必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Dec 27 06:52:44 cw sshd[7730]: User r.r from 138.68.92.107 not allowed because listed in DenyUsers
Dec 27 06:52:44 cw sshd[7731]: Received disconnect from 138.68.92.107: 11: Bye Bye
Dec 27 06:52:44 cw sshd[7732]: User r.r from 138.68.92.107 not allowed because listed in DenyUsers
Dec 27 06:52:44 cw sshd[7733]: Received disconnect from 138.68.92.107: 11: Bye Bye
Dec 27 06:52:44 cw sshd[7734]: Invalid user admin from 138.68.92.107
Dec 27 06:52:44 cw sshd[7735]: Received disconnect from 138.68.92.107: 11: Bye Bye
Dec 27 06:52:45 cw sshd[7736]: Invalid user telnet from 138.68.92.107
Dec 27 06:52:45 cw sshd[7737]: Received disconnect from 138.68.92.107: 11: Bye Bye
Dec 27 06:52:45 cw sshd[7738]: Invalid user ubnt from 138.68.92.107
Dec 27 06:52:46 cw sshd[7739]: Received disconnect from 138.68.92.107: 11: Bye Bye
Dec 27 06:52:46 cw sshd[7740]: Invalid user user from 138.68.92.107
Dec 27 06:52:46 cw sshd[7741]: Received disconnect from 138.68.92.107: 11: Bye Bye
Dec 27 06:52:........
-------------------------------
2019-12-27 15:42:57
相同子网IP讨论:
IP 类型 评论内容 时间
138.68.92.121 attackbots
Aug 26 22:11:45 plex-server sshd[29143]: Invalid user user002 from 138.68.92.121 port 35582
Aug 26 22:11:45 plex-server sshd[29143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 
Aug 26 22:11:45 plex-server sshd[29143]: Invalid user user002 from 138.68.92.121 port 35582
Aug 26 22:11:48 plex-server sshd[29143]: Failed password for invalid user user002 from 138.68.92.121 port 35582 ssh2
Aug 26 22:16:21 plex-server sshd[31017]: Invalid user suzuki from 138.68.92.121 port 42144
...
2020-08-27 06:50:31
138.68.92.121 attack
SSH
2020-08-25 19:32:48
138.68.92.121 attackspambots
2020-08-21T22:11:33.927124vps-d63064a2 sshd[94599]: Invalid user vyos from 138.68.92.121 port 59382
2020-08-21T22:11:35.972764vps-d63064a2 sshd[94599]: Failed password for invalid user vyos from 138.68.92.121 port 59382 ssh2
2020-08-21T22:14:36.914118vps-d63064a2 sshd[94630]: Invalid user traffic from 138.68.92.121 port 42438
2020-08-21T22:14:36.923048vps-d63064a2 sshd[94630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121
2020-08-21T22:14:36.914118vps-d63064a2 sshd[94630]: Invalid user traffic from 138.68.92.121 port 42438
2020-08-21T22:14:39.415418vps-d63064a2 sshd[94630]: Failed password for invalid user traffic from 138.68.92.121 port 42438 ssh2
...
2020-08-22 06:30:54
138.68.92.121 attack
malicious Brute-Force reported by https://www.patrick-binder.de
...
2020-08-14 14:04:24
138.68.92.121 attack
Aug 13 02:04:46 server sshd[2378]: Failed password for root from 138.68.92.121 port 49314 ssh2
Aug 13 02:19:08 server sshd[21222]: Failed password for root from 138.68.92.121 port 36234 ssh2
Aug 13 02:24:46 server sshd[29079]: Failed password for root from 138.68.92.121 port 46652 ssh2
2020-08-13 09:11:51
138.68.92.121 attackspam
2020-08-02T15:53:36.7933791495-001 sshd[41013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121  user=root
2020-08-02T15:53:38.4538501495-001 sshd[41013]: Failed password for root from 138.68.92.121 port 52298 ssh2
2020-08-02T15:59:00.0868831495-001 sshd[41305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121  user=root
2020-08-02T15:59:01.8924941495-001 sshd[41305]: Failed password for root from 138.68.92.121 port 36320 ssh2
2020-08-02T16:04:22.7904001495-001 sshd[41654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121  user=root
2020-08-02T16:04:24.4661751495-001 sshd[41654]: Failed password for root from 138.68.92.121 port 48566 ssh2
...
2020-08-03 04:52:35
138.68.92.121 attackbotsspam
2020-07-24T17:36:40.2197961495-001 sshd[61250]: Invalid user rrl from 138.68.92.121 port 53882
2020-07-24T17:36:42.9010231495-001 sshd[61250]: Failed password for invalid user rrl from 138.68.92.121 port 53882 ssh2
2020-07-24T17:42:29.3729111495-001 sshd[61535]: Invalid user admin from 138.68.92.121 port 39020
2020-07-24T17:42:29.3763921495-001 sshd[61535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121
2020-07-24T17:42:29.3729111495-001 sshd[61535]: Invalid user admin from 138.68.92.121 port 39020
2020-07-24T17:42:31.6319811495-001 sshd[61535]: Failed password for invalid user admin from 138.68.92.121 port 39020 ssh2
...
2020-07-25 06:09:35
138.68.92.121 attack
Jul 23 00:44:35 vps sshd[314513]: Failed password for invalid user jordan from 138.68.92.121 port 57800 ssh2
Jul 23 00:50:06 vps sshd[340840]: Invalid user laboratorio from 138.68.92.121 port 45288
Jul 23 00:50:06 vps sshd[340840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121
Jul 23 00:50:08 vps sshd[340840]: Failed password for invalid user laboratorio from 138.68.92.121 port 45288 ssh2
Jul 23 00:55:37 vps sshd[366277]: Invalid user hassan from 138.68.92.121 port 32782
...
2020-07-23 06:59:37
138.68.92.121 attackbotsspam
Jul 19 11:19:46 root sshd[8979]: Invalid user es from 138.68.92.121
...
2020-07-19 16:28:35
138.68.92.121 attackspam
Jul  9 16:40:58 pkdns2 sshd\[20101\]: Invalid user vories from 138.68.92.121Jul  9 16:41:00 pkdns2 sshd\[20101\]: Failed password for invalid user vories from 138.68.92.121 port 41268 ssh2Jul  9 16:43:30 pkdns2 sshd\[20197\]: Invalid user physics from 138.68.92.121Jul  9 16:43:31 pkdns2 sshd\[20197\]: Failed password for invalid user physics from 138.68.92.121 port 46158 ssh2Jul  9 16:45:44 pkdns2 sshd\[20299\]: Invalid user test from 138.68.92.121Jul  9 16:45:46 pkdns2 sshd\[20299\]: Failed password for invalid user test from 138.68.92.121 port 51054 ssh2
...
2020-07-09 21:50:28
138.68.92.121 attackbots
Failed password for root from 138.68.92.121 port 48272 ssh2
2020-07-08 17:49:07
138.68.92.121 attackbotsspam
SSH Brute Force
2020-07-05 21:00:20
138.68.92.121 attackspambots
Jul  4 09:16:01 lukav-desktop sshd\[11356\]: Invalid user test from 138.68.92.121
Jul  4 09:16:01 lukav-desktop sshd\[11356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121
Jul  4 09:16:04 lukav-desktop sshd\[11356\]: Failed password for invalid user test from 138.68.92.121 port 52316 ssh2
Jul  4 09:25:23 lukav-desktop sshd\[11586\]: Invalid user stp from 138.68.92.121
Jul  4 09:25:23 lukav-desktop sshd\[11586\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121
2020-07-04 15:15:28
138.68.92.121 attackspam
Jun 22 06:30:27 plex sshd[28413]: Invalid user user from 138.68.92.121 port 44490
2020-06-22 12:41:31
138.68.92.121 attackspambots
web-1 [ssh] SSH Attack
2020-06-13 17:50:47
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.92.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46961
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.92.107.			IN	A

;; AUTHORITY SECTION:
.			434	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122700 1800 900 604800 86400

;; Query time: 286 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Dec 27 15:42:54 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
Host 107.92.68.138.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 107.92.68.138.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
124.239.168.74 attackbotsspam
Fail2Ban - SSH Bruteforce Attempt
2020-06-16 03:43:56
27.22.63.221 attackbotsspam
SASL broute force
2020-06-16 03:49:02
31.134.123.251 attackspambots
IP 31.134.123.251 attacked honeypot on port: 1433 at 6/15/2020 1:14:06 PM
2020-06-16 03:41:00
209.107.196.220 attackspambots
Fail2Ban Ban Triggered
2020-06-16 03:12:18
180.76.134.238 attackspam
2020-06-15T14:34:09+0200 Failed SSH Authentication/Brute Force Attack. (Server 4)
2020-06-16 03:37:02
193.112.206.214 attackbots
404 NOT FOUND
2020-06-16 03:08:19
95.165.163.108 attack
20/6/15@08:14:44: FAIL: Alarm-Network address from=95.165.163.108
...
2020-06-16 03:26:52
201.72.190.98 attackspam
Jun 15 17:11:33 nas sshd[15421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.72.190.98 
Jun 15 17:11:35 nas sshd[15421]: Failed password for invalid user mobil from 201.72.190.98 port 55336 ssh2
Jun 15 17:26:52 nas sshd[15937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.72.190.98 
...
2020-06-16 03:39:54
140.246.218.162 attackspam
reported through recidive - multiple failed attempts(SSH)
2020-06-16 03:20:48
176.114.20.200 attackspam
Unauthorized connection attempt from IP address 176.114.20.200 on Port 445(SMB)
2020-06-16 03:08:50
1.175.3.36 attackspam
1592223273 - 06/15/2020 14:14:33 Host: 1.175.3.36/1.175.3.36 Port: 445 TCP Blocked
2020-06-16 03:32:34
14.177.109.16 attackbots
1592223303 - 06/15/2020 14:15:03 Host: 14.177.109.16/14.177.109.16 Port: 445 TCP Blocked
2020-06-16 03:14:59
180.140.243.207 attack
Jun 15 15:30:20 nextcloud sshd\[8422\]: Invalid user big from 180.140.243.207
Jun 15 15:30:20 nextcloud sshd\[8422\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.140.243.207
Jun 15 15:30:22 nextcloud sshd\[8422\]: Failed password for invalid user big from 180.140.243.207 port 47148 ssh2
2020-06-16 03:21:56
111.229.207.104 attack
Jun 14 01:25:51 tuxlinux sshd[51600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.207.104  user=root
Jun 14 01:25:53 tuxlinux sshd[51600]: Failed password for root from 111.229.207.104 port 53528 ssh2
Jun 14 01:25:51 tuxlinux sshd[51600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.207.104  user=root
Jun 14 01:25:53 tuxlinux sshd[51600]: Failed password for root from 111.229.207.104 port 53528 ssh2
Jun 14 01:39:06 tuxlinux sshd[54889]: Invalid user guoxiaochun from 111.229.207.104 port 32832
...
2020-06-16 03:11:07
35.200.168.65 attack
Jun 15 15:15:59 * sshd[21684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.200.168.65
Jun 15 15:16:01 * sshd[21684]: Failed password for invalid user ruby from 35.200.168.65 port 53910 ssh2
2020-06-16 03:11:53

最近上报的IP列表

196.195.49.78 125.34.90.156 42.117.213.125 138.19.102.178
120.25.167.56 203.212.98.24 181.143.139.141 113.172.255.135
45.182.127.227 121.229.0.50 144.132.166.70 123.207.229.184
103.67.152.212 47.103.3.18 201.220.130.238 113.53.16.40
183.158.138.123 178.176.167.195 121.229.1.13 185.172.110.204