必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.171.134.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30022
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.171.134.54.			IN	A

;; AUTHORITY SECTION:
.			153	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022040402 1800 900 604800 86400

;; Query time: 69 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 05 19:11:21 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
Host 54.134.171.104.in-addr.arpa not found: 2(SERVFAIL)
NSLOOKUP信息:
;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 54.134.171.104.in-addr.arpa: SERVFAIL
相关IP信息:
最新评论:
IP 类型 评论内容 时间
103.216.216.94 attackspam
port scan and connect, tcp 1433 (ms-sql-s)
2020-05-28 20:11:03
152.0.201.3 attackspambots
Lines containing failures of 152.0.201.3
May 28 13:49:13 majoron sshd[29117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.0.201.3  user=r.r
May 28 13:49:16 majoron sshd[29117]: Failed password for r.r from 152.0.201.3 port 54464 ssh2
May 28 13:49:18 majoron sshd[29117]: Received disconnect from 152.0.201.3 port 54464:11: Bye Bye [preauth]
May 28 13:49:18 majoron sshd[29117]: Disconnected from authenticating user r.r 152.0.201.3 port 54464 [preauth]
May 28 13:56:56 majoron sshd[29287]: Invalid user admin from 152.0.201.3 port 49658
May 28 13:56:56 majoron sshd[29287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.0.201.3 
May 28 13:56:58 majoron sshd[29287]: Failed password for invalid user admin from 152.0.201.3 port 49658 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=152.0.201.3
2020-05-28 20:17:46
180.250.28.34 attack
180.250.28.34 - - \[28/May/2020:14:04:12 +0200\] "POST /wp-login.php HTTP/1.0" 200 6963 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
180.250.28.34 - - \[28/May/2020:14:04:15 +0200\] "POST /wp-login.php HTTP/1.0" 200 6785 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
180.250.28.34 - - \[28/May/2020:14:04:17 +0200\] "POST /wp-login.php HTTP/1.0" 200 6783 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-05-28 20:07:14
139.186.73.140 attackbotsspam
May 28 17:17:38 gw1 sshd[18373]: Failed password for root from 139.186.73.140 port 45186 ssh2
...
2020-05-28 20:30:44
124.239.153.215 attackbotsspam
2020-05-28T13:55:53.976823vps751288.ovh.net sshd\[995\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.239.153.215  user=root
2020-05-28T13:55:56.504710vps751288.ovh.net sshd\[995\]: Failed password for root from 124.239.153.215 port 33708 ssh2
2020-05-28T13:59:48.260167vps751288.ovh.net sshd\[1001\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.239.153.215  user=root
2020-05-28T13:59:49.378571vps751288.ovh.net sshd\[1001\]: Failed password for root from 124.239.153.215 port 60136 ssh2
2020-05-28T14:03:34.096887vps751288.ovh.net sshd\[1026\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.239.153.215  user=root
2020-05-28 20:42:31
98.172.109.236 attackspambots
Automatic report - Windows Brute-Force Attack
2020-05-28 20:21:06
117.50.3.192 attack
Lines containing failures of 117.50.3.192
May 25 10:25:57 ml postfix/smtpd[22776]: connect from betaworldtargeting.info[117.50.3.192]
May 25 10:25:58 ml postfix/smtpd[22776]: Anonymous TLS connection established from betaworldtargeting.info[117.50.3.192]: TLSv1.2 whostnameh cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bhostnames)
May x@x
May 25 10:25:59 ml postfix/smtpd[22776]: disconnect from betaworldtargeting.info[117.50.3.192] ehlo=2 starttls=1 mail=1 rcpt=0/1 quhostname=1 commands=5/6
May 27 09:34:21 ml postfix/smtpd[20004]: connect from betaworldtargeting.info[117.50.3.192]
May 27 09:34:22 ml postfix/smtpd[20004]: Anonymous TLS connection established from betaworldtargeting.info[117.50.3.192]: TLSv1.2 whostnameh cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bhostnames)
May 27 09:34:23 ml postfix/smtpd[20004]: 6B28D406F23D: client=betaworldtargeting.info[117.50.3.192]
May 27 09:34:24 ml postfix/smtpd[20004]: disconnect from betaworldtargeting.info[117.50.3.192] ehlo=2 ........
------------------------------
2020-05-28 20:27:02
92.190.153.246 attackbots
May 28 08:16:09 NPSTNNYC01T sshd[16140]: Failed password for root from 92.190.153.246 port 56324 ssh2
May 28 08:20:21 NPSTNNYC01T sshd[16478]: Failed password for root from 92.190.153.246 port 34766 ssh2
...
2020-05-28 20:32:23
45.142.195.7 attackbots
May 28 14:27:40 srv01 postfix/smtpd\[1016\]: warning: unknown\[45.142.195.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May 28 14:27:51 srv01 postfix/smtpd\[8522\]: warning: unknown\[45.142.195.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May 28 14:27:54 srv01 postfix/smtpd\[13853\]: warning: unknown\[45.142.195.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May 28 14:27:55 srv01 postfix/smtpd\[1016\]: warning: unknown\[45.142.195.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May 28 14:28:36 srv01 postfix/smtpd\[1016\]: warning: unknown\[45.142.195.7\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-05-28 20:29:20
36.82.106.238 attack
May 28 14:03:29 ArkNodeAT sshd\[7244\]: Invalid user boom from 36.82.106.238
May 28 14:03:29 ArkNodeAT sshd\[7244\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.82.106.238
May 28 14:03:31 ArkNodeAT sshd\[7244\]: Failed password for invalid user boom from 36.82.106.238 port 50356 ssh2
2020-05-28 20:37:48
195.54.160.228 attack
05/28/2020-08:11:17.545208 195.54.160.228 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-05-28 20:18:57
43.241.238.152 attack
May 28 13:40:02 ns382633 sshd\[16875\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.241.238.152  user=root
May 28 13:40:04 ns382633 sshd\[16875\]: Failed password for root from 43.241.238.152 port 44599 ssh2
May 28 14:00:48 ns382633 sshd\[21108\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.241.238.152  user=root
May 28 14:00:50 ns382633 sshd\[21108\]: Failed password for root from 43.241.238.152 port 38075 ssh2
May 28 14:04:16 ns382633 sshd\[21543\]: Invalid user spring from 43.241.238.152 port 33075
May 28 14:04:16 ns382633 sshd\[21543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.241.238.152
2020-05-28 20:08:51
200.41.188.82 attackspambots
20/5/28@08:03:41: FAIL: Alarm-Network address from=200.41.188.82
...
2020-05-28 20:35:34
115.230.71.150 attackspam
Lines containing failures of 115.230.71.150
May 28 07:57:34 neweola postfix/smtpd[2103]: connect from unknown[115.230.71.150]
May 28 07:57:39 neweola postfix/smtpd[2103]: NOQUEUE: reject: RCPT from unknown[115.230.71.150]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=
May 28 07:57:40 neweola postfix/smtpd[2103]: disconnect from unknown[115.230.71.150] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4
May 28 07:57:41 neweola postfix/smtpd[2103]: connect from unknown[115.230.71.150]
May 28 07:57:46 neweola postfix/smtpd[2103]: lost connection after AUTH from unknown[115.230.71.150]
May 28 07:57:46 neweola postfix/smtpd[2103]: disconnect from unknown[115.230.71.150] ehlo=1 auth=0/1 commands=1/2
May 28 07:57:47 neweola postfix/smtpd[2103]: connect from unknown[115.230.71.150]
May 28 07:57:49 neweola postfix/smtpd[2103]: lost connection after AUTH from unknown[115.230.71.150]
May 28 07:57:49 neweola postfix/smtpd[2103]: disconnect ........
------------------------------
2020-05-28 20:33:32
109.69.67.17 attackspam
CMS (WordPress or Joomla) login attempt.
2020-05-28 20:13:26

最近上报的IP列表

104.171.133.7 104.171.134.91 104.171.142.216 104.177.34.102
104.18.0.177 104.18.0.186 104.18.1.177 104.18.1.186
104.18.10.118 104.18.10.151 150.56.187.132 104.18.101.10
104.18.102.10 45.206.196.50 104.19.104.5 104.19.104.90
104.19.106.168 104.19.127.40 104.19.138.122 104.19.154.122