必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Frankfurt am Main

省份(region): Hesse

国家(country): Germany

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
138.68.75.113 attackbotsspam
Invalid user ftpuser from 138.68.75.113 port 50048
2020-10-12 23:35:19
138.68.75.113 attackbots
Oct 12 08:35:40 ns381471 sshd[24966]: Failed password for root from 138.68.75.113 port 49368 ssh2
2020-10-12 14:58:51
138.68.75.113 attack
Oct 10 13:34:44 srv-ubuntu-dev3 sshd[78777]: Invalid user student from 138.68.75.113
Oct 10 13:34:44 srv-ubuntu-dev3 sshd[78777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.75.113
Oct 10 13:34:44 srv-ubuntu-dev3 sshd[78777]: Invalid user student from 138.68.75.113
Oct 10 13:34:46 srv-ubuntu-dev3 sshd[78777]: Failed password for invalid user student from 138.68.75.113 port 58714 ssh2
Oct 10 13:39:46 srv-ubuntu-dev3 sshd[79426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.75.113  user=games
Oct 10 13:39:48 srv-ubuntu-dev3 sshd[79426]: Failed password for games from 138.68.75.113 port 34726 ssh2
Oct 10 13:44:42 srv-ubuntu-dev3 sshd[79990]: Invalid user victor from 138.68.75.113
Oct 10 13:44:42 srv-ubuntu-dev3 sshd[79990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.75.113
Oct 10 13:44:42 srv-ubuntu-dev3 sshd[79990]: Invalid user victor f
...
2020-10-11 00:51:19
138.68.75.113 attackspam
SSH login attempts.
2020-10-10 16:39:39
138.68.75.113 attackspambots
Sep 30 20:03:14 plex-server sshd[1131462]: Failed password for root from 138.68.75.113 port 59844 ssh2
Sep 30 20:07:52 plex-server sshd[1133365]: Invalid user superuser from 138.68.75.113 port 39930
Sep 30 20:07:52 plex-server sshd[1133365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.75.113 
Sep 30 20:07:52 plex-server sshd[1133365]: Invalid user superuser from 138.68.75.113 port 39930
Sep 30 20:07:54 plex-server sshd[1133365]: Failed password for invalid user superuser from 138.68.75.113 port 39930 ssh2
...
2020-10-01 04:10:51
138.68.75.113 attackspambots
Sep 30 12:20:04 vpn01 sshd[13717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.75.113
Sep 30 12:20:06 vpn01 sshd[13717]: Failed password for invalid user db2fenc1 from 138.68.75.113 port 58626 ssh2
...
2020-09-30 20:20:41
138.68.75.113 attack
Ssh brute force
2020-09-30 12:48:33
138.68.75.113 attackbotsspam
Sep 26 00:01:48 vpn01 sshd[16009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.75.113
Sep 26 00:01:50 vpn01 sshd[16009]: Failed password for invalid user info from 138.68.75.113 port 52966 ssh2
...
2020-09-26 07:27:54
138.68.75.113 attackspam
Sep 25 12:51:17 MainVPS sshd[24845]: Invalid user guest from 138.68.75.113 port 56934
Sep 25 12:51:17 MainVPS sshd[24845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.75.113
Sep 25 12:51:17 MainVPS sshd[24845]: Invalid user guest from 138.68.75.113 port 56934
Sep 25 12:51:19 MainVPS sshd[24845]: Failed password for invalid user guest from 138.68.75.113 port 56934 ssh2
Sep 25 12:56:40 MainVPS sshd[3780]: Invalid user dockeradmin from 138.68.75.113 port 38978
...
2020-09-26 00:39:25
138.68.75.113 attack
Bruteforce detected by fail2ban
2020-09-25 16:15:27
138.68.75.113 attackbots
$f2bV_matches
2020-09-15 13:50:14
138.68.75.113 attack
Sep 14 21:25:01 vps647732 sshd[11990]: Failed password for root from 138.68.75.113 port 36970 ssh2
...
2020-09-15 06:02:09
138.68.75.113 attack
invalid user wg from 138.68.75.113 port 59138 ssh2
2020-09-01 07:18:52
138.68.75.113 attack
Aug 15 15:13:29 cosmoit sshd[28783]: Failed password for root from 138.68.75.113 port 55266 ssh2
2020-08-15 21:32:40
138.68.75.113 attackspam
Aug 11 15:29:41 roki-contabo sshd\[31226\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.75.113  user=root
Aug 11 15:29:42 roki-contabo sshd\[31226\]: Failed password for root from 138.68.75.113 port 47506 ssh2
Aug 11 15:37:42 roki-contabo sshd\[31434\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.75.113  user=root
Aug 11 15:37:44 roki-contabo sshd\[31434\]: Failed password for root from 138.68.75.113 port 38458 ssh2
Aug 11 15:42:45 roki-contabo sshd\[31584\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.75.113  user=root
...
2020-08-12 04:36:41
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.75.157
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30043
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.68.75.157.			IN	A

;; AUTHORITY SECTION:
.			583	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021501 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 16 01:47:31 CST 2022
;; MSG SIZE  rcvd: 106
HOST信息:
157.75.68.138.in-addr.arpa domain name pointer 8330-141034.3cx.be.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
157.75.68.138.in-addr.arpa	name = 8330-141034.3cx.be.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
112.47.57.80 attackspam
Aug 21 19:40:25 server postfix/smtpd[26473]: warning: unknown[112.47.57.80]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 21 19:40:33 server postfix/smtpd[26469]: warning: unknown[112.47.57.80]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 21 19:40:45 server postfix/smtpd[26473]: warning: unknown[112.47.57.80]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-09-08 16:42:31
36.85.29.22 attackbots
firewall-block, port(s): 445/tcp
2020-09-08 16:48:22
54.38.156.63 attack
Sep  8 08:32:57 root sshd[21619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.156.63 
...
2020-09-08 16:17:13
201.122.102.21 attackbots
Sep  8 02:12:54 instance-2 sshd[25086]: Failed password for root from 201.122.102.21 port 46414 ssh2
Sep  8 02:16:55 instance-2 sshd[25145]: Failed password for root from 201.122.102.21 port 50540 ssh2
2020-09-08 16:19:01
190.38.160.209 attackspambots
Honeypot attack, port: 445, PTR: PTR record not found
2020-09-08 16:35:09
116.118.238.18 attack
Brute Force
2020-09-08 16:20:45
222.186.169.194 attack
Sep  8 10:08:56 vps639187 sshd\[11616\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194  user=root
Sep  8 10:08:58 vps639187 sshd\[11616\]: Failed password for root from 222.186.169.194 port 42102 ssh2
Sep  8 10:09:01 vps639187 sshd\[11616\]: Failed password for root from 222.186.169.194 port 42102 ssh2
...
2020-09-08 16:12:34
106.12.88.106 attackbots
Sep  8 03:33:52 PorscheCustomer sshd[12076]: Failed password for root from 106.12.88.106 port 59040 ssh2
Sep  8 03:38:33 PorscheCustomer sshd[12182]: Failed password for root from 106.12.88.106 port 60384 ssh2
...
2020-09-08 16:29:22
89.248.171.2 attack
 TCP (SYN) 89.248.171.2:48775 -> port 22, len 40
2020-09-08 16:41:01
59.126.224.103 attackbotsspam
Honeypot attack, port: 81, PTR: 59-126-224-103.HINET-IP.hinet.net.
2020-09-08 16:41:30
213.142.9.46 attackbots
Honeypot attack, port: 5555, PTR: h213-142-9-46.cust.a3fiber.se.
2020-09-08 16:26:40
121.122.172.117 attackspambots
firewall-block, port(s): 23/tcp
2020-09-08 16:31:43
114.86.40.5 attackspambots
 TCP (SYN) 114.86.40.5:46210 -> port 1433, len 44
2020-09-08 16:23:09
208.109.8.138 attack
[munged]::443 208.109.8.138 - - [08/Sep/2020:05:43:49 +0200] "POST /[munged]: HTTP/1.1" 401 8467 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 208.109.8.138 - - [08/Sep/2020:05:43:52 +0200] "POST /[munged]: HTTP/1.1" 401 8466 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 208.109.8.138 - - [08/Sep/2020:05:43:54 +0200] "POST /[munged]: HTTP/1.1" 401 8466 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 208.109.8.138 - - [08/Sep/2020:05:43:57 +0200] "POST /[munged]: HTTP/1.1" 401 8466 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 208.109.8.138 - - [08/Sep/2020:05:44:00 +0200] "POST /[munged]: HTTP/1.1" 401 8466 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 208.109.8.138 - - [08/Sep/2020:05:44:03 +0200] "POST /[munged]: HTTP/1.1" 401 8466 "-" "Mozilla/5.0 (X11; Ubun
2020-09-08 16:40:13
208.115.198.54 attackspambots
[portscan] tcp/81 [alter-web/web-proxy]
*(RWIN=1024)(09081006)
2020-09-08 16:27:37

最近上报的IP列表

195.103.54.28 162.238.209.37 46.135.152.143 1.67.1.239
0.172.112.153 173.15.86.19 50.233.193.71 28.206.93.19
119.199.228.163 121.151.161.61 191.60.75.178 197.16.73.203
151.110.25.79 89.18.158.75 140.0.58.1 68.72.126.129
243.254.231.142 232.236.248.138 46.58.94.175 218.166.129.15