必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspambots
Jan 14 12:21:18 ns41 sshd[7553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.14
2020-01-14 19:34:00
相同子网IP讨论:
IP 类型 评论内容 时间
138.68.53.163 attack
Nov 29 13:49:35 kapalua sshd\[4053\]: Invalid user guest from 138.68.53.163
Nov 29 13:49:35 kapalua sshd\[4053\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163
Nov 29 13:49:37 kapalua sshd\[4053\]: Failed password for invalid user guest from 138.68.53.163 port 57754 ssh2
Nov 29 13:52:58 kapalua sshd\[4332\]: Invalid user skef from 138.68.53.163
Nov 29 13:52:58 kapalua sshd\[4332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163
2019-11-30 07:55:57
138.68.53.163 attackbotsspam
Nov 19 11:08:12 firewall sshd[22424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163  user=bin
Nov 19 11:08:14 firewall sshd[22424]: Failed password for bin from 138.68.53.163 port 45642 ssh2
Nov 19 11:11:35 firewall sshd[22499]: Invalid user test from 138.68.53.163
...
2019-11-19 23:11:49
138.68.53.163 attack
$f2bV_matches
2019-11-13 15:25:13
138.68.53.163 attack
Nov 13 00:38:03 MK-Soft-VM6 sshd[22853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163 
Nov 13 00:38:05 MK-Soft-VM6 sshd[22853]: Failed password for invalid user charn from 138.68.53.163 port 44284 ssh2
...
2019-11-13 08:07:44
138.68.53.163 attackspambots
SSH Brute-Force reported by Fail2Ban
2019-11-12 20:54:35
138.68.53.163 attack
SSH Bruteforce attack
2019-11-12 05:21:37
138.68.53.163 attackbots
Nov 10 18:20:48 dedicated sshd[18172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163  user=root
Nov 10 18:20:50 dedicated sshd[18172]: Failed password for root from 138.68.53.163 port 34026 ssh2
2019-11-11 03:03:44
138.68.53.163 attack
2019-11-06T08:26:16.457403tmaserv sshd\[13206\]: Invalid user admin from 138.68.53.163 port 58870
2019-11-06T08:26:16.463772tmaserv sshd\[13206\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163
2019-11-06T08:26:18.715645tmaserv sshd\[13206\]: Failed password for invalid user admin from 138.68.53.163 port 58870 ssh2
2019-11-06T08:42:28.331216tmaserv sshd\[13887\]: Invalid user backup from 138.68.53.163 port 53436
2019-11-06T08:42:28.337388tmaserv sshd\[13887\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163
2019-11-06T08:42:30.363268tmaserv sshd\[13887\]: Failed password for invalid user backup from 138.68.53.163 port 53436 ssh2
...
2019-11-06 15:50:32
138.68.53.163 attack
Nov  5 18:58:40 localhost sshd\[4322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163  user=root
Nov  5 18:58:41 localhost sshd\[4322\]: Failed password for root from 138.68.53.163 port 60916 ssh2
Nov  5 19:01:59 localhost sshd\[4605\]: User dev from 138.68.53.163 not allowed because listed in DenyUsers
2019-11-06 05:51:31
138.68.53.163 attackbots
2019-10-25T00:14:15.994142scmdmz1 sshd\[26420\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163  user=admin
2019-10-25T00:14:17.277932scmdmz1 sshd\[26420\]: Failed password for admin from 138.68.53.163 port 55034 ssh2
2019-10-25T00:17:40.822839scmdmz1 sshd\[26678\]: Invalid user art from 138.68.53.163 port 37124
...
2019-10-25 06:35:12
138.68.53.163 attackbots
5x Failed Password
2019-10-21 16:18:16
138.68.53.163 attack
Oct 18 09:32:54 sauna sshd[36847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163
Oct 18 09:32:56 sauna sshd[36847]: Failed password for invalid user zhh1127 from 138.68.53.163 port 54400 ssh2
...
2019-10-18 15:31:38
138.68.53.163 attackbotsspam
Automatic report - Banned IP Access
2019-10-16 03:56:19
138.68.53.163 attackbots
Sep 29 21:21:08 MainVPS sshd[14099]: Invalid user login from 138.68.53.163 port 50806
Sep 29 21:21:08 MainVPS sshd[14099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163
Sep 29 21:21:08 MainVPS sshd[14099]: Invalid user login from 138.68.53.163 port 50806
Sep 29 21:21:11 MainVPS sshd[14099]: Failed password for invalid user login from 138.68.53.163 port 50806 ssh2
Sep 29 21:24:53 MainVPS sshd[14377]: Invalid user dilna from 138.68.53.163 port 34232
...
2019-09-30 04:28:04
138.68.53.163 attackspam
Fail2Ban Ban Triggered
2019-09-25 16:29:50
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.53.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25142
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.53.14.			IN	A

;; AUTHORITY SECTION:
.			550	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011400 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 14 19:33:57 CST 2020
;; MSG SIZE  rcvd: 116
HOST信息:
Host 14.53.68.138.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 14.53.68.138.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
66.33.212.126 attackbots
xmlrpc attack
2020-03-19 05:58:50
85.202.163.235 attack
Mar 18 17:22:23 tuotantolaitos sshd[28076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.202.163.235
Mar 18 17:22:26 tuotantolaitos sshd[28076]: Failed password for invalid user web from 85.202.163.235 port 40920 ssh2
...
2020-03-19 05:31:39
38.113.1.135 spam
AGAIN and AGAIN and ALWAYS the same REGISTRAR as tucows.com, endurance.com and else TO STOP IMMEDIATELY for keeping SPAMMERS, LIERS, ROBERS and else since too many years ! The cheapest service, as usual...

fundreleaseoder1@gmail.com, fundreleaseoder1@eigbox.net and sarah@deliverypaths.com to BURN / CLOSE / DELETTE / STOP IMMEDIATELY for SPAM, PHISHING and SCAM !

Message-ID: < f503f366bfed3bc79f1d3b1de92792b6.squirrel @ emailmg.ipage.com >
Date: Wed, 18 Mar 2020 11:24:58 -0400
Subject: I am here by apologizing for the delayed of your $50,000.00 Fifty
From: "Mrs Rose Daniel" 
Reply-To: fundreleaseoder@gmail.com

fundreleaseoder1@eigbox.net => 66.96.189.5 => endurance.com

eigbox.net (FALSE EMPTY Web Site created and used ONLY for SPAM !) => endurance.com AS USUAL...

eigbox.net => 38.113.1.135

38.113.1.1 => cogentco.com

ipage.com => endurance.com

https://www.mywot.com/scorecard/eigbox.net

https://www.mywot.com/scorecard/endurance.com

https://www.mywot.com/scorecard/ipage.com

https://www.mywot.com/scorecard/tucows.com

https://en.asytech.cn/check-ip/66.96.189.5

https://en.asytech.cn/check-ip/38.113.1.135
2020-03-19 05:33:35
60.173.5.72 attackspam
leo_www
2020-03-19 06:00:53
34.73.237.110 attack
34.73.237.110 - - [18/Mar/2020:19:47:58 +0100] "GET /wp-login.php HTTP/1.1" 200 5807 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
34.73.237.110 - - [18/Mar/2020:19:47:59 +0100] "POST /wp-login.php HTTP/1.1" 200 6587 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
34.73.237.110 - - [18/Mar/2020:19:48:00 +0100] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-03-19 05:38:13
182.148.122.8 attackbotsspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-03-19 06:02:50
106.13.37.164 attack
Mar 18 17:19:16 marvibiene sshd[24523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.37.164  user=root
Mar 18 17:19:19 marvibiene sshd[24523]: Failed password for root from 106.13.37.164 port 45340 ssh2
Mar 18 17:34:14 marvibiene sshd[24812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.37.164  user=root
Mar 18 17:34:15 marvibiene sshd[24812]: Failed password for root from 106.13.37.164 port 46042 ssh2
...
2020-03-19 05:38:41
167.99.70.191 attackspambots
167.99.70.191 - - [18/Mar/2020:20:23:22 +0100] "GET /wp-login.php HTTP/1.1" 200 6582 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
167.99.70.191 - - [18/Mar/2020:20:23:24 +0100] "POST /wp-login.php HTTP/1.1" 200 7362 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
167.99.70.191 - - [18/Mar/2020:20:23:26 +0100] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-03-19 05:36:27
177.1.213.19 attack
Mar 18 22:33:46 v22019038103785759 sshd\[1638\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.1.213.19  user=root
Mar 18 22:33:48 v22019038103785759 sshd\[1638\]: Failed password for root from 177.1.213.19 port 10352 ssh2
Mar 18 22:35:18 v22019038103785759 sshd\[1782\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.1.213.19  user=root
Mar 18 22:35:19 v22019038103785759 sshd\[1782\]: Failed password for root from 177.1.213.19 port 53039 ssh2
Mar 18 22:36:28 v22019038103785759 sshd\[1858\]: Invalid user ll from 177.1.213.19 port 18052
...
2020-03-19 06:03:05
191.101.46.47 attack
Mar 18 22:38:06 v22018076622670303 sshd\[1099\]: Invalid user pi from 191.101.46.47 port 44546
Mar 18 22:38:06 v22018076622670303 sshd\[1099\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.101.46.47
Mar 18 22:38:09 v22018076622670303 sshd\[1099\]: Failed password for invalid user pi from 191.101.46.47 port 44546 ssh2
...
2020-03-19 05:45:08
197.221.90.54 attackspambots
Brute force attempt
2020-03-19 05:34:11
97.90.105.222 attack
Automatic report - Port Scan Attack
2020-03-19 05:46:50
59.126.198.126 attack
Honeypot attack, port: 81, PTR: 59-126-198-126.HINET-IP.hinet.net.
2020-03-19 05:59:24
80.211.180.23 attackspambots
detected by Fail2Ban
2020-03-19 05:42:43
212.232.55.224 attack
From CCTV User Interface Log
...::ffff:212.232.55.224 - - [18/Mar/2020:09:04:56 +0000] "GET /setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=busybox&curpath=/¤tsetting.htm=1 HTTP/1.1" 404 203
...
2020-03-19 05:32:02

最近上报的IP列表

100.12.243.225 93.66.5.51 92.240.57.214 89.165.113.164
88.176.49.80 88.61.0.93 85.112.70.200 82.209.211.193
82.117.197.118 81.25.229.117 75.33.221.140 73.23.228.145
60.50.116.202 59.127.53.167 45.236.129.60 43.252.220.250
42.113.48.142 37.49.231.164 37.28.161.146 36.68.29.181