必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Frankfurt am Main

省份(region): Hesse

国家(country): Germany

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): DigitalOcean, LLC

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspambots
(sshd) Failed SSH login from 138.68.99.46 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 13 12:49:04 optimus sshd[3841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46  user=root
Sep 13 12:49:06 optimus sshd[3841]: Failed password for root from 138.68.99.46 port 41436 ssh2
Sep 13 12:58:53 optimus sshd[7459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46  user=root
Sep 13 12:58:55 optimus sshd[7459]: Failed password for root from 138.68.99.46 port 53490 ssh2
Sep 13 13:04:06 optimus sshd[9215]: Invalid user android from 138.68.99.46
2020-09-14 03:07:27
attackbots
Failed password for invalid user bot from 138.68.99.46 port 51664 ssh2
2020-09-13 19:05:39
attackbotsspam
Sep  1 05:19:00 web8 sshd\[14085\]: Invalid user dines from 138.68.99.46
Sep  1 05:19:00 web8 sshd\[14085\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46
Sep  1 05:19:02 web8 sshd\[14085\]: Failed password for invalid user dines from 138.68.99.46 port 60982 ssh2
Sep  1 05:23:24 web8 sshd\[16247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46  user=root
Sep  1 05:23:26 web8 sshd\[16247\]: Failed password for root from 138.68.99.46 port 37858 ssh2
2020-09-01 13:30:14
attack
2020-08-29T22:47:53.592275server.mjenks.net sshd[1076461]: Failed password for invalid user prueba from 138.68.99.46 port 41622 ssh2
2020-08-29T22:52:36.556279server.mjenks.net sshd[1076961]: Invalid user dereck from 138.68.99.46 port 50448
2020-08-29T22:52:36.563599server.mjenks.net sshd[1076961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46
2020-08-29T22:52:36.556279server.mjenks.net sshd[1076961]: Invalid user dereck from 138.68.99.46 port 50448
2020-08-29T22:52:38.200477server.mjenks.net sshd[1076961]: Failed password for invalid user dereck from 138.68.99.46 port 50448 ssh2
...
2020-08-30 13:31:26
attack
Aug 24 22:08:03 *hidden* sshd[10604]: Failed password for invalid user jm from 138.68.99.46 port 46944 ssh2 Aug 24 22:13:05 *hidden* sshd[17481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46 user=root Aug 24 22:13:08 *hidden* sshd[17481]: Failed password for *hidden* from 138.68.99.46 port 53938 ssh2
2020-08-25 07:39:34
attack
Aug 19 06:16:14 rancher-0 sshd[1154033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46  user=root
Aug 19 06:16:17 rancher-0 sshd[1154033]: Failed password for root from 138.68.99.46 port 37718 ssh2
...
2020-08-19 12:26:16
attackbots
2020-07-27T09:13:37.683622hostname sshd[20355]: Failed password for admin from 138.68.99.46 port 37204 ssh2
...
2020-07-29 02:44:03
attackbotsspam
Invalid user deploy from 138.68.99.46 port 57990
2020-07-26 18:28:23
attack
2020-07-03T20:18:05.406903linuxbox-skyline sshd[540469]: Invalid user admin from 138.68.99.46 port 60394
...
2020-07-04 14:09:54
attackspambots
SSH login attempts.
2020-07-04 00:57:45
attackbotsspam
Jun 30 17:22:32 server sshd[10294]: Failed password for invalid user ubuntu from 138.68.99.46 port 45356 ssh2
Jun 30 18:04:33 server sshd[22153]: Failed password for root from 138.68.99.46 port 51300 ssh2
Jun 30 18:09:20 server sshd[27127]: Failed password for invalid user test from 138.68.99.46 port 51854 ssh2
2020-07-01 02:47:48
attackbotsspam
Jun 25 12:24:22 IngegnereFirenze sshd[4402]: Failed password for invalid user bot from 138.68.99.46 port 58752 ssh2
...
2020-06-26 01:00:12
attack
SSH Brute-Forcing (server1)
2020-06-17 21:51:03
attackbotsspam
Invalid user chinho from 138.68.99.46 port 34122
2020-05-27 19:37:31
attackbots
May  8 05:44:26 mail sshd[9790]: Failed password for root from 138.68.99.46 port 42274 ssh2
...
2020-05-08 12:07:57
attackbots
SSH invalid-user multiple login attempts
2020-04-30 06:58:38
attackspam
2020-04-27T01:00:45.855371vps751288.ovh.net sshd\[2671\]: Invalid user nas from 138.68.99.46 port 43304
2020-04-27T01:00:45.863173vps751288.ovh.net sshd\[2671\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46
2020-04-27T01:00:48.313723vps751288.ovh.net sshd\[2671\]: Failed password for invalid user nas from 138.68.99.46 port 43304 ssh2
2020-04-27T01:04:42.156092vps751288.ovh.net sshd\[2727\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46  user=root
2020-04-27T01:04:43.808672vps751288.ovh.net sshd\[2727\]: Failed password for root from 138.68.99.46 port 37712 ssh2
2020-04-27 08:02:16
attackbots
$f2bV_matches
2020-04-25 18:48:39
attackbots
Apr 21 19:51:28 gw1 sshd[21040]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46
Apr 21 19:51:30 gw1 sshd[21040]: Failed password for invalid user nr from 138.68.99.46 port 58610 ssh2
...
2020-04-22 00:58:46
attackbotsspam
Apr 17 07:47:24 prod4 sshd\[11075\]: Invalid user ubuntu from 138.68.99.46
Apr 17 07:47:26 prod4 sshd\[11075\]: Failed password for invalid user ubuntu from 138.68.99.46 port 37412 ssh2
Apr 17 07:52:23 prod4 sshd\[12521\]: Failed password for root from 138.68.99.46 port 44496 ssh2
...
2020-04-17 17:07:22
attackbotsspam
Invalid user hzh from 138.68.99.46 port 54812
2020-04-16 07:56:47
attackspam
2020-04-13 18:27:16 server sshd[83124]: Failed password for invalid user robyn from 138.68.99.46 port 54074 ssh2
2020-04-16 03:52:03
attackspam
Automatic report - Banned IP Access
2020-04-09 04:32:09
attack
Apr  7 01:59:22 vpn01 sshd[22748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46
Apr  7 01:59:24 vpn01 sshd[22748]: Failed password for invalid user rosalva from 138.68.99.46 port 60284 ssh2
...
2020-04-07 08:30:11
attack
Apr  1 09:57:26 server sshd\[21739\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46  user=root
Apr  1 09:57:27 server sshd\[21739\]: Failed password for root from 138.68.99.46 port 57198 ssh2
Apr  1 10:11:30 server sshd\[25326\]: Invalid user lifeixin from 138.68.99.46
Apr  1 10:11:30 server sshd\[25326\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46 
Apr  1 10:11:32 server sshd\[25326\]: Failed password for invalid user lifeixin from 138.68.99.46 port 57762 ssh2
...
2020-04-01 17:20:14
attack
Mar 29 20:08:08 nextcloud sshd\[19182\]: Invalid user fbu from 138.68.99.46
Mar 29 20:08:08 nextcloud sshd\[19182\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46
Mar 29 20:08:10 nextcloud sshd\[19182\]: Failed password for invalid user fbu from 138.68.99.46 port 41524 ssh2
2020-03-30 02:08:51
attackbots
Mar 22 22:14:18 powerpi2 sshd[26309]: Invalid user albina from 138.68.99.46 port 33710
Mar 22 22:14:20 powerpi2 sshd[26309]: Failed password for invalid user albina from 138.68.99.46 port 33710 ssh2
Mar 22 22:20:30 powerpi2 sshd[26681]: Invalid user stephen from 138.68.99.46 port 60052
...
2020-03-23 07:00:16
attack
2020-03-20T23:36:07.418716shield sshd\[13246\]: Invalid user su from 138.68.99.46 port 56196
2020-03-20T23:36:07.427013shield sshd\[13246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46
2020-03-20T23:36:09.225868shield sshd\[13246\]: Failed password for invalid user su from 138.68.99.46 port 56196 ssh2
2020-03-20T23:40:45.109836shield sshd\[14535\]: Invalid user telnet from 138.68.99.46 port 47132
2020-03-20T23:40:45.119062shield sshd\[14535\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46
2020-03-21 08:28:49
attackbotsspam
Mar 16 14:39:02 combo sshd[31986]: Failed password for invalid user hadoop from 138.68.99.46 port 33558 ssh2
Mar 16 14:44:44 combo sshd[32433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46  user=root
Mar 16 14:44:46 combo sshd[32433]: Failed password for root from 138.68.99.46 port 58862 ssh2
...
2020-03-17 00:22:06
attackbotsspam
Feb 14 05:01:42 ns382633 sshd\[11747\]: Invalid user er from 138.68.99.46 port 53194
Feb 14 05:01:42 ns382633 sshd\[11747\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46
Feb 14 05:01:44 ns382633 sshd\[11747\]: Failed password for invalid user er from 138.68.99.46 port 53194 ssh2
Feb 14 05:56:15 ns382633 sshd\[20658\]: Invalid user avdcodel from 138.68.99.46 port 55976
Feb 14 05:56:15 ns382633 sshd\[20658\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46
2020-02-14 15:36:31
相同子网IP讨论:
IP 类型 评论内容 时间
138.68.99.12 attackspambots
(imapd) Failed IMAP login from 138.68.99.12 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 31 00:59:41 ir1 dovecot[2885757]: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=138.68.99.12, lip=5.63.12.44, session=<26LCa+Omje+KRGMM>
2020-05-31 06:41:48
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.99.46
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37649
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.99.46.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082300 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 24 01:43:19 CST 2019
;; MSG SIZE  rcvd: 116
HOST信息:
Host 46.99.68.138.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 46.99.68.138.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
27.188.40.7 attackspambots
Port Scan: TCP/23
2019-10-24 03:24:25
5.196.217.177 attackbots
Oct 23 19:07:30  postfix/smtpd: warning: unknown[5.196.217.177]: SASL LOGIN authentication failed
2019-10-24 03:33:14
59.44.201.86 attackbotsspam
$f2bV_matches
2019-10-24 03:37:38
118.24.38.12 attackspambots
2019-10-23T17:53:30.396506abusebot-5.cloudsearch.cf sshd\[7598\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.38.12  user=root
2019-10-24 03:04:39
51.91.158.136 attack
Invalid user applmgr from 51.91.158.136 port 39952
2019-10-24 03:16:40
187.163.123.172 attack
Automatic report - Port Scan Attack
2019-10-24 03:35:26
203.142.69.203 attack
Oct 23 12:25:50 web8 sshd\[14222\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.142.69.203  user=root
Oct 23 12:25:52 web8 sshd\[14222\]: Failed password for root from 203.142.69.203 port 39627 ssh2
Oct 23 12:32:02 web8 sshd\[17413\]: Invalid user vpn from 203.142.69.203
Oct 23 12:32:02 web8 sshd\[17413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.142.69.203
Oct 23 12:32:03 web8 sshd\[17413\]: Failed password for invalid user vpn from 203.142.69.203 port 59129 ssh2
2019-10-24 03:22:54
167.71.80.120 attack
WordPress XMLRPC scan :: 167.71.80.120 0.128 BYPASS [24/Oct/2019:06:19:27  1100] [censored_1] "POST /xmlrpc.php HTTP/1.1" 200 413 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-10-24 03:30:14
5.196.201.7 attackspambots
Oct 23 20:58:45 mail postfix/smtpd[16512]: warning: unknown[5.196.201.7]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct 23 20:59:39 mail postfix/smtpd[16512]: warning: unknown[5.196.201.7]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Oct 23 20:59:43 mail postfix/smtpd[16553]: warning: unknown[5.196.201.7]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-10-24 03:17:44
159.89.155.148 attackspam
Invalid user M from 159.89.155.148 port 38624
2019-10-24 03:26:06
118.25.214.4 attack
Oct 23 11:03:09 plusreed sshd[24315]: Invalid user Bedienung2017 from 118.25.214.4
...
2019-10-24 03:13:12
41.204.191.53 attack
Oct 23 17:41:00 server sshd\[32183\]: Invalid user mm123445 from 41.204.191.53 port 35202
Oct 23 17:41:00 server sshd\[32183\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.204.191.53
Oct 23 17:41:02 server sshd\[32183\]: Failed password for invalid user mm123445 from 41.204.191.53 port 35202 ssh2
Oct 23 17:45:34 server sshd\[8296\]: Invalid user 123456 from 41.204.191.53 port 45412
Oct 23 17:45:34 server sshd\[8296\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.204.191.53
2019-10-24 03:01:55
61.148.194.162 attack
2019-10-23T18:26:16.837723abusebot-5.cloudsearch.cf sshd\[7918\]: Invalid user nao from 61.148.194.162 port 56874
2019-10-24 03:07:49
142.93.215.102 attackspambots
$f2bV_matches
2019-10-24 03:07:21
220.179.231.238 attack
Oct 23 07:41:18 web1 postfix/smtpd[11680]: warning: unknown[220.179.231.238]: SASL PLAIN authentication failed: authentication failure
...
2019-10-24 03:17:13

最近上报的IP列表

227.229.250.117 152.19.55.97 162.237.218.11 61.217.120.156
152.42.254.187 146.185.162.244 152.18.0.160 78.10.123.109
5.128.206.121 179.201.76.101 128.6.18.207 160.120.172.154
124.0.172.221 193.81.83.206 154.184.94.222 171.43.53.197
102.250.131.121 14.173.208.125 4.128.71.66 187.162.57.109