必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Westfield

省份(region): Indiana

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.68.207.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32529
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.68.207.52.			IN	A

;; AUTHORITY SECTION:
.			560	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020053000 1800 900 604800 86400

;; Query time: 52 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 31 06:40:45 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
Host 52.207.68.134.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 52.207.68.134.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
142.93.56.57 attackbots
Sep 23 05:55:04 pve1 sshd[4970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.56.57 
Sep 23 05:55:06 pve1 sshd[4970]: Failed password for invalid user hadoop from 142.93.56.57 port 57504 ssh2
...
2020-09-23 13:05:32
222.186.15.62 attackspambots
prod8
...
2020-09-23 13:12:45
51.75.206.42 attackbotsspam
Invalid user spravce from 51.75.206.42 port 43458
2020-09-23 12:59:42
139.99.239.230 attackspam
Sep 23 06:43:35 PorscheCustomer sshd[26540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.239.230
Sep 23 06:43:37 PorscheCustomer sshd[26540]: Failed password for invalid user ssl from 139.99.239.230 port 40018 ssh2
Sep 23 06:50:03 PorscheCustomer sshd[26749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.239.230
...
2020-09-23 12:58:53
106.52.137.134 attack
Time:     Wed Sep 23 02:33:26 2020 +0000
IP:       106.52.137.134 (CN/China/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 23 02:24:28 3 sshd[13388]: Failed password for root from 106.52.137.134 port 49878 ssh2
Sep 23 02:31:06 3 sshd[27032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.137.134  user=root
Sep 23 02:31:08 3 sshd[27032]: Failed password for root from 106.52.137.134 port 44474 ssh2
Sep 23 02:33:19 3 sshd[31710]: Invalid user spotlight from 106.52.137.134 port 52104
Sep 23 02:33:21 3 sshd[31710]: Failed password for invalid user spotlight from 106.52.137.134 port 52104 ssh2
2020-09-23 13:04:24
197.47.42.205 attackspambots
SSH 2020-09-23 00:00:06	197.47.42.205	139.99.182.230	>	POST	dexa-arfindopratama.com	/wp-login.php	HTTP/1.1	-	-
2020-09-23 00:00:07	197.47.42.205	139.99.182.230	>	GET	dexa-arfindopratama.com	/wp-login.php	HTTP/1.1	-	-
2020-09-23 00:00:07	197.47.42.205	139.99.182.230	>	POST	dexa-arfindopratama.com	/wp-login.php	HTTP/1.1	-	-
2020-09-23 13:11:33
128.199.69.208 attackspambots
SSH Invalid Login
2020-09-23 13:19:00
120.92.149.231 attackbots
Ssh brute force
2020-09-23 13:20:53
213.227.154.138 attackspambots
TCP src-port=62032   dst-port=25   Listed on   dnsbl-sorbs barracuda spamcop       (Project Honey Pot rated Suspicious)   (30)
2020-09-23 13:00:12
104.154.213.123 attackspam
" "
2020-09-23 12:56:35
67.207.89.167 attackspam
Lines containing failures of 67.207.89.167 (max 1000)
Sep 22 05:29:01 ks3370873 sshd[311828]: Connection closed by 67.207.89.167 port 37148
Sep 22 05:29:01 ks3370873 sshd[311829]: Connection closed by 67.207.89.167 port 37480
Sep 22 05:29:42 ks3370873 sshd[311837]: Unable to negotiate whostnameh 67.207.89.167 port 36666: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
Sep 22 05:29:42 ks3370873 sshd[311839]: Unable to negotiate whostnameh 67.207.89.167 port 36806: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=67.207.89.167
2020-09-23 13:25:03
119.28.4.87 attackspam
ssh brute force
2020-09-23 13:21:34
181.13.51.177 attackbots
Sep 23 00:29:47 r.ca sshd[21307]: Failed password for invalid user ubuntu from 181.13.51.177 port 46970 ssh2
2020-09-23 13:28:00
167.249.66.0 attack
Sep 23 12:49:39 localhost sshd[2810012]: Invalid user cactiuser from 167.249.66.0 port 6593
...
2020-09-23 13:16:05
54.38.134.219 attack
54.38.134.219 - - [23/Sep/2020:06:49:24 +0200] "GET /wp-login.php HTTP/1.1" 200 9184 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
54.38.134.219 - - [23/Sep/2020:06:49:25 +0200] "POST /wp-login.php HTTP/1.1" 200 9435 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
54.38.134.219 - - [23/Sep/2020:06:49:25 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-09-23 13:01:06

最近上报的IP列表

122.26.154.107 144.97.63.250 209.90.225.226 95.106.180.254
149.119.188.239 74.170.47.55 130.65.238.213 195.81.48.174
95.43.224.15 65.49.84.64 212.34.101.177 107.170.19.251
186.140.69.231 213.129.53.185 70.25.250.22 174.138.40.210
193.174.157.151 36.71.254.59 43.224.119.134 70.204.109.252