20:35:51 dev0-dcde-rnet sshd[15096]: Failed password for root from 113.108.88.78 port 51086 ssh2
2020-03-19 05:00:12
178.63.13.154 attackbots
abuseConfidenceScore blocked for 12h
2020-03-19 05:11:17

最近上报的IP列表

198.58.109.6 206.189.124.112 180.153.236.92 164.90.178.32
151.238.66.147 183.23.0.108 195.178.110.15 156.227.145.74
137.220.151.170 35.89.239.205 183.10.99.167 112.22.247.106
65.49.1.202 165.99.176.0 172.64.146.68 162.142.125.202
162.77.153.176 43.156.83.238 103.133.109.129 204.76.203.231