必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Tencent Cloud Computing (Beijing) Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
$f2bV_matches
2020-10-02 05:55:06
attack
(sshd) Failed SSH login from 81.68.100.138 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  1 10:00:30 optimus sshd[22492]: Invalid user jack from 81.68.100.138
Oct  1 10:00:30 optimus sshd[22492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.100.138 
Oct  1 10:00:32 optimus sshd[22492]: Failed password for invalid user jack from 81.68.100.138 port 59402 ssh2
Oct  1 10:06:31 optimus sshd[24719]: Invalid user packer from 81.68.100.138
Oct  1 10:06:31 optimus sshd[24719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.100.138
2020-10-01 22:17:37
attackbotsspam
(sshd) Failed SSH login from 81.68.100.138 (CN/China/-): 5 in the last 3600 secs
2020-09-16 02:33:10
attackspam
2020-09-15T04:50:39.6876011495-001 sshd[46550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.100.138  user=root
2020-09-15T04:50:41.4589691495-001 sshd[46550]: Failed password for root from 81.68.100.138 port 56638 ssh2
2020-09-15T04:53:49.2373511495-001 sshd[46730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.100.138  user=root
2020-09-15T04:53:51.4254211495-001 sshd[46730]: Failed password for root from 81.68.100.138 port 33312 ssh2
2020-09-15T04:56:58.0475941495-001 sshd[46849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.100.138  user=root
2020-09-15T04:56:59.8489941495-001 sshd[46849]: Failed password for root from 81.68.100.138 port 38216 ssh2
...
2020-09-15 18:29:48
attackspam
Failed password for root from 81.68.100.138 port 34832 ssh2
2020-09-13 23:55:54
attackspambots
81.68.100.138 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 13 02:35:01 jbs1 sshd[23744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.100.138  user=root
Sep 13 02:35:03 jbs1 sshd[23744]: Failed password for root from 81.68.100.138 port 58412 ssh2
Sep 13 02:35:40 jbs1 sshd[24007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.158.15  user=root
Sep 13 02:35:50 jbs1 sshd[24070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.4.127.228  user=root
Sep 13 02:35:42 jbs1 sshd[24007]: Failed password for root from 122.51.158.15 port 45070 ssh2
Sep 13 02:32:20 jbs1 sshd[22729]: Failed password for root from 190.0.159.86 port 59641 ssh2

IP Addresses Blocked:
2020-09-13 15:46:34
attackspam
Sep 12 19:27:54 mout sshd[21825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.100.138  user=root
Sep 12 19:27:56 mout sshd[21825]: Failed password for root from 81.68.100.138 port 52514 ssh2
2020-09-13 07:31:32
attackspambots
Sep  1 09:18:41 ny01 sshd[26628]: Failed password for root from 81.68.100.138 port 51112 ssh2
Sep  1 09:22:19 ny01 sshd[27097]: Failed password for root from 81.68.100.138 port 58406 ssh2
Sep  1 09:25:46 ny01 sshd[27897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.100.138
2020-09-02 03:32:54
attackbotsspam
Aug 30 16:00:39 sigma sshd\[12269\]: Failed password for root from 81.68.100.138 port 36626 ssh2Aug 30 16:14:45 sigma sshd\[12713\]: Invalid user pablo from 81.68.100.138
...
2020-08-30 23:38:38
attack
Invalid user ftpuser from 81.68.100.138 port 58250
2020-07-19 14:19:25
attackbotsspam
Invalid user ftpuser from 81.68.100.138 port 58250
2020-07-18 15:17:16
attackspambots
Jul 15 12:59:16 vps687878 sshd\[19489\]: Invalid user admin from 81.68.100.138 port 59902
Jul 15 12:59:16 vps687878 sshd\[19489\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.100.138
Jul 15 12:59:18 vps687878 sshd\[19489\]: Failed password for invalid user admin from 81.68.100.138 port 59902 ssh2
Jul 15 13:04:13 vps687878 sshd\[19985\]: Invalid user scan from 81.68.100.138 port 58474
Jul 15 13:04:13 vps687878 sshd\[19985\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.100.138
...
2020-07-15 19:53:09
attackspam
Jul 12 13:50:53 v22019038103785759 sshd\[15254\]: Invalid user winona from 81.68.100.138 port 60538
Jul 12 13:50:53 v22019038103785759 sshd\[15254\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.100.138
Jul 12 13:50:55 v22019038103785759 sshd\[15254\]: Failed password for invalid user winona from 81.68.100.138 port 60538 ssh2
Jul 12 13:56:11 v22019038103785759 sshd\[15406\]: Invalid user Christ from 81.68.100.138 port 57268
Jul 12 13:56:11 v22019038103785759 sshd\[15406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.68.100.138
...
2020-07-13 00:38:46
attackspambots
$f2bV_matches
2020-07-09 18:48:57
attackbots
$f2bV_matches
2020-07-05 15:25:38
相同子网IP讨论:
IP 类型 评论内容 时间
81.68.100.51 attack
Jun 30 00:54:48 xxx sshd[6313]: Invalid user diradmin from 81.68.100.51 port 49402
Jun 30 00:54:48 xxx sshd[6313]: Failed password for invalid user diradmin from 81.68.100.51 port 49402 ssh2
Jun 30 00:54:48 xxx sshd[6313]: Received disconnect from 81.68.100.51 port 49402:11: Bye Bye [preauth]
Jun 30 00:54:48 xxx sshd[6313]: Disconnected from 81.68.100.51 port 49402 [preauth]
Jun 30 01:04:26 xxx sshd[11478]: Failed password for r.r from 81.68.100.51 port 52562 ssh2
Jun 30 01:04:26 xxx sshd[11478]: Received disconnect from 81.68.100.51 port 52562:11: Bye Bye [preauth]
Jun 30 01:04:26 xxx sshd[11478]: Disconnected from 81.68.100.51 port 52562 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=81.68.100.51
2020-07-04 02:08:43
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 81.68.100.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59969
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;81.68.100.138.			IN	A

;; AUTHORITY SECTION:
.			475	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020070500 1800 900 604800 86400

;; Query time: 101 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jul 05 15:25:33 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
Host 138.100.68.81.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 138.100.68.81.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
62.234.44.43 attack
Sep 16 11:33:16 icinga sshd[5571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.44.43 
Sep 16 11:33:18 icinga sshd[5571]: Failed password for invalid user operator1 from 62.234.44.43 port 50593 ssh2
Sep 16 11:54:30 icinga sshd[19963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.44.43 
...
2019-09-17 02:30:42
18.204.2.53 attack
Email account brute force action
2019-09-17 01:51:37
114.32.153.15 attack
Sep 16 11:23:23 Tower sshd[17950]: Connection from 114.32.153.15 port 35770 on 192.168.10.220 port 22
Sep 16 11:23:24 Tower sshd[17950]: Invalid user zu from 114.32.153.15 port 35770
Sep 16 11:23:24 Tower sshd[17950]: error: Could not get shadow information for NOUSER
Sep 16 11:23:24 Tower sshd[17950]: Failed password for invalid user zu from 114.32.153.15 port 35770 ssh2
Sep 16 11:23:25 Tower sshd[17950]: Received disconnect from 114.32.153.15 port 35770:11: Bye Bye [preauth]
Sep 16 11:23:25 Tower sshd[17950]: Disconnected from invalid user zu 114.32.153.15 port 35770 [preauth]
2019-09-17 01:54:03
107.173.26.170 attackbotsspam
Invalid user ikbal from 107.173.26.170 port 47126
2019-09-17 02:09:03
112.64.170.166 attackbots
Sep 16 19:46:28 vtv3 sshd\[6557\]: Invalid user user1 from 112.64.170.166 port 48732
Sep 16 19:46:28 vtv3 sshd\[6557\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.170.166
Sep 16 19:46:30 vtv3 sshd\[6557\]: Failed password for invalid user user1 from 112.64.170.166 port 48732 ssh2
Sep 16 19:53:05 vtv3 sshd\[9699\]: Invalid user webmaster from 112.64.170.166 port 44402
Sep 16 19:53:05 vtv3 sshd\[9699\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.170.166
Sep 16 20:22:09 vtv3 sshd\[24360\]: Invalid user tomcat from 112.64.170.166 port 57372
Sep 16 20:22:09 vtv3 sshd\[24360\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.170.166
Sep 16 20:22:11 vtv3 sshd\[24360\]: Failed password for invalid user tomcat from 112.64.170.166 port 57372 ssh2
Sep 16 20:27:16 vtv3 sshd\[27046\]: Invalid user user from 112.64.170.166 port 40730
Sep 16 20:27:16 vtv3 sshd\[27046
2019-09-17 02:23:37
31.204.251.100 attackbots
Hits on port : 445
2019-09-17 02:28:22
218.56.102.14 attack
Unauthorized IMAP connection attempt
2019-09-17 02:20:07
72.47.244.13 attackbots
72.47.244.13 - - [16/Sep/2019:04:19:44 -0400] "GET /?page=products&action=list&linkID=5516999999.1%20union%20select%20unhex(hex(version()))%20--%20and%201%3D1 HTTP/1.1" 200 58536 "-" "-"
...
2019-09-17 01:54:53
150.161.8.120 attack
2019-09-16T20:26:29.326720tmaserv sshd\[3356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.161.8.120
2019-09-16T20:26:32.113650tmaserv sshd\[3356\]: Failed password for invalid user test from 150.161.8.120 port 42422 ssh2
2019-09-16T20:40:57.086490tmaserv sshd\[4309\]: Invalid user testuser from 150.161.8.120 port 59732
2019-09-16T20:40:57.092295tmaserv sshd\[4309\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.161.8.120
2019-09-16T20:40:58.705234tmaserv sshd\[4309\]: Failed password for invalid user testuser from 150.161.8.120 port 59732 ssh2
2019-09-16T20:45:54.725509tmaserv sshd\[4707\]: Invalid user jasmine from 150.161.8.120 port 46794
...
2019-09-17 01:57:17
185.153.197.11 normal
Terraria Server v1.3.5.3
Listening on port 7777
Type 'help' for a list of commands.
: 185.153.197.71:12455 is connecting...
185.153.197.71:12455 is connecting...
185.153.197.71:13444 is connecting...
185.153.197.71:13444 is connecting...
Exception normal: Tried to send data to a client after losing connection
Exception normal: Tried to send data to a client after losing connection
185.153.197.71:19011 is connecting...
185.153.197.71:19011 is connecting...
Exception normal: Tried to send data to a client after losing connection
2019-09-17 02:21:41
122.70.153.229 attack
Sep 16 18:19:18 saschabauer sshd[23002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.70.153.229
Sep 16 18:19:20 saschabauer sshd[23002]: Failed password for invalid user deploy from 122.70.153.229 port 39512 ssh2
2019-09-17 02:18:21
167.71.203.148 attack
Sep 16 20:03:39 core sshd[28992]: Invalid user Salomo from 167.71.203.148 port 44852
Sep 16 20:03:40 core sshd[28992]: Failed password for invalid user Salomo from 167.71.203.148 port 44852 ssh2
...
2019-09-17 02:10:11
64.52.175.167 attack
2019-09-16 12:56:09 dovecot_login authenticator failed for (1eS0pqJ) [64.52.175.167]:55988 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=ellen@lerctr.org)
2019-09-16 12:56:15 dovecot_login authenticator failed for (YrFvzlj) [64.52.175.167]:52830 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=ellen@lerctr.org)
2019-09-16 12:56:25 dovecot_login authenticator failed for (lsDvcby2B) [64.52.175.167]:59258 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=ellen@lerctr.org)
...
2019-09-17 02:29:12
72.11.140.178 attackbotsspam
72.11.140.178 - - [16/Sep/2019:04:18:19 -0400] "GET /?page=products&action=view&manufacturerID=102&productID=4346C&linkID=5512999999.1%20union%20select%20unhex(hex(version()))%20--%20and%201%3D1 HTTP/1.1" 200 68724 "-" "-"
72.11.140.178 - - [16/Sep/2019:04:18:20 -0400] "GET /?page=products&action=view&manufacturerID=102&productID=4346C&linkID=551299999%27%20union%20select%20unhex(hex(version()))%20--%20%27x%27=%27x HTTP/1.1" 200 68724 "-" "-"
...
2019-09-17 02:11:50
202.122.23.70 attackbotsspam
Sep 16 13:56:41 vps691689 sshd[965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.122.23.70
Sep 16 13:56:43 vps691689 sshd[965]: Failed password for invalid user madeline from 202.122.23.70 port 44867 ssh2
...
2019-09-17 02:11:31

最近上报的IP列表

182.101.76.146 37.57.3.244 225.44.31.80 201.46.18.163
212.98.222.241 46.105.127.156 134.0.10.177 114.242.185.173
192.241.196.93 50.29.178.98 87.251.74.186 218.240.48.243
139.251.206.163 87.129.9.72 174.141.174.101 149.173.252.130
0.43.104.17 243.64.138.84 136.88.235.46 63.45.21.86