必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
138.68.67.96 attackbotsspam
Invalid user git4 from 138.68.67.96 port 46454
2020-10-04 07:07:16
138.68.67.96 attackspambots
Invalid user test7 from 138.68.67.96 port 37454
2020-10-03 23:20:36
138.68.67.96 attack
Invalid user git4 from 138.68.67.96 port 46454
2020-10-03 15:04:12
138.68.67.96 attackbots
Brute-force attempt banned
2020-09-18 21:25:38
138.68.67.96 attackbotsspam
Sep 18 05:35:45 localhost sshd[2140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.67.96  user=root
Sep 18 05:35:48 localhost sshd[2140]: Failed password for root from 138.68.67.96 port 49328 ssh2
Sep 18 05:39:09 localhost sshd[2557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.67.96  user=root
Sep 18 05:39:11 localhost sshd[2557]: Failed password for root from 138.68.67.96 port 53124 ssh2
Sep 18 05:42:28 localhost sshd[2948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.67.96  user=root
Sep 18 05:42:31 localhost sshd[2948]: Failed password for root from 138.68.67.96 port 56920 ssh2
...
2020-09-18 13:44:25
138.68.67.96 attack
Sep 10 10:37:39 PorscheCustomer sshd[6691]: Failed password for root from 138.68.67.96 port 40782 ssh2
Sep 10 10:40:15 PorscheCustomer sshd[6708]: Failed password for root from 138.68.67.96 port 56292 ssh2
...
2020-09-11 00:12:12
138.68.67.96 attack
Sep 10 09:21:19 PorscheCustomer sshd[5577]: Failed password for root from 138.68.67.96 port 42574 ssh2
Sep 10 09:23:58 PorscheCustomer sshd[5605]: Failed password for root from 138.68.67.96 port 58084 ssh2
...
2020-09-10 15:35:52
138.68.67.96 attack
Sep  9 20:53:01 sso sshd[18621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.67.96
Sep  9 20:53:03 sso sshd[18621]: Failed password for invalid user vipvzlet from 138.68.67.96 port 46964 ssh2
...
2020-09-10 06:14:14
138.68.67.96 attackbotsspam
Aug 30 17:48:42 rancher-0 sshd[1359205]: Invalid user edwin123 from 138.68.67.96 port 38304
...
2020-08-31 01:47:43
138.68.67.96 attackbotsspam
Bruteforce detected by fail2ban
2020-08-26 01:07:12
138.68.67.96 attackbotsspam
SSH BruteForce Attack
2020-08-24 06:33:25
138.68.67.96 attackspambots
Aug 15 23:16:44 inter-technics sshd[3511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.67.96  user=root
Aug 15 23:16:46 inter-technics sshd[3511]: Failed password for root from 138.68.67.96 port 55106 ssh2
Aug 15 23:20:12 inter-technics sshd[3722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.67.96  user=root
Aug 15 23:20:14 inter-technics sshd[3722]: Failed password for root from 138.68.67.96 port 36600 ssh2
Aug 15 23:23:45 inter-technics sshd[3876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.67.96  user=root
Aug 15 23:23:46 inter-technics sshd[3876]: Failed password for root from 138.68.67.96 port 46324 ssh2
...
2020-08-16 06:35:44
138.68.67.96 attackspambots
(sshd) Failed SSH login from 138.68.67.96 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 22 18:11:43 s1 sshd[32192]: Invalid user zf from 138.68.67.96 port 58014
Jul 22 18:11:45 s1 sshd[32192]: Failed password for invalid user zf from 138.68.67.96 port 58014 ssh2
Jul 22 18:24:44 s1 sshd[32749]: Invalid user jackpot from 138.68.67.96 port 42954
Jul 22 18:24:46 s1 sshd[32749]: Failed password for invalid user jackpot from 138.68.67.96 port 42954 ssh2
Jul 22 18:28:34 s1 sshd[472]: Invalid user denise from 138.68.67.96 port 56820
2020-07-23 00:01:04
138.68.67.96 attackspambots
Jul 16 06:38:15 lnxweb62 sshd[32103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.67.96
2020-07-16 13:39:34
138.68.67.173 attack
Mar 27 13:28:56 debian-2gb-nbg1-2 kernel: \[7571207.392477\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=138.68.67.173 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=44795 PROTO=TCP SPT=52329 DPT=5038 WINDOW=1024 RES=0x00 SYN URGP=0
2020-03-28 04:31:50
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.67.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62957
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.68.67.56.			IN	A

;; AUTHORITY SECTION:
.			306	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022061102 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 12 07:39:40 CST 2022
;; MSG SIZE  rcvd: 105
HOST信息:
Host 56.67.68.138.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 56.67.68.138.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
104.168.160.86 attack
Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -
2020-01-24 21:07:54
142.93.97.100 attackbotsspam
992/tcp 500/tcp 1234/tcp...
[2019-11-23/2020-01-22]32pkt,32pt.(tcp)
2020-01-24 21:18:44
61.63.110.242 attackspam
Unauthorized connection attempt detected from IP address 61.63.110.242 to port 81 [J]
2020-01-24 20:39:05
186.122.148.9 attack
5x Failed Password
2020-01-24 20:40:04
117.50.49.57 attackbots
Unauthorized connection attempt detected from IP address 117.50.49.57 to port 2220 [J]
2020-01-24 20:40:29
222.186.15.10 attackbots
Unauthorized connection attempt detected from IP address 222.186.15.10 to port 22 [J]
2020-01-24 20:49:19
5.196.18.169 attackspam
Triggered by Fail2Ban at Ares web server
2020-01-24 20:42:25
106.12.197.232 attackspam
2020-01-24T05:39:08.104572linuxbox-skyline sshd[31006]: Invalid user duke from 106.12.197.232 port 38456
...
2020-01-24 21:00:29
222.186.175.148 attackspambots
Jan 24 13:59:00 v22018076622670303 sshd\[4912\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.148  user=root
Jan 24 13:59:01 v22018076622670303 sshd\[4912\]: Failed password for root from 222.186.175.148 port 45230 ssh2
Jan 24 13:59:04 v22018076622670303 sshd\[4912\]: Failed password for root from 222.186.175.148 port 45230 ssh2
...
2020-01-24 21:17:48
114.119.141.150 attack
114.119.128.0 - 114.119.191.255
HUAWEI INTERNATIONAL PTE. LTD
15A Changi Business Park Central 1 Eightrium # 03-03/04, Singapore 486035

DOS effect with revolving IPs (in this range and a few others) and massively overloading with requests. 
Often fake agent such as Googlebot

Appears to be a Huawei server farm operated in Singapore for Hong Kong linked traffic.
Abuse Contact: guixiaowei@huawei.com   (doesn't respond)


netname:        HIPL-SG
mnt-irt:        IRT-HIPL-SG
2020-01-24 20:59:27
61.183.52.45 attack
SIP/5060 Probe, BF, Hack -
2020-01-24 21:00:11
85.207.53.66 attackbotsspam
Jan 24 12:38:51 mercury auth[28734]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=josh@learnargentinianspanish.com rhost=85.207.53.66
...
2020-01-24 21:21:25
105.112.114.46 attackbots
Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -
2020-01-24 20:52:47
103.5.124.252 attack
Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -
2020-01-24 21:21:01
89.248.174.3 attack
591/tcp 514/tcp 143/tcp...
[2019-11-23/2020-01-23]163pkt,14pt.(tcp)
2020-01-24 21:13:46

最近上报的IP列表

137.226.3.148 196.0.120.211 167.172.94.245 137.226.3.183
217.64.140.182 5.167.67.162 137.226.3.191 5.167.67.207
5.167.67.212 137.226.4.142 137.226.3.195 137.226.3.178
5.255.99.124 137.226.3.162 137.226.2.153 137.226.2.15
137.226.4.209 137.226.4.192 137.226.4.93 137.226.4.42