必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Australia

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.154.134.146
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44266
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;120.154.134.146.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025012100 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 21 22:44:18 CST 2025
;; MSG SIZE  rcvd: 108
HOST信息:
Host 146.134.154.120.in-addr.arpa not found: 5(REFUSED)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 146.134.154.120.in-addr.arpa: REFUSED
相关IP信息:
最新评论:
IP 类型 评论内容 时间
31.214.157.4 attackbots
*Port Scan* detected from 31.214.157.4 (NL/Netherlands/-). 4 hits in the last 271 seconds
2019-11-10 19:54:30
45.224.105.143 attackbots
(imapd) Failed IMAP login from 45.224.105.143 (AR/Argentina/-): 1 in the last 3600 secs
2019-11-10 19:58:19
37.153.88.198 attack
/var/log/messages:Nov 10 06:08:51 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1573366131.721:167115): pid=8167 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=8168 suid=74 rport=51956 laddr=104.167.106.93 lport=23  exe="/usr/sbin/sshd" hostname=? addr=37.153.88.198 terminal=? res=success'
/var/log/messages:Nov 10 06:08:51 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1573366131.725:167116): pid=8167 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=8168 suid=74 rport=51956 laddr=104.167.106.93 lport=23  exe="/usr/sbin/sshd" hostname=? addr=37.153.88.198 terminal=? res=success'
/var/log/messages:Nov 10 06:08:52 sanyalnet-cloud-vps fail2ban.filter[1538]: INFO [sshd] Found 3........
-------------------------------
2019-11-10 19:41:50
103.218.2.137 attackspambots
2019-11-10T05:06:07.7928191495-001 sshd\[28559\]: Failed password for root from 103.218.2.137 port 41712 ssh2
2019-11-10T06:08:43.2625171495-001 sshd\[30709\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.218.2.137  user=root
2019-11-10T06:08:45.2396201495-001 sshd\[30709\]: Failed password for root from 103.218.2.137 port 37763 ssh2
2019-11-10T06:13:09.8333841495-001 sshd\[30869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.218.2.137  user=root
2019-11-10T06:13:10.9926511495-001 sshd\[30869\]: Failed password for root from 103.218.2.137 port 56321 ssh2
2019-11-10T06:17:30.0937961495-001 sshd\[31057\]: Invalid user nic from 103.218.2.137 port 46648
...
2019-11-10 19:55:36
172.245.26.107 attackbotsspam
port scan and connect, tcp 1433 (ms-sql-s)
2019-11-10 19:38:56
175.45.180.38 attack
Nov 10 07:25:06 localhost sshd\[17948\]: Invalid user hduser from 175.45.180.38 port 33863
Nov 10 07:25:06 localhost sshd\[17948\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.45.180.38
Nov 10 07:25:08 localhost sshd\[17948\]: Failed password for invalid user hduser from 175.45.180.38 port 33863 ssh2
2019-11-10 19:52:00
15.188.2.5 attackbotsspam
[munged]::443 15.188.2.5 - - [10/Nov/2019:11:51:15 +0100] "POST /[munged]: HTTP/1.1" 200 9075 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 15.188.2.5 - - [10/Nov/2019:11:51:17 +0100] "POST /[munged]: HTTP/1.1" 200 9075 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 15.188.2.5 - - [10/Nov/2019:11:51:19 +0100] "POST /[munged]: HTTP/1.1" 200 9075 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 15.188.2.5 - - [10/Nov/2019:11:51:20 +0100] "POST /[munged]: HTTP/1.1" 200 9075 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 15.188.2.5 - - [10/Nov/2019:11:51:22 +0100] "POST /[munged]: HTTP/1.1" 200 9075 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 15.188.2.5 - - [10/Nov/2019:11:51:24 +0100] "POST /[munged]: HTTP/1.1" 200 9075 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64;
2019-11-10 20:11:45
222.186.173.215 attackspambots
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.215  user=root
Failed password for root from 222.186.173.215 port 14902 ssh2
Failed password for root from 222.186.173.215 port 14902 ssh2
Failed password for root from 222.186.173.215 port 14902 ssh2
Failed password for root from 222.186.173.215 port 14902 ssh2
2019-11-10 19:46:49
5.135.182.141 attackspam
Nov 10 12:16:57 SilenceServices sshd[17230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.182.141
Nov 10 12:17:00 SilenceServices sshd[17230]: Failed password for invalid user aguzzi from 5.135.182.141 port 57392 ssh2
Nov 10 12:21:53 SilenceServices sshd[18770]: Failed password for root from 5.135.182.141 port 39272 ssh2
2019-11-10 19:38:17
1.207.250.78 attack
Nov 10 09:09:01 ns381471 sshd[10989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.207.250.78
Nov 10 09:09:03 ns381471 sshd[10989]: Failed password for invalid user mntner from 1.207.250.78 port 20069 ssh2
2019-11-10 19:35:02
200.124.28.246 attackbotsspam
Nov 10 07:18:09 sinope sshd[17933]: Address 200.124.28.246 maps to mail.publicidadintegral.com.pa, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Nov 10 07:18:09 sinope sshd[17933]: Invalid user none from 200.124.28.246
Nov 10 07:18:09 sinope sshd[17933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.124.28.246 
Nov 10 07:18:11 sinope sshd[17933]: Failed password for invalid user none from 200.124.28.246 port 44936 ssh2
Nov 10 07:18:11 sinope sshd[17933]: Received disconnect from 200.124.28.246: 11: Bye Bye [preauth]
Nov 10 07:18:13 sinope sshd[17935]: Address 200.124.28.246 maps to mail.publicidadintegral.com.pa, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Nov 10 07:18:13 sinope sshd[17935]: Invalid user none from 200.124.28.246
Nov 10 07:18:13 sinope sshd[17935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.124.28.246 


........
------------------------------------
2019-11-10 20:04:54
185.42.214.108 attackbots
Nov 10 06:24:15 system,error,critical: login failure for user admin from 185.42.214.108 via telnet
Nov 10 06:24:16 system,error,critical: login failure for user guest from 185.42.214.108 via telnet
Nov 10 06:24:18 system,error,critical: login failure for user root from 185.42.214.108 via telnet
Nov 10 06:24:23 system,error,critical: login failure for user admin from 185.42.214.108 via telnet
Nov 10 06:24:25 system,error,critical: login failure for user guest from 185.42.214.108 via telnet
Nov 10 06:24:27 system,error,critical: login failure for user root from 185.42.214.108 via telnet
Nov 10 06:24:32 system,error,critical: login failure for user Administrator from 185.42.214.108 via telnet
Nov 10 06:24:34 system,error,critical: login failure for user support from 185.42.214.108 via telnet
Nov 10 06:24:36 system,error,critical: login failure for user default from 185.42.214.108 via telnet
Nov 10 06:24:40 system,error,critical: login failure for user root from 185.42.214.108 via telnet
2019-11-10 20:10:41
211.143.246.38 attack
Nov 10 12:10:26 tux-35-217 sshd\[28379\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.143.246.38  user=root
Nov 10 12:10:28 tux-35-217 sshd\[28379\]: Failed password for root from 211.143.246.38 port 36907 ssh2
Nov 10 12:16:11 tux-35-217 sshd\[28433\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.143.246.38  user=root
Nov 10 12:16:13 tux-35-217 sshd\[28433\]: Failed password for root from 211.143.246.38 port 52809 ssh2
...
2019-11-10 19:40:43
183.15.120.230 attackbots
Nov 10 11:14:33 taivassalofi sshd[243274]: Failed password for root from 183.15.120.230 port 54326 ssh2
Nov 10 11:19:39 taivassalofi sshd[243351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.15.120.230
...
2019-11-10 20:07:45
174.21.126.38 attack
Nov 10 07:14:08 server02 sshd[12927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174-21-126-38.tukw.qwest.net
Nov 10 07:14:08 server02 sshd[12925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174-21-126-38.tukw.qwest.net
Nov 10 07:14:10 server02 sshd[12927]: Failed password for invalid user pi from 174.21.126.38 port 46502 ssh2
Nov 10 07:14:10 server02 sshd[12925]: Failed password for invalid user pi from 174.21.126.38 port 46500 ssh2

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=174.21.126.38
2019-11-10 19:49:15

最近上报的IP列表

208.234.207.94 78.200.136.138 215.180.158.33 148.158.108.82
206.4.145.36 86.94.149.16 46.86.146.59 4.113.131.35
197.95.197.45 199.185.13.136 86.127.168.124 140.243.140.194
213.71.209.160 78.67.189.238 250.69.251.253 141.32.214.113
249.200.118.114 22.170.12.174 190.241.146.250 185.166.77.109