必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Dike

省份(region): Iowa

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.161.173.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26460
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;134.161.173.52.			IN	A

;; AUTHORITY SECTION:
.			513	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023012400 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 24 20:48:59 CST 2023
;; MSG SIZE  rcvd: 107
HOST信息:
Host 52.173.161.134.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 52.173.161.134.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
209.141.56.234 attack
[portscan] tcp/22 [SSH]
*(RWIN=65535)(09060835)
2019-09-06 13:47:25
81.30.208.114 attack
Sep  5 18:55:11 web9 sshd\[9437\]: Invalid user minecraft from 81.30.208.114
Sep  5 18:55:11 web9 sshd\[9437\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.30.208.114
Sep  5 18:55:13 web9 sshd\[9437\]: Failed password for invalid user minecraft from 81.30.208.114 port 41883 ssh2
Sep  5 19:02:20 web9 sshd\[10708\]: Invalid user arma3server from 81.30.208.114
Sep  5 19:02:20 web9 sshd\[10708\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.30.208.114
2019-09-06 13:14:17
88.201.82.50 attackbots
[Fri Sep 06 00:57:43.716332 2019] [:error] [pid 191685] [client 88.201.82.50:38952] [client 88.201.82.50] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 21)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "127.0.0.1"] [uri "/cgi-bin/ViewLog.asp"] [unique_id "XXHZN4MT7OEzvmGJ0-KOLwAAAAM"]
...
2019-09-06 13:39:21
106.12.77.212 attack
Sep  6 00:36:00 TORMINT sshd\[25789\]: Invalid user ts3 from 106.12.77.212
Sep  6 00:36:00 TORMINT sshd\[25789\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.77.212
Sep  6 00:36:02 TORMINT sshd\[25789\]: Failed password for invalid user ts3 from 106.12.77.212 port 34576 ssh2
...
2019-09-06 12:48:11
118.184.216.161 attack
Sep  6 06:42:18 vps691689 sshd[8012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.184.216.161
Sep  6 06:42:20 vps691689 sshd[8012]: Failed password for invalid user sysadmin from 118.184.216.161 port 42128 ssh2
Sep  6 06:50:48 vps691689 sshd[8105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.184.216.161
...
2019-09-06 12:51:31
218.98.40.136 attackspam
Sep  6 06:54:01 MK-Soft-Root1 sshd\[16415\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.40.136  user=root
Sep  6 06:54:03 MK-Soft-Root1 sshd\[16415\]: Failed password for root from 218.98.40.136 port 15759 ssh2
Sep  6 06:54:05 MK-Soft-Root1 sshd\[16415\]: Failed password for root from 218.98.40.136 port 15759 ssh2
...
2019-09-06 13:09:04
141.98.81.66 attackspam
scan r
2019-09-06 13:40:23
106.12.99.173 attackbots
Sep  6 07:02:24 localhost sshd\[31256\]: Invalid user ftpusr from 106.12.99.173 port 33598
Sep  6 07:02:24 localhost sshd\[31256\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.99.173
Sep  6 07:02:26 localhost sshd\[31256\]: Failed password for invalid user ftpusr from 106.12.99.173 port 33598 ssh2
2019-09-06 13:02:55
81.22.45.253 attackbotsspam
Sep  6 06:10:39 h2177944 kernel: \[619635.849579\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.253 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=2770 PROTO=TCP SPT=55285 DPT=7282 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep  6 06:14:20 h2177944 kernel: \[619856.577584\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.253 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=54485 PROTO=TCP SPT=55285 DPT=5713 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep  6 06:55:27 h2177944 kernel: \[622322.870452\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.253 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=24818 PROTO=TCP SPT=55285 DPT=8658 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep  6 07:05:39 h2177944 kernel: \[622934.850135\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.253 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=20601 PROTO=TCP SPT=55285 DPT=8975 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep  6 07:09:34 h2177944 kernel: \[623169.400520\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.253 DST=85.214.117.9 LEN=40 TOS
2019-09-06 13:14:44
112.220.85.26 attackspam
Sep  6 06:47:07 localhost sshd\[24445\]: Invalid user devops from 112.220.85.26
Sep  6 06:47:07 localhost sshd\[24445\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.220.85.26
Sep  6 06:47:09 localhost sshd\[24445\]: Failed password for invalid user devops from 112.220.85.26 port 37246 ssh2
Sep  6 06:51:51 localhost sshd\[24719\]: Invalid user ftpuser from 112.220.85.26
Sep  6 06:51:51 localhost sshd\[24719\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.220.85.26
...
2019-09-06 12:52:40
192.144.142.72 attackspambots
Lines containing failures of 192.144.142.72
Sep  6 06:55:04 shared09 sshd[12742]: Invalid user cloud from 192.144.142.72 port 47805
Sep  6 06:55:04 shared09 sshd[12742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.142.72
Sep  6 06:55:06 shared09 sshd[12742]: Failed password for invalid user cloud from 192.144.142.72 port 47805 ssh2
Sep  6 06:55:07 shared09 sshd[12742]: Received disconnect from 192.144.142.72 port 47805:11: Bye Bye [preauth]
Sep  6 06:55:07 shared09 sshd[12742]: Disconnected from invalid user cloud 192.144.142.72 port 47805 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=192.144.142.72
2019-09-06 13:26:09
125.227.164.62 attackbots
Sep  6 00:07:10 aat-srv002 sshd[8894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.227.164.62
Sep  6 00:07:12 aat-srv002 sshd[8894]: Failed password for invalid user mc from 125.227.164.62 port 35180 ssh2
Sep  6 00:11:44 aat-srv002 sshd[9005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.227.164.62
Sep  6 00:11:47 aat-srv002 sshd[9005]: Failed password for invalid user mysql from 125.227.164.62 port 50480 ssh2
...
2019-09-06 13:21:30
78.212.3.7 attackbots
Sep  6 05:57:31 vserver sshd\[27658\]: Invalid user admin from 78.212.3.7Sep  6 05:57:32 vserver sshd\[27658\]: Failed password for invalid user admin from 78.212.3.7 port 35286 ssh2Sep  6 05:58:32 vserver sshd\[27664\]: Invalid user ubuntu from 78.212.3.7Sep  6 05:58:33 vserver sshd\[27664\]: Failed password for invalid user ubuntu from 78.212.3.7 port 35550 ssh2
...
2019-09-06 13:07:11
185.86.164.99 attack
B: zzZZzz blocked content access
2019-09-06 13:15:29
212.92.124.161 attackbotsspam
212.92.124.161 - - [12/Aug/2019:12:39:43 +0800] "GET /wordpress/ HTTP/1.1" 404 1065 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:63.0) Gecko/20100101 Firefox/63.0"
212.92.124.161 - - [12/Aug/2019:12:39:44 +0800] "GET /wp/ HTTP/1.1" 404 1065 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:63.0) Gecko/20100101 Firefox/63.0"
212.92.124.161 - - [12/Aug/2019:12:39:51 +0800] "GET /blog/ HTTP/1.1" 404 1065 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:63.0) Gecko/20100101 Firefox/63.0"
212.92.124.161 - - [12/Aug/2019:12:39:52 +0800] "GET /new/ HTTP/1.1" 404 1065 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:63.0) Gecko/20100101 Firefox/63.0"
212.92.124.161 - - [12/Aug/2019:12:39:53 +0800] "GET /old/ HTTP/1.1" 404 1065 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:63.0) Gecko/20100101 Firefox/63.0"
212.92.124.161 - - [12/Aug/2019:12:39:54 +0800] "GET /test/ HTTP/1.1" 404 1065 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:63.0) Gecko/20100101 Firefox/63.0"
2019-09-06 13:19:35

最近上报的IP列表

134.184.125.48 132.129.184.106 126.136.43.35 126.126.117.29
67.42.110.251 68.51.211.77 115.9.86.251 121.218.166.96
121.200.141.220 12.41.198.193 119.13.158.170 251.254.14.229
146.190.23.143 115.22.179.59 103.222.20.235 103.39.156.146
21.219.175.3 103.24.209.166 247.175.2.163 168.56.15.114