122.51.234.134

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Guangzhou Haizhiguang Communication Technology Limited

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Feb 8 07:16:35 plex sshd[31622]: Invalid user xqg from 122.51.234.134 port 34814	2020-02-08 19:42:50
attack	Jan 31 11:06:34 mockhub sshd[21542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.234.134 Jan 31 11:06:37 mockhub sshd[21542]: Failed password for invalid user ubuntu from 122.51.234.134 port 42016 ssh2 ...	2020-02-01 04:56:56
attackbots	Jan 22 13:31:52 ns392434 sshd[14953]: Invalid user nick from 122.51.234.134 port 38008 Jan 22 13:31:52 ns392434 sshd[14953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.234.134 Jan 22 13:31:52 ns392434 sshd[14953]: Invalid user nick from 122.51.234.134 port 38008 Jan 22 13:31:55 ns392434 sshd[14953]: Failed password for invalid user nick from 122.51.234.134 port 38008 ssh2 Jan 22 13:49:46 ns392434 sshd[15330]: Invalid user servers from 122.51.234.134 port 39614 Jan 22 13:49:46 ns392434 sshd[15330]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.234.134 Jan 22 13:49:46 ns392434 sshd[15330]: Invalid user servers from 122.51.234.134 port 39614 Jan 22 13:49:48 ns392434 sshd[15330]: Failed password for invalid user servers from 122.51.234.134 port 39614 ssh2 Jan 22 13:53:21 ns392434 sshd[15400]: Invalid user admin from 122.51.234.134 port 37330	2020-01-22 22:29:53
attackspambots	Unauthorized connection attempt detected from IP address 122.51.234.134 to port 2220 [J]	2020-01-14 09:18:57
attackspam	Dec 11 18:49:22 sachi sshd\[7534\]: Invalid user sfrmp_distant from 122.51.234.134 Dec 11 18:49:22 sachi sshd\[7534\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.234.134 Dec 11 18:49:24 sachi sshd\[7534\]: Failed password for invalid user sfrmp_distant from 122.51.234.134 port 58122 ssh2 Dec 11 18:56:16 sachi sshd\[8150\]: Invalid user oracleuser from 122.51.234.134 Dec 11 18:56:16 sachi sshd\[8150\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.234.134	2019-12-12 13:01:02

相同子网IP讨论:

IP	类型	评论内容	时间
122.51.234.65	attackbotsspam	(sshd) Failed SSH login from 122.51.234.65 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 10 04:52:36 server5 sshd[27046]: Invalid user ruben from 122.51.234.65 Sep 10 04:52:36 server5 sshd[27046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.234.65 Sep 10 04:52:38 server5 sshd[27046]: Failed password for invalid user ruben from 122.51.234.65 port 52160 ssh2 Sep 10 05:05:38 server5 sshd[434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.234.65 user=root Sep 10 05:05:40 server5 sshd[434]: Failed password for root from 122.51.234.65 port 39782 ssh2	2020-09-11 01:22:42
122.51.234.65	attackbots	(sshd) Failed SSH login from 122.51.234.65 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 10 05:35:56 vps sshd[14567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.234.65 user=root Sep 10 05:35:57 vps sshd[14567]: Failed password for root from 122.51.234.65 port 59360 ssh2 Sep 10 05:53:13 vps sshd[22679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.234.65 user=root Sep 10 05:53:14 vps sshd[22679]: Failed password for root from 122.51.234.65 port 46396 ssh2 Sep 10 05:58:34 vps sshd[25060]: Invalid user victor from 122.51.234.65 port 43230	2020-09-10 16:41:50
122.51.234.65	attack	Sep 9 21:16:49 lnxweb62 sshd[6155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.234.65	2020-09-10 07:17:55
122.51.234.65	attackbotsspam	Aug 30 19:12:42 itv-usvr-01 sshd[12394]: Invalid user ht from 122.51.234.65 Aug 30 19:12:42 itv-usvr-01 sshd[12394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.234.65 Aug 30 19:12:42 itv-usvr-01 sshd[12394]: Invalid user ht from 122.51.234.65 Aug 30 19:12:44 itv-usvr-01 sshd[12394]: Failed password for invalid user ht from 122.51.234.65 port 42622 ssh2 Aug 30 19:15:03 itv-usvr-01 sshd[12522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.234.65 user=root Aug 30 19:15:05 itv-usvr-01 sshd[12522]: Failed password for root from 122.51.234.65 port 37156 ssh2	2020-08-30 22:33:40
122.51.234.65	attackspam	Aug 18 17:05:38 nextcloud sshd\[7006\]: Invalid user cop from 122.51.234.65 Aug 18 17:05:38 nextcloud sshd\[7006\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.234.65 Aug 18 17:05:40 nextcloud sshd\[7006\]: Failed password for invalid user cop from 122.51.234.65 port 39966 ssh2	2020-08-19 03:38:49
122.51.234.86	attackspambots	Banned for a week because repeated abuses, for example SSH, but not only	2020-08-10 18:15:39
122.51.234.65	attack	Aug 3 23:31:35 buvik sshd[8802]: Failed password for root from 122.51.234.65 port 34822 ssh2 Aug 3 23:34:46 buvik sshd[9206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.234.65 user=root Aug 3 23:34:48 buvik sshd[9206]: Failed password for root from 122.51.234.65 port 60964 ssh2 ...	2020-08-04 05:44:10
122.51.234.65	attack	Jul 24 00:10:34 pve1 sshd[30047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.234.65 Jul 24 00:10:37 pve1 sshd[30047]: Failed password for invalid user 20 from 122.51.234.65 port 54922 ssh2 ...	2020-07-24 06:48:38
122.51.234.86	attackspam	Invalid user user from 122.51.234.86 port 37768 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.234.86 Invalid user user from 122.51.234.86 port 37768 Failed password for invalid user user from 122.51.234.86 port 37768 ssh2 Invalid user xgues from 122.51.234.86 port 33098	2020-07-12 07:51:30
122.51.234.65	attackbots	Jul 11 11:40:12 Tower sshd[39761]: Connection from 122.51.234.65 port 44066 on 192.168.10.220 port 22 rdomain "" Jul 11 11:40:17 Tower sshd[39761]: Invalid user marilyn from 122.51.234.65 port 44066 Jul 11 11:40:17 Tower sshd[39761]: error: Could not get shadow information for NOUSER Jul 11 11:40:17 Tower sshd[39761]: Failed password for invalid user marilyn from 122.51.234.65 port 44066 ssh2 Jul 11 11:40:22 Tower sshd[39761]: Received disconnect from 122.51.234.65 port 44066:11: Bye Bye [preauth] Jul 11 11:40:22 Tower sshd[39761]: Disconnected from invalid user marilyn 122.51.234.65 port 44066 [preauth]	2020-07-12 01:56:33
122.51.234.86	attackbots	Jul 4 22:36:35 mellenthin sshd[10200]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.234.86 Jul 4 22:36:37 mellenthin sshd[10200]: Failed password for invalid user rachel from 122.51.234.86 port 58218 ssh2	2020-07-05 05:01:57
122.51.234.86	attackspam	Invalid user reseauchat from 122.51.234.86 port 54860	2020-06-13 16:25:38
122.51.234.86	attack	5x Failed Password	2020-05-22 17:24:39
122.51.234.86	attackspam	Invalid user qnm from 122.51.234.86 port 44244	2020-05-21 19:08:43
122.51.234.86	attack	May 5 21:45:34 server sshd[24408]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.234.86 May 5 21:45:36 server sshd[24408]: Failed password for invalid user sandesh from 122.51.234.86 port 34256 ssh2 May 5 21:51:06 server sshd[24764]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.234.86 ...	2020-05-06 05:00:11

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 122.51.234.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32796
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;122.51.234.134.			IN	A

;; AUTHORITY SECTION:
.			339	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121101 1800 900 604800 86400

;; Query time: 161 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Dec 12 12:57:58 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 134.234.51.122.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		100.100.2.136
Address:	100.100.2.136#53

** server can't find 134.234.51.122.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
23.106.159.187	attackspam	Invalid user alex from 23.106.159.187 port 58729	2020-08-23 13:58:45
111.229.176.206	attackspam	Aug 23 08:10:10 [host] sshd[12914]: Invalid user t Aug 23 08:10:10 [host] sshd[12914]: pam_unix(sshd: Aug 23 08:10:13 [host] sshd[12914]: Failed passwor	2020-08-23 14:34:21
117.50.63.120	attack	invalid user	2020-08-23 13:52:47
124.89.2.202	attack	B: Abusive ssh attack	2020-08-23 14:06:45
185.225.136.109	attackbotsspam	(From eric@talkwithwebvisitor.com) Hey, this is Eric and I ran across drjenniferbrandon.com a few minutes ago. Looks great… but now what? By that I mean, when someone like me finds your website – either through Search or just bouncing around – what happens next? Do you get a lot of leads from your site, or at least enough to make you happy? Honestly, most business websites fall a bit short when it comes to generating paying customers. Studies show that 70% of a site’s visitors disappear and are gone forever after just a moment. Here’s an idea… How about making it really EASY for every visitor who shows up to get a personal phone call you as soon as they hit your site… You can – Talk With Web Visitor is a software widget that’s works on your site, ready to capture any visitor’s Name, Email address and Phone Number. It signals you the moment they let you know they’re interested – so that you can talk to that lead while they’re literally looking over your site. CLICK HERE http://www	2020-08-23 14:18:08
174.138.20.105	attack	Aug 23 06:00:30 jumpserver sshd[10376]: Failed password for invalid user train5 from 174.138.20.105 port 60802 ssh2 Aug 23 06:03:55 jumpserver sshd[10411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.20.105 user=root Aug 23 06:03:57 jumpserver sshd[10411]: Failed password for root from 174.138.20.105 port 51844 ssh2 ...	2020-08-23 14:26:18
85.209.0.253	attack	TCP (SYN) 85.209.0.253:38124 -> port 22, len 60	2020-08-23 14:10:07
189.240.117.236	attackspambots	Invalid user training from 189.240.117.236 port 34762	2020-08-23 13:55:25
91.134.248.230	attackspam	91.134.248.230 - - [23/Aug/2020:08:06:47 +0200] "GET /wp-login.php HTTP/1.1" 200 9040 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 91.134.248.230 - - [23/Aug/2020:08:06:49 +0200] "POST /wp-login.php HTTP/1.1" 200 9291 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 91.134.248.230 - - [23/Aug/2020:08:06:50 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-23 14:22:39
62.109.19.68	attack	20 attempts against mh_ha-misbehave-ban on oak	2020-08-23 14:12:01
84.38.184.67	attack	84.38.184.67 - - [23/Aug/2020:07:08:24 +0100] "POST /wp-login.php HTTP/1.1" 200 4433 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 84.38.184.67 - - [23/Aug/2020:07:08:25 +0100] "POST /wp-login.php HTTP/1.1" 200 4433 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 84.38.184.67 - - [23/Aug/2020:07:08:26 +0100] "POST /wp-login.php HTTP/1.1" 200 4433 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-23 14:11:17
45.129.33.17	attackbots	TCP (SYN) 45.129.33.17:58513 -> port 23011, len 44	2020-08-23 13:53:46
14.143.107.226	attack	Invalid user reo from 14.143.107.226 port 62399	2020-08-23 14:32:10
195.54.160.180	attack	2020-08-23T05:59:18.278038shield sshd\[8487\]: Invalid user admin from 195.54.160.180 port 18890 2020-08-23T05:59:18.395429shield sshd\[8487\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.54.160.180 2020-08-23T05:59:20.813687shield sshd\[8487\]: Failed password for invalid user admin from 195.54.160.180 port 18890 ssh2 2020-08-23T05:59:21.753684shield sshd\[8503\]: Invalid user ftpuser from 195.54.160.180 port 41729 2020-08-23T05:59:21.871280shield sshd\[8503\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.54.160.180	2020-08-23 14:04:33
41.66.244.86	attackspambots	Aug 23 05:56:36 IngegnereFirenze sshd[17931]: Failed password for invalid user engineering from 41.66.244.86 port 38408 ssh2 ...	2020-08-23 14:03:19

最近上报的IP列表

189.213.162.43	116.74.102.62	109.250.144.235	61.132.111.99
104.207.142.31	67.1.118.79	45.32.55.151	225.201.82.60
87.26.210.165	219.159.233.239	170.247.112.106	21.190.141.187
19.27.250.79	37.35.198.0	24.2.46.146	224.222.109.141
140.123.177.30	198.51.168.190	41.169.20.131	235.72.244.173