必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Frankfurt am Main

省份(region): Hesse

国家(country): Germany

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): DigitalOcean, LLC

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspambots
(sshd) Failed SSH login from 138.68.99.46 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 13 12:49:04 optimus sshd[3841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46  user=root
Sep 13 12:49:06 optimus sshd[3841]: Failed password for root from 138.68.99.46 port 41436 ssh2
Sep 13 12:58:53 optimus sshd[7459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46  user=root
Sep 13 12:58:55 optimus sshd[7459]: Failed password for root from 138.68.99.46 port 53490 ssh2
Sep 13 13:04:06 optimus sshd[9215]: Invalid user android from 138.68.99.46
2020-09-14 03:07:27
attackbots
Failed password for invalid user bot from 138.68.99.46 port 51664 ssh2
2020-09-13 19:05:39
attackbotsspam
Sep  1 05:19:00 web8 sshd\[14085\]: Invalid user dines from 138.68.99.46
Sep  1 05:19:00 web8 sshd\[14085\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46
Sep  1 05:19:02 web8 sshd\[14085\]: Failed password for invalid user dines from 138.68.99.46 port 60982 ssh2
Sep  1 05:23:24 web8 sshd\[16247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46  user=root
Sep  1 05:23:26 web8 sshd\[16247\]: Failed password for root from 138.68.99.46 port 37858 ssh2
2020-09-01 13:30:14
attack
2020-08-29T22:47:53.592275server.mjenks.net sshd[1076461]: Failed password for invalid user prueba from 138.68.99.46 port 41622 ssh2
2020-08-29T22:52:36.556279server.mjenks.net sshd[1076961]: Invalid user dereck from 138.68.99.46 port 50448
2020-08-29T22:52:36.563599server.mjenks.net sshd[1076961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46
2020-08-29T22:52:36.556279server.mjenks.net sshd[1076961]: Invalid user dereck from 138.68.99.46 port 50448
2020-08-29T22:52:38.200477server.mjenks.net sshd[1076961]: Failed password for invalid user dereck from 138.68.99.46 port 50448 ssh2
...
2020-08-30 13:31:26
attack
Aug 24 22:08:03 *hidden* sshd[10604]: Failed password for invalid user jm from 138.68.99.46 port 46944 ssh2 Aug 24 22:13:05 *hidden* sshd[17481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46 user=root Aug 24 22:13:08 *hidden* sshd[17481]: Failed password for *hidden* from 138.68.99.46 port 53938 ssh2
2020-08-25 07:39:34
attack
Aug 19 06:16:14 rancher-0 sshd[1154033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46  user=root
Aug 19 06:16:17 rancher-0 sshd[1154033]: Failed password for root from 138.68.99.46 port 37718 ssh2
...
2020-08-19 12:26:16
attackbots
2020-07-27T09:13:37.683622hostname sshd[20355]: Failed password for admin from 138.68.99.46 port 37204 ssh2
...
2020-07-29 02:44:03
attackbotsspam
Invalid user deploy from 138.68.99.46 port 57990
2020-07-26 18:28:23
attack
2020-07-03T20:18:05.406903linuxbox-skyline sshd[540469]: Invalid user admin from 138.68.99.46 port 60394
...
2020-07-04 14:09:54
attackspambots
SSH login attempts.
2020-07-04 00:57:45
attackbotsspam
Jun 30 17:22:32 server sshd[10294]: Failed password for invalid user ubuntu from 138.68.99.46 port 45356 ssh2
Jun 30 18:04:33 server sshd[22153]: Failed password for root from 138.68.99.46 port 51300 ssh2
Jun 30 18:09:20 server sshd[27127]: Failed password for invalid user test from 138.68.99.46 port 51854 ssh2
2020-07-01 02:47:48
attackbotsspam
Jun 25 12:24:22 IngegnereFirenze sshd[4402]: Failed password for invalid user bot from 138.68.99.46 port 58752 ssh2
...
2020-06-26 01:00:12
attack
SSH Brute-Forcing (server1)
2020-06-17 21:51:03
attackbotsspam
Invalid user chinho from 138.68.99.46 port 34122
2020-05-27 19:37:31
attackbots
May  8 05:44:26 mail sshd[9790]: Failed password for root from 138.68.99.46 port 42274 ssh2
...
2020-05-08 12:07:57
attackbots
SSH invalid-user multiple login attempts
2020-04-30 06:58:38
attackspam
2020-04-27T01:00:45.855371vps751288.ovh.net sshd\[2671\]: Invalid user nas from 138.68.99.46 port 43304
2020-04-27T01:00:45.863173vps751288.ovh.net sshd\[2671\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46
2020-04-27T01:00:48.313723vps751288.ovh.net sshd\[2671\]: Failed password for invalid user nas from 138.68.99.46 port 43304 ssh2
2020-04-27T01:04:42.156092vps751288.ovh.net sshd\[2727\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46  user=root
2020-04-27T01:04:43.808672vps751288.ovh.net sshd\[2727\]: Failed password for root from 138.68.99.46 port 37712 ssh2
2020-04-27 08:02:16
attackbots
$f2bV_matches
2020-04-25 18:48:39
attackbots
Apr 21 19:51:28 gw1 sshd[21040]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46
Apr 21 19:51:30 gw1 sshd[21040]: Failed password for invalid user nr from 138.68.99.46 port 58610 ssh2
...
2020-04-22 00:58:46
attackbotsspam
Apr 17 07:47:24 prod4 sshd\[11075\]: Invalid user ubuntu from 138.68.99.46
Apr 17 07:47:26 prod4 sshd\[11075\]: Failed password for invalid user ubuntu from 138.68.99.46 port 37412 ssh2
Apr 17 07:52:23 prod4 sshd\[12521\]: Failed password for root from 138.68.99.46 port 44496 ssh2
...
2020-04-17 17:07:22
attackbotsspam
Invalid user hzh from 138.68.99.46 port 54812
2020-04-16 07:56:47
attackspam
2020-04-13 18:27:16 server sshd[83124]: Failed password for invalid user robyn from 138.68.99.46 port 54074 ssh2
2020-04-16 03:52:03
attackspam
Automatic report - Banned IP Access
2020-04-09 04:32:09
attack
Apr  7 01:59:22 vpn01 sshd[22748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46
Apr  7 01:59:24 vpn01 sshd[22748]: Failed password for invalid user rosalva from 138.68.99.46 port 60284 ssh2
...
2020-04-07 08:30:11
attack
Apr  1 09:57:26 server sshd\[21739\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46  user=root
Apr  1 09:57:27 server sshd\[21739\]: Failed password for root from 138.68.99.46 port 57198 ssh2
Apr  1 10:11:30 server sshd\[25326\]: Invalid user lifeixin from 138.68.99.46
Apr  1 10:11:30 server sshd\[25326\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46 
Apr  1 10:11:32 server sshd\[25326\]: Failed password for invalid user lifeixin from 138.68.99.46 port 57762 ssh2
...
2020-04-01 17:20:14
attack
Mar 29 20:08:08 nextcloud sshd\[19182\]: Invalid user fbu from 138.68.99.46
Mar 29 20:08:08 nextcloud sshd\[19182\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46
Mar 29 20:08:10 nextcloud sshd\[19182\]: Failed password for invalid user fbu from 138.68.99.46 port 41524 ssh2
2020-03-30 02:08:51
attackbots
Mar 22 22:14:18 powerpi2 sshd[26309]: Invalid user albina from 138.68.99.46 port 33710
Mar 22 22:14:20 powerpi2 sshd[26309]: Failed password for invalid user albina from 138.68.99.46 port 33710 ssh2
Mar 22 22:20:30 powerpi2 sshd[26681]: Invalid user stephen from 138.68.99.46 port 60052
...
2020-03-23 07:00:16
attack
2020-03-20T23:36:07.418716shield sshd\[13246\]: Invalid user su from 138.68.99.46 port 56196
2020-03-20T23:36:07.427013shield sshd\[13246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46
2020-03-20T23:36:09.225868shield sshd\[13246\]: Failed password for invalid user su from 138.68.99.46 port 56196 ssh2
2020-03-20T23:40:45.109836shield sshd\[14535\]: Invalid user telnet from 138.68.99.46 port 47132
2020-03-20T23:40:45.119062shield sshd\[14535\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46
2020-03-21 08:28:49
attackbotsspam
Mar 16 14:39:02 combo sshd[31986]: Failed password for invalid user hadoop from 138.68.99.46 port 33558 ssh2
Mar 16 14:44:44 combo sshd[32433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46  user=root
Mar 16 14:44:46 combo sshd[32433]: Failed password for root from 138.68.99.46 port 58862 ssh2
...
2020-03-17 00:22:06
attackbotsspam
Feb 14 05:01:42 ns382633 sshd\[11747\]: Invalid user er from 138.68.99.46 port 53194
Feb 14 05:01:42 ns382633 sshd\[11747\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46
Feb 14 05:01:44 ns382633 sshd\[11747\]: Failed password for invalid user er from 138.68.99.46 port 53194 ssh2
Feb 14 05:56:15 ns382633 sshd\[20658\]: Invalid user avdcodel from 138.68.99.46 port 55976
Feb 14 05:56:15 ns382633 sshd\[20658\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.99.46
2020-02-14 15:36:31
相同子网IP讨论:
IP 类型 评论内容 时间
138.68.99.12 attackspambots
(imapd) Failed IMAP login from 138.68.99.12 (DE/Germany/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 31 00:59:41 ir1 dovecot[2885757]: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=138.68.99.12, lip=5.63.12.44, session=<26LCa+Omje+KRGMM>
2020-05-31 06:41:48
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.99.46
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37649
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.99.46.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082300 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 24 01:43:19 CST 2019
;; MSG SIZE  rcvd: 116
HOST信息:
Host 46.99.68.138.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 46.99.68.138.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
202.154.40.18 attackbots
Automatic report - Banned IP Access
2020-09-06 08:38:10
79.140.30.237 attackbots
Honeypot attack, port: 81, PTR: 79.140.30.237.static.ufanet.ru.
2020-09-06 08:49:54
85.233.65.144 attackbots
Port probing on unauthorized port 445
2020-09-06 08:17:34
37.49.225.144 attack
Merda
2020-09-06 08:20:17
185.142.236.40 attack
Scanning an empty webserver with deny all robots.txt
2020-09-06 08:11:51
170.83.189.195 attackbotsspam
Brute force attempt
2020-09-06 08:28:39
91.178.134.94 attackspam
Attempts against non-existent wp-login
2020-09-06 08:45:43
41.72.197.182 attackbotsspam
Sep  5 11:33:43 dignus sshd[26128]: Failed password for root from 41.72.197.182 port 59838 ssh2
Sep  5 11:33:45 dignus sshd[26128]: Failed password for root from 41.72.197.182 port 59838 ssh2
Sep  5 11:33:47 dignus sshd[26128]: Failed password for root from 41.72.197.182 port 59838 ssh2
Sep  5 11:33:50 dignus sshd[26128]: Failed password for root from 41.72.197.182 port 59838 ssh2
Sep  5 11:33:54 dignus sshd[26128]: error: maximum authentication attempts exceeded for root from 41.72.197.182 port 59838 ssh2 [preauth]
...
2020-09-06 08:12:56
190.200.167.169 attackbotsspam
Attempted connection to port 445.
2020-09-06 08:37:12
37.76.147.31 attackspam
Sep  6 00:10:11 game-panel sshd[30693]: Failed password for root from 37.76.147.31 port 56890 ssh2
Sep  6 00:13:54 game-panel sshd[30857]: Failed password for root from 37.76.147.31 port 34514 ssh2
2020-09-06 08:18:53
186.200.181.130 attackbots
Sep  6 02:00:54 santamaria sshd\[12600\]: Invalid user www from 186.200.181.130
Sep  6 02:00:54 santamaria sshd\[12600\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.200.181.130
Sep  6 02:00:56 santamaria sshd\[12600\]: Failed password for invalid user www from 186.200.181.130 port 50900 ssh2
...
2020-09-06 08:15:34
114.219.90.252 attack
Aug 31 07:42:30 georgia postfix/smtpd[36598]: connect from unknown[114.219.90.252]
Aug 31 07:42:32 georgia postfix/smtpd[36598]: warning: unknown[114.219.90.252]: SASL LOGIN authentication failed: authentication failure
Aug 31 07:42:32 georgia postfix/smtpd[36598]: lost connection after AUTH from unknown[114.219.90.252]
Aug 31 07:42:32 georgia postfix/smtpd[36598]: disconnect from unknown[114.219.90.252] ehlo=1 auth=0/1 commands=1/2
Aug 31 07:42:33 georgia postfix/smtpd[36598]: connect from unknown[114.219.90.252]
Aug 31 07:42:43 georgia postfix/smtpd[36598]: warning: unknown[114.219.90.252]: SASL LOGIN authentication failed: authentication failure
Aug 31 07:42:43 georgia postfix/smtpd[36598]: lost connection after AUTH from unknown[114.219.90.252]
Aug 31 07:42:43 georgia postfix/smtpd[36598]: disconnect from unknown[114.219.90.252] ehlo=1 auth=0/1 commands=1/2
Aug 31 07:42:44 georgia postfix/smtpd[36598]: connect from unknown[114.219.90.252]
Aug 31 07:42:53 georgia pos........
-------------------------------
2020-09-06 08:14:53
195.54.161.159 attack
(mod_security) mod_security (id:211650) triggered by 195.54.161.159 (RU/Russia/-): 5 in the last 3600 secs
2020-09-06 08:25:30
218.102.106.61 attack
Honeypot attack, port: 5555, PTR: pcd574061.netvigator.com.
2020-09-06 08:46:48
209.141.41.103 attack
Sep 6 01:41:44 *hidden* sshd[38662]: Failed password for *hidden* from 209.141.41.103 port 37633 ssh2 Sep 6 01:41:48 *hidden* sshd[38662]: Failed password for *hidden* from 209.141.41.103 port 37633 ssh2 Sep 6 01:41:52 *hidden* sshd[38662]: Failed password for *hidden* from 209.141.41.103 port 37633 ssh2
2020-09-06 08:25:48

最近上报的IP列表

227.229.250.117 152.19.55.97 162.237.218.11 61.217.120.156
152.42.254.187 146.185.162.244 152.18.0.160 78.10.123.109
5.128.206.121 179.201.76.101 128.6.18.207 160.120.172.154
124.0.172.221 193.81.83.206 154.184.94.222 171.43.53.197
102.250.131.121 14.173.208.125 4.128.71.66 187.162.57.109