必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspambots
Jan 14 12:21:18 ns41 sshd[7553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.14
2020-01-14 19:34:00
相同子网IP讨论:
IP 类型 评论内容 时间
138.68.53.163 attack
Nov 29 13:49:35 kapalua sshd\[4053\]: Invalid user guest from 138.68.53.163
Nov 29 13:49:35 kapalua sshd\[4053\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163
Nov 29 13:49:37 kapalua sshd\[4053\]: Failed password for invalid user guest from 138.68.53.163 port 57754 ssh2
Nov 29 13:52:58 kapalua sshd\[4332\]: Invalid user skef from 138.68.53.163
Nov 29 13:52:58 kapalua sshd\[4332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163
2019-11-30 07:55:57
138.68.53.163 attackbotsspam
Nov 19 11:08:12 firewall sshd[22424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163  user=bin
Nov 19 11:08:14 firewall sshd[22424]: Failed password for bin from 138.68.53.163 port 45642 ssh2
Nov 19 11:11:35 firewall sshd[22499]: Invalid user test from 138.68.53.163
...
2019-11-19 23:11:49
138.68.53.163 attack
$f2bV_matches
2019-11-13 15:25:13
138.68.53.163 attack
Nov 13 00:38:03 MK-Soft-VM6 sshd[22853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163 
Nov 13 00:38:05 MK-Soft-VM6 sshd[22853]: Failed password for invalid user charn from 138.68.53.163 port 44284 ssh2
...
2019-11-13 08:07:44
138.68.53.163 attackspambots
SSH Brute-Force reported by Fail2Ban
2019-11-12 20:54:35
138.68.53.163 attack
SSH Bruteforce attack
2019-11-12 05:21:37
138.68.53.163 attackbots
Nov 10 18:20:48 dedicated sshd[18172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163  user=root
Nov 10 18:20:50 dedicated sshd[18172]: Failed password for root from 138.68.53.163 port 34026 ssh2
2019-11-11 03:03:44
138.68.53.163 attack
2019-11-06T08:26:16.457403tmaserv sshd\[13206\]: Invalid user admin from 138.68.53.163 port 58870
2019-11-06T08:26:16.463772tmaserv sshd\[13206\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163
2019-11-06T08:26:18.715645tmaserv sshd\[13206\]: Failed password for invalid user admin from 138.68.53.163 port 58870 ssh2
2019-11-06T08:42:28.331216tmaserv sshd\[13887\]: Invalid user backup from 138.68.53.163 port 53436
2019-11-06T08:42:28.337388tmaserv sshd\[13887\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163
2019-11-06T08:42:30.363268tmaserv sshd\[13887\]: Failed password for invalid user backup from 138.68.53.163 port 53436 ssh2
...
2019-11-06 15:50:32
138.68.53.163 attack
Nov  5 18:58:40 localhost sshd\[4322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163  user=root
Nov  5 18:58:41 localhost sshd\[4322\]: Failed password for root from 138.68.53.163 port 60916 ssh2
Nov  5 19:01:59 localhost sshd\[4605\]: User dev from 138.68.53.163 not allowed because listed in DenyUsers
2019-11-06 05:51:31
138.68.53.163 attackbots
2019-10-25T00:14:15.994142scmdmz1 sshd\[26420\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163  user=admin
2019-10-25T00:14:17.277932scmdmz1 sshd\[26420\]: Failed password for admin from 138.68.53.163 port 55034 ssh2
2019-10-25T00:17:40.822839scmdmz1 sshd\[26678\]: Invalid user art from 138.68.53.163 port 37124
...
2019-10-25 06:35:12
138.68.53.163 attackbots
5x Failed Password
2019-10-21 16:18:16
138.68.53.163 attack
Oct 18 09:32:54 sauna sshd[36847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163
Oct 18 09:32:56 sauna sshd[36847]: Failed password for invalid user zhh1127 from 138.68.53.163 port 54400 ssh2
...
2019-10-18 15:31:38
138.68.53.163 attackbotsspam
Automatic report - Banned IP Access
2019-10-16 03:56:19
138.68.53.163 attackbots
Sep 29 21:21:08 MainVPS sshd[14099]: Invalid user login from 138.68.53.163 port 50806
Sep 29 21:21:08 MainVPS sshd[14099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163
Sep 29 21:21:08 MainVPS sshd[14099]: Invalid user login from 138.68.53.163 port 50806
Sep 29 21:21:11 MainVPS sshd[14099]: Failed password for invalid user login from 138.68.53.163 port 50806 ssh2
Sep 29 21:24:53 MainVPS sshd[14377]: Invalid user dilna from 138.68.53.163 port 34232
...
2019-09-30 04:28:04
138.68.53.163 attackspam
Fail2Ban Ban Triggered
2019-09-25 16:29:50
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.53.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25142
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.53.14.			IN	A

;; AUTHORITY SECTION:
.			550	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011400 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 14 19:33:57 CST 2020
;; MSG SIZE  rcvd: 116
HOST信息:
Host 14.53.68.138.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 14.53.68.138.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
122.114.158.242 attackspambots
May 30 06:31:29 inter-technics sshd[7648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.114.158.242  user=root
May 30 06:31:31 inter-technics sshd[7648]: Failed password for root from 122.114.158.242 port 51524 ssh2
May 30 06:34:54 inter-technics sshd[14110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.114.158.242  user=root
May 30 06:34:57 inter-technics sshd[14110]: Failed password for root from 122.114.158.242 port 35982 ssh2
May 30 06:38:31 inter-technics sshd[15776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.114.158.242  user=root
May 30 06:38:33 inter-technics sshd[15776]: Failed password for root from 122.114.158.242 port 48666 ssh2
...
2020-05-30 17:05:40
103.144.5.5 attackbots
1590810501 - 05/30/2020 05:48:21 Host: 103.144.5.5/103.144.5.5 Port: 445 TCP Blocked
2020-05-30 17:00:44
62.173.147.229 attackbots
[2020-05-30 04:54:43] NOTICE[1157][C-0000a853] chan_sip.c: Call from '' (62.173.147.229:63565) to extension '5777701116614627706' rejected because extension not found in context 'public'.
[2020-05-30 04:54:43] SECURITY[1173] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-05-30T04:54:43.038-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="5777701116614627706",SessionID="0x7f5f1039ca78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.173.147.229/63565",ACLName="no_extension_match"
[2020-05-30 04:57:02] NOTICE[1157][C-0000a855] chan_sip.c: Call from '' (62.173.147.229:51166) to extension '5888801116614627706' rejected because extension not found in context 'public'.
[2020-05-30 04:57:02] SECURITY[1173] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-05-30T04:57:02.808-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="5888801116614627706",SessionID="0x7f5f10678288",LocalAddress="IPV4/UDP/192.168.244.6/5060",Remot
...
2020-05-30 16:59:09
219.240.99.120 attackbotsspam
2020-05-30T04:17:43.321956abusebot.cloudsearch.cf sshd[17788]: Invalid user yugoo2 from 219.240.99.120 port 45814
2020-05-30T04:17:43.329661abusebot.cloudsearch.cf sshd[17788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.240.99.120
2020-05-30T04:17:43.321956abusebot.cloudsearch.cf sshd[17788]: Invalid user yugoo2 from 219.240.99.120 port 45814
2020-05-30T04:17:44.720931abusebot.cloudsearch.cf sshd[17788]: Failed password for invalid user yugoo2 from 219.240.99.120 port 45814 ssh2
2020-05-30T04:20:55.448667abusebot.cloudsearch.cf sshd[17961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.240.99.120  user=root
2020-05-30T04:20:57.196504abusebot.cloudsearch.cf sshd[17961]: Failed password for root from 219.240.99.120 port 41210 ssh2
2020-05-30T04:23:57.929408abusebot.cloudsearch.cf sshd[18137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.240.99.120 
...
2020-05-30 17:37:41
5.182.210.98 attackspambots
firewall-block, port(s): 11211/tcp
2020-05-30 17:30:12
148.251.9.145 attackspam
20 attempts against mh-misbehave-ban on float
2020-05-30 17:10:02
198.108.66.245 attack
Unauthorized connection attempt from IP address 198.108.66.245 on port 995
2020-05-30 16:58:07
209.99.168.57 attack
Automatic report - Banned IP Access
2020-05-30 17:17:57
79.137.34.248 attackbots
2020-05-30T08:08:17.423200ns386461 sshd\[7090\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=248.ip-79-137-34.eu  user=root
2020-05-30T08:08:19.210556ns386461 sshd\[7090\]: Failed password for root from 79.137.34.248 port 35566 ssh2
2020-05-30T08:21:06.064270ns386461 sshd\[18325\]: Invalid user hadoop from 79.137.34.248 port 59643
2020-05-30T08:21:06.069160ns386461 sshd\[18325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=248.ip-79-137-34.eu
2020-05-30T08:21:07.761916ns386461 sshd\[18325\]: Failed password for invalid user hadoop from 79.137.34.248 port 59643 ssh2
...
2020-05-30 17:08:58
178.47.132.182 attack
$f2bV_matches
2020-05-30 17:16:46
14.29.232.82 attack
$f2bV_matches
2020-05-30 17:09:42
185.234.217.177 attack
Unauthorized connection attempt detected from IP address 185.234.217.177 to port 443
2020-05-30 17:08:34
64.227.30.91 attackspam
Invalid user dev from 64.227.30.91 port 55662
2020-05-30 17:11:23
123.16.39.17 attack
(eximsyntax) Exim syntax errors from 123.16.39.17 (VN/Vietnam/static.vnpt.vn): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-05-30 08:18:12 SMTP call from [123.16.39.17] dropped: too many syntax or protocol errors (last command was "?\034?\032?\027?\031?\034?\033?\030?\032?\026?\016?\r?\v?\f?	?")
2020-05-30 17:04:51
77.139.70.16 attack
Unauthorized connection attempt detected from IP address 77.139.70.16 to port 2323
2020-05-30 16:57:37

最近上报的IP列表

100.12.243.225 93.66.5.51 92.240.57.214 89.165.113.164
88.176.49.80 88.61.0.93 85.112.70.200 82.209.211.193
82.117.197.118 81.25.229.117 75.33.221.140 73.23.228.145
60.50.116.202 59.127.53.167 45.236.129.60 43.252.220.250
42.113.48.142 37.49.231.164 37.28.161.146 36.68.29.181