134.73.5.117 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Global Frag Networks

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Jun 18 15:10:41 PorscheCustomer sshd[26586]: Failed password for root from 134.73.5.117 port 60914 ssh2 Jun 18 15:12:17 PorscheCustomer sshd[26637]: Failed password for root from 134.73.5.117 port 55252 ssh2 ...	2020-06-18 21:27:53
attackspambots	2020-06-18T06:54:57.851182vps751288.ovh.net sshd\[18697\]: Invalid user arch from 134.73.5.117 port 56008 2020-06-18T06:54:57.856003vps751288.ovh.net sshd\[18697\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=itentitat.com 2020-06-18T06:54:59.361920vps751288.ovh.net sshd\[18697\]: Failed password for invalid user arch from 134.73.5.117 port 56008 ssh2 2020-06-18T06:58:32.051169vps751288.ovh.net sshd\[18762\]: Invalid user redmine from 134.73.5.117 port 47942 2020-06-18T06:58:32.060811vps751288.ovh.net sshd\[18762\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=itentitat.com	2020-06-18 15:35:04
attackbots	2020-06-17 13:54:23.229479-0500 localhost sshd[99585]: Failed password for invalid user mysqluser from 134.73.5.117 port 51248 ssh2	2020-06-18 03:45:10
attackbotsspam	Jun 17 06:57:30 sso sshd[20682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.5.117 Jun 17 06:57:32 sso sshd[20682]: Failed password for invalid user tms from 134.73.5.117 port 48766 ssh2 ...	2020-06-17 13:32:42

相同子网IP讨论:

IP	类型	评论内容	时间
134.73.5.54	attackbotsspam	Invalid user miguel from 134.73.5.54 port 57516	2020-10-13 23:20:07
134.73.5.54	attackspam	Oct 13 02:04:55 Tower sshd[18749]: Connection from 134.73.5.54 port 59616 on 192.168.10.220 port 22 rdomain "" Oct 13 02:04:55 Tower sshd[18749]: Invalid user test from 134.73.5.54 port 59616 Oct 13 02:04:55 Tower sshd[18749]: error: Could not get shadow information for NOUSER Oct 13 02:04:55 Tower sshd[18749]: Failed password for invalid user test from 134.73.5.54 port 59616 ssh2 Oct 13 02:04:55 Tower sshd[18749]: Received disconnect from 134.73.5.54 port 59616:11: Bye Bye [preauth] Oct 13 02:04:55 Tower sshd[18749]: Disconnected from invalid user test 134.73.5.54 port 59616 [preauth]	2020-10-13 14:37:14
134.73.5.54	attackbotsspam	Oct 12 22:21:32 plex-server sshd[743819]: Invalid user za from 134.73.5.54 port 40072 Oct 12 22:21:32 plex-server sshd[743819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.5.54 Oct 12 22:21:32 plex-server sshd[743819]: Invalid user za from 134.73.5.54 port 40072 Oct 12 22:21:34 plex-server sshd[743819]: Failed password for invalid user za from 134.73.5.54 port 40072 ssh2 Oct 12 22:25:12 plex-server sshd[745582]: Invalid user gunnar from 134.73.5.54 port 33346 ...	2020-10-13 07:17:31
134.73.5.191	attackbots	(sshd) Failed SSH login from 134.73.5.191 (US/United States/oc0h.husbandshow.pw): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 8 12:29:26 server sshd[32125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.5.191 user=root Oct 8 12:29:28 server sshd[32125]: Failed password for root from 134.73.5.191 port 52662 ssh2 Oct 8 12:36:10 server sshd[1755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.5.191 user=root Oct 8 12:36:12 server sshd[1755]: Failed password for root from 134.73.5.191 port 58074 ssh2 Oct 8 12:37:49 server sshd[2143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.5.191 user=root	2020-10-09 02:16:41
134.73.5.191	attackbotsspam	2020-10-08T13:01:22.947869billing sshd[4108]: Failed password for root from 134.73.5.191 port 47200 ssh2 2020-10-08T13:03:47.625521billing sshd[9642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.5.191 user=root 2020-10-08T13:03:49.872048billing sshd[9642]: Failed password for root from 134.73.5.191 port 54128 ssh2 ...	2020-10-08 18:14:10
134.73.5.5	attackspambots	$f2bV_matches	2020-10-04 06:09:39
134.73.5.5	attackbotsspam	2020-10-02T05:11:35.733611srv.ecualinux.com sshd[3273]: Invalid user foo from 134.73.5.5 port 53460 2020-10-02T05:11:35.737895srv.ecualinux.com sshd[3273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.5.5 2020-10-02T05:11:35.733611srv.ecualinux.com sshd[3273]: Invalid user foo from 134.73.5.5 port 53460 2020-10-02T05:11:37.479157srv.ecualinux.com sshd[3273]: Failed password for invalid user foo from 134.73.5.5 port 53460 ssh2 2020-10-02T05:15:11.622961srv.ecualinux.com sshd[3601]: Invalid user adminixxxr from 134.73.5.5 port 50928 2020-10-02T05:15:11.626732srv.ecualinux.com sshd[3601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.5.5 2020-10-02T05:15:11.622961srv.ecualinux.com sshd[3601]: Invalid user adminixxxr from 134.73.5.5 port 50928 2020-10-02T05:15:13.352433srv.ecualinux.com sshd[3601]: Failed password for invalid user adminixxxr from 134.73.5.5 port 50928 ssh2 2020........ ------------------------------	2020-10-03 22:11:15
134.73.56.96	attackspam	SSH invalid-user multiple login try	2020-06-23 22:17:27
134.73.5.17	attack	TCP src-port=57594 dst-port=25 Listed on barracuda spam-sorbs truncate-gbudb (93)	2020-06-22 01:45:43
134.73.56.115	attack	Invalid user pjh from 134.73.56.115 port 57252	2020-06-18 07:33:59
134.73.56.115	attackspambots	Jun 10 18:24:57 lnxded63 sshd[32007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.56.115 Jun 10 18:24:57 lnxded63 sshd[32007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.56.115	2020-06-11 00:30:39
134.73.56.115	attackbots	May 26 19:21:54 journals sshd\[3928\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.56.115 user=root May 26 19:21:56 journals sshd\[3928\]: Failed password for root from 134.73.56.115 port 41692 ssh2 May 26 19:24:16 journals sshd\[4160\]: Invalid user admin from 134.73.56.115 May 26 19:24:16 journals sshd\[4160\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.56.115 May 26 19:24:18 journals sshd\[4160\]: Failed password for invalid user admin from 134.73.56.115 port 52094 ssh2 ...	2020-05-27 02:04:02
134.73.56.115	attackspambots	Apr 25 06:04:49 h2040555 sshd[12690]: Invalid user carl from 134.73.56.115 Apr 25 06:04:49 h2040555 sshd[12690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.56.115 Apr 25 06:04:51 h2040555 sshd[12690]: Failed password for invalid user carl from 134.73.56.115 port 46672 ssh2 Apr 25 06:04:51 h2040555 sshd[12690]: Received disconnect from 134.73.56.115: 11: Bye Bye [preauth] Apr 25 06:12:29 h2040555 sshd[12834]: Invalid user sales from 134.73.56.115 Apr 25 06:12:29 h2040555 sshd[12834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.56.115 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=134.73.56.115	2020-04-27 03:09:09
134.73.51.96	attack	Apr 2 15:10:30 mail.srvfarm.net postfix/smtpd[1975768]: NOQUEUE: reject: RCPT from squirrel.superacrepair.com[134.73.51.96]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo= Apr 2 15:13:04 mail.srvfarm.net postfix/smtpd[1975772]: NOQUEUE: reject: RCPT from squirrel.superacrepair.com[134.73.51.96]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo= Apr 2 15:16:00 mail.srvfarm.net postfix/smtpd[1962002]: NOQUEUE: reject: RCPT from squirrel.superacrepair.com[134.73.51.96]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo= Apr 2 15:16:02 mail.srvfarm.net postfix/smtpd[1978064]: NOQUEUE: reject: RCPT from squirrel.superacrepair.com[134.73.51.96]: 554 5.7.1 Service unavailab	2020-04-03 04:14:17
134.73.51.53	attackspam	Apr 2 05:37:50 web01.agentur-b-2.de postfix/smtpd[64779]: NOQUEUE: reject: RCPT from shocker.juntosms.com[134.73.51.53]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Apr 2 05:37:58 web01.agentur-b-2.de postfix/smtpd[64780]: NOQUEUE: reject: RCPT from shocker.juntosms.com[134.73.51.53]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Apr 2 05:39:38 web01.agentur-b-2.de postfix/smtpd[64779]: NOQUEUE: reject: RCPT from shocker.juntosms.com[134.73.51.53]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Apr 2 05:39:56 web01.agentur-b-2.de postfix/smtpd[64780]: NOQUEUE: reject: RCPT from shocker.juntosms.com[134.73	2020-04-02 17:21:50

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.73.5.117
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33025
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.73.5.117.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020061602 1800 900 604800 86400

;; Query time: 103 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jun 17 09:23:20 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

117.5.73.134.in-addr.arpa domain name pointer itentitat.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
117.5.73.134.in-addr.arpa	name = itentitat.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
103.130.218.125	attack	2019-09-22T23:57:14.878032tmaserv sshd\[21980\]: Invalid user ms from 103.130.218.125 port 51778 2019-09-22T23:57:14.882927tmaserv sshd\[21980\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.218.125 2019-09-22T23:57:17.232854tmaserv sshd\[21980\]: Failed password for invalid user ms from 103.130.218.125 port 51778 ssh2 2019-09-23T00:03:24.779054tmaserv sshd\[24948\]: Invalid user ax400 from 103.130.218.125 port 38132 2019-09-23T00:03:24.783975tmaserv sshd\[24948\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.130.218.125 2019-09-23T00:03:27.596031tmaserv sshd\[24948\]: Failed password for invalid user ax400 from 103.130.218.125 port 38132 ssh2 ...	2019-09-23 06:12:52
142.112.115.160	attackbots	Sep 22 11:50:01 wbs sshd\[20986\]: Invalid user kb from 142.112.115.160 Sep 22 11:50:01 wbs sshd\[20986\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ipagstaticip-f6ffd4e0-f46a-b142-b2ad-b6c2b58e2418.sdsl.bell.ca Sep 22 11:50:04 wbs sshd\[20986\]: Failed password for invalid user kb from 142.112.115.160 port 52332 ssh2 Sep 22 11:53:39 wbs sshd\[21333\]: Invalid user debian from 142.112.115.160 Sep 22 11:53:39 wbs sshd\[21333\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ipagstaticip-f6ffd4e0-f46a-b142-b2ad-b6c2b58e2418.sdsl.bell.ca	2019-09-23 06:02:31
40.132.64.192	attackbotsspam	2019-09-05 01:46:26 -> 2019-09-22 13:30:37 : 5333 login attempts (40.132.64.192)	2019-09-23 06:03:28
91.121.110.50	attack	Sep 23 03:38:51 areeb-Workstation sshd[32732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.110.50 Sep 23 03:38:52 areeb-Workstation sshd[32732]: Failed password for invalid user webmail from 91.121.110.50 port 39275 ssh2 ...	2019-09-23 06:24:18
194.219.126.110	attackspambots	2019-09-22T17:39:55.7907671495-001 sshd\[58667\]: Failed password for invalid user modifications from 194.219.126.110 port 49189 ssh2 2019-09-22T17:51:17.1626331495-001 sshd\[59403\]: Invalid user public from 194.219.126.110 port 50865 2019-09-22T17:51:17.1675641495-001 sshd\[59403\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=com-tech.ath.forthnet.gr 2019-09-22T17:51:19.0568881495-001 sshd\[59403\]: Failed password for invalid user public from 194.219.126.110 port 50865 ssh2 2019-09-22T18:02:34.9538601495-001 sshd\[60253\]: Invalid user Administrator from 194.219.126.110 port 54157 2019-09-22T18:02:34.9576001495-001 sshd\[60253\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=com-tech.ath.forthnet.gr ...	2019-09-23 06:27:17
222.186.31.144	attackbotsspam	Sep 23 00:05:50 cvbnet sshd[2277]: Failed password for root from 222.186.31.144 port 56781 ssh2 Sep 23 00:05:55 cvbnet sshd[2277]: Failed password for root from 222.186.31.144 port 56781 ssh2	2019-09-23 06:19:02
113.35.96.245	attackspam	Sep 22 16:20:37 xb3 sshd[30842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113x35x96x245.ap113.ftth.ucom.ne.jp Sep 22 16:20:40 xb3 sshd[30842]: Failed password for invalid user bian from 113.35.96.245 port 59050 ssh2 Sep 22 16:20:40 xb3 sshd[30842]: Received disconnect from 113.35.96.245: 11: Bye Bye [preauth] Sep 22 16:38:44 xb3 sshd[6467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113x35x96x245.ap113.ftth.ucom.ne.jp Sep 22 16:38:46 xb3 sshd[6467]: Failed password for invalid user aartjan from 113.35.96.245 port 34382 ssh2 Sep 22 16:38:46 xb3 sshd[6467]: Received disconnect from 113.35.96.245: 11: Bye Bye [preauth] Sep 22 16:43:19 xb3 sshd[5389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113x35x96x245.ap113.ftth.ucom.ne.jp user=backup Sep 22 16:43:21 xb3 sshd[5389]: Failed password for backup from 113.35.96.245 port 49420 ssh2 Sep 2........ -------------------------------	2019-09-23 06:30:34
188.240.208.212	attack	Sep 22 07:41:13 newdogma sshd[13699]: Invalid user reginaldo from 188.240.208.212 port 36594 Sep 22 07:41:13 newdogma sshd[13699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.240.208.212 Sep 22 07:41:15 newdogma sshd[13699]: Failed password for invalid user reginaldo from 188.240.208.212 port 36594 ssh2 Sep 22 07:41:15 newdogma sshd[13699]: Received disconnect from 188.240.208.212 port 36594:11: Bye Bye [preauth] Sep 22 07:41:15 newdogma sshd[13699]: Disconnected from 188.240.208.212 port 36594 [preauth] Sep 22 07:51:15 newdogma sshd[13818]: Invalid user qc from 188.240.208.212 port 48204 Sep 22 07:51:15 newdogma sshd[13818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.240.208.212 Sep 22 07:51:17 newdogma sshd[13818]: Failed password for invalid user qc from 188.240.208.212 port 48204 ssh2 Sep 22 07:51:18 newdogma sshd[13818]: Received disconnect from 188.240.208.212 port 482........ -------------------------------	2019-09-23 06:22:52
137.74.171.160	attackbotsspam	Sep 23 00:09:55 rpi sshd[1003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.171.160 Sep 23 00:09:57 rpi sshd[1003]: Failed password for invalid user werner from 137.74.171.160 port 58088 ssh2	2019-09-23 06:23:35
181.126.83.125	attack	2019-09-22T17:38:16.8142051495-001 sshd\[58575\]: Invalid user ep from 181.126.83.125 port 45040 2019-09-22T17:38:16.8179631495-001 sshd\[58575\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.criterion.com.py 2019-09-22T17:38:18.4868801495-001 sshd\[58575\]: Failed password for invalid user ep from 181.126.83.125 port 45040 ssh2 2019-09-22T17:44:07.0523141495-001 sshd\[59004\]: Invalid user achour from 181.126.83.125 port 58332 2019-09-22T17:44:07.0567681495-001 sshd\[59004\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.criterion.com.py 2019-09-22T17:44:08.2485491495-001 sshd\[59004\]: Failed password for invalid user achour from 181.126.83.125 port 58332 ssh2 ...	2019-09-23 06:15:59
119.10.114.5	attack	Automatic report - Banned IP Access	2019-09-23 06:33:07
106.12.134.58	attackspam	Sep 22 22:01:37 yesfletchmain sshd\[4840\]: Invalid user nrlourenco from 106.12.134.58 port 34690 Sep 22 22:01:37 yesfletchmain sshd\[4840\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.134.58 Sep 22 22:01:39 yesfletchmain sshd\[4840\]: Failed password for invalid user nrlourenco from 106.12.134.58 port 34690 ssh2 Sep 22 22:04:11 yesfletchmain sshd\[4926\]: Invalid user windows from 106.12.134.58 port 55680 Sep 22 22:04:11 yesfletchmain sshd\[4926\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.134.58 ...	2019-09-23 06:17:54
51.75.202.120	attackspam	Sep 23 00:27:24 localhost sshd\[1657\]: Invalid user demo2 from 51.75.202.120 port 36873 Sep 23 00:27:24 localhost sshd\[1657\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.202.120 Sep 23 00:27:26 localhost sshd\[1657\]: Failed password for invalid user demo2 from 51.75.202.120 port 36873 ssh2	2019-09-23 06:27:59
115.159.216.187	attackspam	Sep 22 22:05:49 ip-172-31-1-72 sshd\[712\]: Invalid user ramu from 115.159.216.187 Sep 22 22:05:49 ip-172-31-1-72 sshd\[712\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.216.187 Sep 22 22:05:51 ip-172-31-1-72 sshd\[712\]: Failed password for invalid user ramu from 115.159.216.187 port 32871 ssh2 Sep 22 22:10:33 ip-172-31-1-72 sshd\[869\]: Invalid user logger from 115.159.216.187 Sep 22 22:10:33 ip-172-31-1-72 sshd\[869\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.216.187	2019-09-23 06:18:36
182.61.133.172	attackbots	Sep 22 18:07:29 ny01 sshd[21763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.133.172 Sep 22 18:07:31 ny01 sshd[21763]: Failed password for invalid user hadoop1 from 182.61.133.172 port 37336 ssh2 Sep 22 18:11:43 ny01 sshd[22623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.133.172	2019-09-23 06:15:46

最近上报的IP列表

218.92.0.252	218.92.0.246	17.98.130.48	58.158.245.28
116.51.226.95	59.95.165.49	54.28.185.235	191.240.190.3
81.174.25.185	41.139.131.225	192.29.204.96	139.155.13.93
125.74.52.54	50.244.219.33	103.19.2.176	221.155.180.197
5.182.166.187	189.6.16.14	88.202.127.73	123.122.183.135