68.183.21.143 - IPInfo

基本信息:

城市(city): North Bergen

省份(region): New Jersey

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
68.183.217.175	attack	Jul 5 03:35:21 host sshd[16686]: Failed password for root from 68.183.217.175 port 36662 ssh2 Jul 5 03:35:21 host sshd[16688]: Failed password for root from 68.183.217.175 port 36814 ssh2 Jul 5 03:35:21 host sshd[16690]: Failed password for root from 68.183.217.175 port 36890 ssh2 Jul 5 03:35:21 host sshd[16675]: Failed password for root from 68.183.217.175 port 36206 ssh2 Jul 5 03:35:21 host sshd[16693]: Failed password for root from 68.183.217.175 port 36992 ssh2	2022-07-05 20:28:23
68.183.21.239	attack	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: 18-scan-andrew.foma-protonmail.com.	2020-10-05 07:55:09
68.183.21.239	attackspambots	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: 18-scan-andrew.foma-protonmail.com.	2020-10-05 00:16:04
68.183.21.239	attackspam	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: 18-scan-andrew.foma-protonmail.com.	2020-10-04 15:58:35
68.183.210.212	attackbotsspam	Time: Sun Sep 27 14:17:23 2020 +0000 IP: 68.183.210.212 (DE/Germany/b2bpay.co-wordpress) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 27 14:06:03 3 sshd[27894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.210.212 user=root Sep 27 14:06:05 3 sshd[27894]: Failed password for root from 68.183.210.212 port 49644 ssh2 Sep 27 14:09:13 3 sshd[7170]: Invalid user karol from 68.183.210.212 port 47098 Sep 27 14:09:16 3 sshd[7170]: Failed password for invalid user karol from 68.183.210.212 port 47098 ssh2 Sep 27 14:17:15 3 sshd[29161]: Invalid user admin from 68.183.210.212 port 34502	2020-09-29 00:20:16
68.183.210.212	attackbots	ET CINS Active Threat Intelligence Poor Reputation IP group 61 - port: 17586 proto: tcp cat: Misc Attackbytes: 60	2020-09-28 16:22:44
68.183.210.212	attack	" "	2020-09-23 22:05:51
68.183.210.212	attackbotsspam	Sep 22 22:44:57 pixelmemory sshd[1979274]: Failed password for invalid user drcom from 68.183.210.212 port 39920 ssh2 Sep 22 22:46:14 pixelmemory sshd[1979741]: Invalid user test from 68.183.210.212 port 57438 Sep 22 22:46:14 pixelmemory sshd[1979741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.210.212 Sep 22 22:46:14 pixelmemory sshd[1979741]: Invalid user test from 68.183.210.212 port 57438 Sep 22 22:46:16 pixelmemory sshd[1979741]: Failed password for invalid user test from 68.183.210.212 port 57438 ssh2 ...	2020-09-23 14:25:57
68.183.210.212	attackspambots	Invalid user b from 68.183.210.212 port 54396	2020-09-23 06:15:17
68.183.210.212	attackbotsspam	Sep 18 23:17:17 gw1 sshd[19944]: Failed password for root from 68.183.210.212 port 44070 ssh2 ...	2020-09-19 04:28:00
68.183.218.50	attackspambots	SSH login attempt fails	2020-09-09 18:06:36
68.183.218.50	attackspambots	Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):	2020-09-09 12:03:46
68.183.218.50	attackspambots	Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):	2020-09-09 04:22:04
68.183.219.181	attackbots	SP-Scan 44919:30557 detected 2020.08.30 19:05:22 blocked until 2020.10.19 12:08:09	2020-08-31 08:16:41
68.183.219.181	attackspambots	Connection to SSH Honeypot - Detected by HoneypotDB	2020-08-28 01:51:54

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 68.183.21.143
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26007
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;68.183.21.143.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025121102 1800 900 604800 86400

;; Query time: 9 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Dec 12 07:30:22 CST 2025
;; MSG SIZE  rcvd: 106

HOST信息:

Host 143.21.183.68.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 143.21.183.68.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
139.59.172.23	attackspam	139.59.172.23 - - [28/Apr/2020:08:03:48 +0200] "POST /wp-login.php HTTP/1.1" 200 3405 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.172.23 - - [28/Apr/2020:08:03:50 +0200] "POST /wp-login.php HTTP/1.1" 200 3404 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-04-28 14:49:43
222.186.175.212	attackbotsspam	Apr 28 07:54:29 vps sshd[8148]: Failed password for root from 222.186.175.212 port 60638 ssh2 Apr 28 07:54:33 vps sshd[8148]: Failed password for root from 222.186.175.212 port 60638 ssh2 Apr 28 07:54:37 vps sshd[8148]: Failed password for root from 222.186.175.212 port 60638 ssh2 Apr 28 07:54:40 vps sshd[8148]: Failed password for root from 222.186.175.212 port 60638 ssh2 ...	2020-04-28 14:20:34
217.112.142.164	attackbotsspam	Apr 28 05:51:49 mail.srvfarm.net postfix/smtpd[888430]: NOQUEUE: reject: RCPT from unknown[217.112.142.164]: 554 5.7.1 Service unavailable; Client host [217.112.142.164] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo= Apr 28 05:51:57 mail.srvfarm.net postfix/smtpd[870710]: NOQUEUE: reject: RCPT from unknown[217.112.142.164]: 554 5.7.1 Service unavailable; Client host [217.112.142.164] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo= Apr 28 05:53:45 mail.srvfarm.net postfix/smtpd[888091]: NOQUEUE: reject: RCPT from unknown[217.112.142.164]: 554 5.7.1 Service unavailable; Client host [217.112.142.164] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<	2020-04-28 14:32:43
106.54.141.45	attack	Tried sshing with brute force.	2020-04-28 14:35:49
66.249.65.76	attackbotsspam	Automatic report - Banned IP Access	2020-04-28 14:25:32
211.25.119.131	attack	Apr 28 04:09:02 124388 sshd[4281]: Invalid user oscommerce from 211.25.119.131 port 62608 Apr 28 04:09:02 124388 sshd[4281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.25.119.131 Apr 28 04:09:02 124388 sshd[4281]: Invalid user oscommerce from 211.25.119.131 port 62608 Apr 28 04:09:04 124388 sshd[4281]: Failed password for invalid user oscommerce from 211.25.119.131 port 62608 ssh2 Apr 28 04:13:50 124388 sshd[4356]: Invalid user admin from 211.25.119.131 port 8368	2020-04-28 15:00:21
159.65.196.65	attackbots	Port scan(s) denied	2020-04-28 14:28:57
125.25.202.159	attack	20/4/27@23:52:15: FAIL: Alarm-Network address from=125.25.202.159 20/4/27@23:52:15: FAIL: Alarm-Network address from=125.25.202.159 ...	2020-04-28 14:25:48
202.219.241.63	attack	Apr 28 05:51:48 debian-2gb-nbg1-2 kernel: \[10304836.605854\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=202.219.241.63 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=45 ID=8046 PROTO=TCP SPT=32167 DPT=23 WINDOW=22919 RES=0x00 SYN URGP=0	2020-04-28 14:42:09
78.128.113.100	attackbotsspam	brute force	2020-04-28 14:27:44
194.26.29.203	attackspambots	Apr 28 08:58:15 debian-2gb-nbg1-2 kernel: \[10316022.366307\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=194.26.29.203 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=22760 PROTO=TCP SPT=42682 DPT=4338 WINDOW=1024 RES=0x00 SYN URGP=0	2020-04-28 15:04:04
194.67.113.97	attackbots	Apr 28 04:52:02 sigma sshd\[26689\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194-67-113-97.xen.vps.regruhosting.ru user=rootApr 28 05:00:02 sigma sshd\[26739\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194-67-113-97.xen.vps.regruhosting.ru user=root ...	2020-04-28 14:56:15
218.92.0.148	attack	Apr 28 08:20:33 vps sshd[9796]: Failed password for root from 218.92.0.148 port 1424 ssh2 Apr 28 08:20:38 vps sshd[9796]: Failed password for root from 218.92.0.148 port 1424 ssh2 Apr 28 08:20:43 vps sshd[9796]: Failed password for root from 218.92.0.148 port 1424 ssh2 Apr 28 08:20:48 vps sshd[9796]: Failed password for root from 218.92.0.148 port 1424 ssh2 ...	2020-04-28 14:32:13
222.186.15.10	attackbotsspam	Apr 28 06:57:12 localhost sshd[68491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.10 user=root Apr 28 06:57:14 localhost sshd[68491]: Failed password for root from 222.186.15.10 port 58311 ssh2 Apr 28 06:57:17 localhost sshd[68491]: Failed password for root from 222.186.15.10 port 58311 ssh2 Apr 28 06:57:12 localhost sshd[68491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.10 user=root Apr 28 06:57:14 localhost sshd[68491]: Failed password for root from 222.186.15.10 port 58311 ssh2 Apr 28 06:57:17 localhost sshd[68491]: Failed password for root from 222.186.15.10 port 58311 ssh2 Apr 28 06:57:12 localhost sshd[68491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.10 user=root Apr 28 06:57:14 localhost sshd[68491]: Failed password for root from 222.186.15.10 port 58311 ssh2 Apr 28 06:57:17 localhost sshd[68491]: Failed pas ...	2020-04-28 15:02:14
50.100.219.127	attack	Automatic report - Port Scan Attack	2020-04-28 14:58:10

最近上报的IP列表

74.7.241.155	52.188.227.37	54.251.192.35	192.34.63.233
185.11.61.43	194.187.177.141	185.80.143.129	35.203.211.158
51.44.169.61	63.125.90.101	20.106.56.201	10.11.1.12
91.224.92.118	172.55.155.143	210.126.226.71	103.177.32.77
76.86.5.228	40.124.86.76	38.246.72.61	172.237.114.45