68.183.68.148 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	68.183.68.148 - - [27/Sep/2020:18:44:35 +0100] "POST /wp-login.php HTTP/1.1" 200 2289 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.68.148 - - [27/Sep/2020:18:44:36 +0100] "POST /wp-login.php HTTP/1.1" 200 2287 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.68.148 - - [27/Sep/2020:18:44:36 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-28 01:49:06
attackspam	www.goldgier.de 68.183.68.148 [21/Sep/2020:16:27:30 +0200] "POST /wp-login.php HTTP/1.1" 200 8761 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" www.goldgier.de 68.183.68.148 [21/Sep/2020:16:27:30 +0200] "POST /wp-login.php HTTP/1.1" 200 8761 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-09-27 17:52:06
attackspambots	68.183.68.148 - - [02/Aug/2020:10:20:54 +0200] "POST /wp-login.php HTTP/1.1" 200 5417 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.68.148 - - [02/Aug/2020:10:20:55 +0200] "POST /wp-login.php HTTP/1.1" 200 5407 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.68.148 - - [02/Aug/2020:10:20:56 +0200] "POST /wp-login.php HTTP/1.1" 200 5410 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.68.148 - - [02/Aug/2020:10:22:16 +0200] "POST /wp-login.php HTTP/1.1" 200 5293 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.68.148 - - [02/Aug/2020:10:22:16 +0200] "POST /wp-login.php HTTP/1.1" 200 5293 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-02 19:10:09
attackbots	68.183.68.148 - - [30/Jul/2020:14:55:04 +0100] "POST /wp-login.php HTTP/1.1" 200 1969 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.68.148 - - [30/Jul/2020:14:55:05 +0100] "POST /wp-login.php HTTP/1.1" 200 1954 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.68.148 - - [30/Jul/2020:14:55:06 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-31 00:10:11
attack	68.183.68.148 - - [27/Jul/2020:06:09:00 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.68.148 - - [27/Jul/2020:06:16:38 +0100] "POST /wp-login.php HTTP/1.1" 200 2383 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.68.148 - - [27/Jul/2020:06:16:38 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-27 13:40:40
attack	WordPress wp-login brute force :: 68.183.68.148 0.104 - [19/Jul/2020:10:34:17 0000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 1837 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "HTTP/1.1"	2020-07-19 18:35:09
attackbotsspam	68.183.68.148 - - [12/Jul/2020:14:39:46 +0100] "POST /wp-login.php HTTP/1.1" 200 2046 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.68.148 - - [12/Jul/2020:14:39:48 +0100] "POST /wp-login.php HTTP/1.1" 200 2020 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.68.148 - - [12/Jul/2020:14:39:49 +0100] "POST /wp-login.php HTTP/1.1" 200 2019 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-13 00:26:04
attackbots	68.183.68.148 - - [09/Jul/2020:05:50:52 +0200] "POST /xmlrpc.php HTTP/1.1" 403 461 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.68.148 - - [09/Jul/2020:05:56:26 +0200] "POST /xmlrpc.php HTTP/1.1" 403 20982 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-09 14:04:24
attack	68.183.68.148 - - \[08/May/2020:05:51:17 +0200\] "POST /wp-login.php HTTP/1.0" 200 6963 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 68.183.68.148 - - \[08/May/2020:05:51:17 +0200\] "POST /wp-login.php HTTP/1.0" 200 6785 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 68.183.68.148 - - \[08/May/2020:05:51:18 +0200\] "POST /wp-login.php HTTP/1.0" 200 6783 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-05-08 17:47:09
attack	68.183.68.148 - - [27/Apr/2020:00:54:35 +0200] "GET /wp-login.php HTTP/1.1" 200 1899 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.68.148 - - [27/Apr/2020:00:54:35 +0200] "POST /wp-login.php HTTP/1.1" 200 2029 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.68.148 - - [27/Apr/2020:00:54:35 +0200] "GET /wp-login.php HTTP/1.1" 200 1899 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.68.148 - - [27/Apr/2020:00:54:36 +0200] "POST /wp-login.php HTTP/1.1" 200 2028 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.68.148 - - [27/Apr/2020:00:54:36 +0200] "GET /wp-login.php HTTP/1.1" 200 1899 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.68.148 - - [27/Apr/2020:00:54:37 +0200] "POST /wp-login.php HTTP/1.1" 200 2027 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Fir ...	2020-04-27 08:04:19
attack	[25/Apr/2020:07:11:50 +0200] Web-Request: "GET /wp-login.php", User-Agent: "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-04-25 19:15:41
attack	68.183.68.148 - - \[12/Mar/2020:13:31:48 +0100\] "POST /wp-login.php HTTP/1.0" 200 6978 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 68.183.68.148 - - \[12/Mar/2020:13:31:48 +0100\] "POST /wp-login.php HTTP/1.0" 200 6978 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 68.183.68.148 - - \[12/Mar/2020:13:31:48 +0100\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-03-12 21:13:18
attackbots	WordPress login Brute force / Web App Attack on client site.	2020-03-07 08:09:56

相同子网IP讨论:

IP	类型	评论内容	时间
68.183.68.143	attack	Mar 1 08:15:03 vpn sshd[11202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.68.143 Mar 1 08:15:05 vpn sshd[11202]: Failed password for invalid user zf from 68.183.68.143 port 57838 ssh2 Mar 1 08:20:55 vpn sshd[11270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.68.143	2020-01-05 16:55:26
68.183.68.47	attackbotsspam	michaelklotzbier.de 68.183.68.47 \[08/Nov/2019:15:40:51 +0100\] "POST /wp-login.php HTTP/1.1" 200 5533 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" michaelklotzbier.de 68.183.68.47 \[08/Nov/2019:15:40:52 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4103 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2019-11-08 23:35:46
68.183.68.47	attackbots	xmlrpc attack	2019-11-07 01:10:16
68.183.68.47	attackbots	xmlrpc attack	2019-10-08 21:59:38
68.183.68.47	attack	fail2ban honeypot	2019-09-14 17:02:37

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 68.183.68.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1484
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;68.183.68.148.			IN	A

;; AUTHORITY SECTION:
.			423	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020030601 1800 900 604800 86400

;; Query time: 96 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 07 08:09:51 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 148.68.183.68.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 148.68.183.68.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
66.150.223.120	attackspambots	ICMP flood	2020-04-28 04:40:38
106.12.86.205	attackspambots	SSH bruteforce (Triggered fail2ban)	2020-04-28 05:05:08
175.42.64.121	attackspambots	Apr 27 20:12:43 scw-6657dc sshd[28853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 Apr 27 20:12:43 scw-6657dc sshd[28853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.42.64.121 Apr 27 20:12:45 scw-6657dc sshd[28853]: Failed password for invalid user lilian from 175.42.64.121 port 30936 ssh2 ...	2020-04-28 04:35:55
43.255.71.195	attackbots	Apr 27 22:12:38 * sshd[1362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.255.71.195 Apr 27 22:12:41 * sshd[1362]: Failed password for invalid user jr from 43.255.71.195 port 44125 ssh2	2020-04-28 04:40:21
144.91.113.37	attackbots	Apr 27 22:37:57 home sshd[24684]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.91.113.37 Apr 27 22:38:00 home sshd[24684]: Failed password for invalid user kdm from 144.91.113.37 port 59770 ssh2 Apr 27 22:41:40 home sshd[25373]: Failed password for root from 144.91.113.37 port 42898 ssh2 ...	2020-04-28 04:44:01
112.85.42.89	attackspam	Apr 27 22:56:17 vmd38886 sshd\[15721\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.89 user=root Apr 27 22:56:19 vmd38886 sshd\[15721\]: Failed password for root from 112.85.42.89 port 20947 ssh2 Apr 27 22:56:21 vmd38886 sshd\[15721\]: Failed password for root from 112.85.42.89 port 20947 ssh2	2020-04-28 05:11:58
134.209.102.196	attackbots	'Fail2Ban'	2020-04-28 04:53:06
14.23.125.194	attack	1588018352 - 04/27/2020 22:12:32 Host: 14.23.125.194/14.23.125.194 Port: 445 TCP Blocked	2020-04-28 04:45:16
103.66.16.18	attackspambots	2020-04-28T05:25:57.937518vivaldi2.tree2.info sshd[14758]: Failed password for root from 103.66.16.18 port 50954 ssh2 2020-04-28T05:29:21.038673vivaldi2.tree2.info sshd[14886]: Invalid user git from 103.66.16.18 2020-04-28T05:29:21.048752vivaldi2.tree2.info sshd[14886]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.66.16.18 2020-04-28T05:29:21.038673vivaldi2.tree2.info sshd[14886]: Invalid user git from 103.66.16.18 2020-04-28T05:29:22.968466vivaldi2.tree2.info sshd[14886]: Failed password for invalid user git from 103.66.16.18 port 49530 ssh2 ...	2020-04-28 04:59:07
140.238.153.125	attackbots	Apr 27 22:36:22 legacy sshd[28581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.238.153.125 Apr 27 22:36:24 legacy sshd[28581]: Failed password for invalid user pepe from 140.238.153.125 port 27426 ssh2 Apr 27 22:38:14 legacy sshd[28613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.238.153.125 ...	2020-04-28 04:51:07
217.112.128.159	attackbots	Apr 27 22:06:27 mail.srvfarm.net postfix/smtpd[579250]: NOQUEUE: reject: RCPT from palliate.kranbery.com[217.112.128.159]: 554 5.7.1 Service unavailable; Client host [217.112.128.159] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBL461503 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo= Apr 27 22:06:32 mail.srvfarm.net postfix/smtpd[578441]: NOQUEUE: reject: RCPT from palliate.kranbery.com[217.112.128.159]: 554 5.7.1 Service unavailable; Client host [217.112.128.159] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBL461503 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo= Apr 27 22:07:00 mail.srvfarm.net postfix/smtpd[583779]: NOQUEUE: reject: RCPT from palliate.kranbery.com[217.112.128.159]: 554 5.7.1 Service unavailable; Client host [217.112.128.	2020-04-28 04:45:58
212.52.164.33	attack	Port probing on unauthorized port 4984	2020-04-28 05:11:05
222.186.173.201	attack	Apr 27 22:45:45 server sshd[48991]: Failed none for root from 222.186.173.201 port 46096 ssh2 Apr 27 22:45:47 server sshd[48991]: Failed password for root from 222.186.173.201 port 46096 ssh2 Apr 27 22:45:51 server sshd[48991]: Failed password for root from 222.186.173.201 port 46096 ssh2	2020-04-28 05:08:13
206.189.202.165	attackspambots	k+ssh-bruteforce	2020-04-28 04:36:13
46.101.137.182	attack	Apr 27 21:57:39 prox sshd[9415]: Failed password for root from 46.101.137.182 port 51542 ssh2 Apr 27 22:12:51 prox sshd[25734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.137.182	2020-04-28 04:31:34

最近上报的IP列表

214.190.98.22	167.170.101.30	52.17.170.57	23.95.238.230
171.244.166.22	158.46.182.95	189.131.12.199	155.94.254.7
120.138.108.45	91.132.36.201	247.82.193.49	169.85.199.63
200.57.251.195	74.125.208.17	188.43.227.101	188.98.168.8
216.74.103.228	111.67.201.55	93.242.76.65	103.100.171.225