138.68.6.12 - IPInfo

基本信息:

城市(city): Santa Clara

省份(region): California

国家(country): United States

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	port scan and connect, tcp 23 (telnet)	2020-04-14 07:36:15

相同子网IP讨论:

IP	类型	评论内容	时间
138.68.68.204	attack	TCP (SYN) 138.68.68.204:49946 -> port 22, len 48	2020-10-11 03:50:21
138.68.68.204	attack	[INST1] Automatic report - Banned IP Access	2020-10-10 19:44:44
138.68.67.96	attackbotsspam	Invalid user git4 from 138.68.67.96 port 46454	2020-10-04 07:07:16
138.68.67.96	attackspambots	Invalid user test7 from 138.68.67.96 port 37454	2020-10-03 23:20:36
138.68.67.96	attack	Invalid user git4 from 138.68.67.96 port 46454	2020-10-03 15:04:12
138.68.67.96	attackbots	Brute-force attempt banned	2020-09-18 21:25:38
138.68.67.96	attackbotsspam	Sep 18 05:35:45 localhost sshd[2140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.67.96 user=root Sep 18 05:35:48 localhost sshd[2140]: Failed password for root from 138.68.67.96 port 49328 ssh2 Sep 18 05:39:09 localhost sshd[2557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.67.96 user=root Sep 18 05:39:11 localhost sshd[2557]: Failed password for root from 138.68.67.96 port 53124 ssh2 Sep 18 05:42:28 localhost sshd[2948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.67.96 user=root Sep 18 05:42:31 localhost sshd[2948]: Failed password for root from 138.68.67.96 port 56920 ssh2 ...	2020-09-18 13:44:25
138.68.68.234	attackbots	Sep 13 17:43:52 vps647732 sshd[10898]: Failed password for root from 138.68.68.234 port 40276 ssh2 ...	2020-09-14 02:35:29
138.68.68.234	attackspambots	Sep 13 12:08:49 ns382633 sshd\[20008\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.68.234 user=root Sep 13 12:08:51 ns382633 sshd\[20008\]: Failed password for root from 138.68.68.234 port 50270 ssh2 Sep 13 12:21:53 ns382633 sshd\[22580\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.68.234 user=root Sep 13 12:21:55 ns382633 sshd\[22580\]: Failed password for root from 138.68.68.234 port 45654 ssh2 Sep 13 12:30:28 ns382633 sshd\[24406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.68.234 user=root	2020-09-13 18:34:49
138.68.67.96	attack	Sep 10 10:37:39 PorscheCustomer sshd[6691]: Failed password for root from 138.68.67.96 port 40782 ssh2 Sep 10 10:40:15 PorscheCustomer sshd[6708]: Failed password for root from 138.68.67.96 port 56292 ssh2 ...	2020-09-11 00:12:12
138.68.67.96	attack	Sep 10 09:21:19 PorscheCustomer sshd[5577]: Failed password for root from 138.68.67.96 port 42574 ssh2 Sep 10 09:23:58 PorscheCustomer sshd[5605]: Failed password for root from 138.68.67.96 port 58084 ssh2 ...	2020-09-10 15:35:52
138.68.67.96	attack	Sep 9 20:53:01 sso sshd[18621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.67.96 Sep 9 20:53:03 sso sshd[18621]: Failed password for invalid user vipvzlet from 138.68.67.96 port 46964 ssh2 ...	2020-09-10 06:14:14
138.68.67.96	attackbotsspam	Aug 30 17:48:42 rancher-0 sshd[1359205]: Invalid user edwin123 from 138.68.67.96 port 38304 ...	2020-08-31 01:47:43
138.68.67.96	attackbotsspam	Bruteforce detected by fail2ban	2020-08-26 01:07:12
138.68.67.96	attackbotsspam	SSH BruteForce Attack	2020-08-24 06:33:25

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.6.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27463
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.6.12.			IN	A

;; AUTHORITY SECTION:
.			284	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020041302 1800 900 604800 86400

;; Query time: 79 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 14 07:36:11 CST 2020
;; MSG SIZE  rcvd: 115

HOST信息:

Host 12.6.68.138.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 12.6.68.138.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
52.148.254.76	attackspam	Jul 15 04:31:08 * sshd[32580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.148.254.76 Jul 15 04:31:10 * sshd[32580]: Failed password for invalid user admin from 52.148.254.76 port 2869 ssh2	2020-07-15 10:34:18
51.178.24.61	attackspambots	2020-07-15T04:04:53+0200 Failed SSH Authentication/Brute Force Attack. (Server 10)	2020-07-15 10:48:07
52.187.190.83	attackbotsspam	Jul 15 04:07:45 hidden sshd[22615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.187.190.83 Jul 15 04:07:47 hidden sshd[22615]: Failed password for invalid user admin from 52.187.190.83 port 9658 ssh2	2020-07-15 10:18:48
52.142.12.39	attackbotsspam	Jul 14 23:22:31 roki sshd[25176]: Invalid user admin from 52.142.12.39 Jul 14 23:22:31 roki sshd[25176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.142.12.39 Jul 14 23:22:33 roki sshd[25176]: Failed password for invalid user admin from 52.142.12.39 port 2311 ssh2 Jul 15 04:11:50 roki sshd[14202]: Invalid user admin from 52.142.12.39 Jul 15 04:11:50 roki sshd[14202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.142.12.39 ...	2020-07-15 10:16:51
5.188.84.95	attackspam	0,16-01/02 [bc01/m10] PostRequest-Spammer scoring: maputo01_x2b	2020-07-15 10:32:41
20.50.20.31	attackspambots	Jul 14 22:26:08 logopedia-1vcpu-1gb-nyc1-01 sshd[86127]: Invalid user admin from 20.50.20.31 port 1466 ...	2020-07-15 10:31:12
47.92.111.243	attackspambots	400 BAD REQUEST	2020-07-15 10:19:03
123.108.35.186	attack	Jul 15 04:18:32 PorscheCustomer sshd[23564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.108.35.186 Jul 15 04:18:34 PorscheCustomer sshd[23564]: Failed password for invalid user cacti from 123.108.35.186 port 48794 ssh2 Jul 15 04:22:00 PorscheCustomer sshd[23622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.108.35.186 ...	2020-07-15 10:22:16
70.37.92.56	attackbots	SSH bruteforce	2020-07-15 10:30:09
13.76.194.200	attackbotsspam	3x Failed Password	2020-07-15 10:21:23
20.39.160.68	attackspam	Jul 15 04:51:19 * sshd[1933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=20.39.160.68 Jul 15 04:51:21 * sshd[1933]: Failed password for invalid user admin from 20.39.160.68 port 64119 ssh2	2020-07-15 10:53:37
65.49.20.66	attackspam	Jul 14 22:28:26 Tower sshd[42116]: Connection from 65.49.20.66 port 49298 on 192.168.10.220 port 22 rdomain "" Jul 14 22:28:27 Tower sshd[42116]: Invalid user from 65.49.20.66 port 49298 Jul 14 22:28:31 Tower sshd[42116]: Connection closed by invalid user 65.49.20.66 port 49298 [preauth]	2020-07-15 10:36:11
192.241.237.135	attackspambots	1594779111 - 07/15/2020 09:11:51 Host: zg-0708b-37.stretchoid.com/192.241.237.135 Port: 6379 TCP Blocked ...	2020-07-15 10:35:38
52.166.130.230	attackbots	Jul 14 22:10:54 r.ca sshd[7697]: Failed password for admin from 52.166.130.230 port 20381 ssh2	2020-07-15 10:42:35
118.25.182.118	attackspam	SSH Brute-Force reported by Fail2Ban	2020-07-15 10:50:15

最近上报的IP列表

147.0.14.34	122.51.189.69	65.41.114.212	14.9.125.110
222.217.240.244	183.89.215.26	190.78.106.75	176.109.175.193
178.162.209.85	116.109.139.66	80.213.252.213	131.212.134.163
112.7.132.214	58.218.209.84	218.2.0.65	49.234.31.158
125.62.197.177	181.44.131.146	8.9.11.94	152.168.245.31