必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.134.5.158
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58383
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;14.134.5.158.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020301 1800 900 604800 86400

;; Query time: 40 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 03:55:21 CST 2025
;; MSG SIZE  rcvd: 105
HOST信息:
Host 158.5.134.14.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 158.5.134.14.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
212.64.91.105 attack
Brute-force attempt banned
2020-06-03 00:02:35
170.233.249.224 attackspambots
trying to access non-authorized port
2020-06-02 23:50:59
103.139.44.159 attackbots
2020-06-02T15:19:10.428004vps773228.ovh.net sshd[12488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.139.44.159  user=root
2020-06-02T15:19:12.696979vps773228.ovh.net sshd[12488]: Failed password for root from 103.139.44.159 port 65167 ssh2
2020-06-02T15:19:10.428004vps773228.ovh.net sshd[12488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.139.44.159  user=root
2020-06-02T15:19:12.696979vps773228.ovh.net sshd[12488]: Failed password for root from 103.139.44.159 port 65167 ssh2
2020-06-02T15:19:12.997781vps773228.ovh.net sshd[12488]: error: Received disconnect from 103.139.44.159 port 65167:3: com.jcraft.jsch.JSchException: Auth fail [preauth]
...
2020-06-03 00:14:37
109.73.241.50 attack
ft-1848-basketball.de 109.73.241.50 [02/Jun/2020:14:04:31 +0200] "POST /xmlrpc.php HTTP/1.1" 200 408 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36"
ft-1848-basketball.de 109.73.241.50 [02/Jun/2020:14:04:35 +0200] "POST /xmlrpc.php HTTP/1.1" 200 408 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36"
2020-06-03 00:25:22
142.93.130.58 attack
Blocked until: 2020.07.21 07:43:17 TCPMSS DPT=6943 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=63775 PROTO=TCP WINDOW=1024 RES=0x00 SYN URGP=0
2020-06-02 23:59:57
178.89.134.240 attackspambots
Jun  2 13:44:22 srv01 postfix/smtpd[17913]: warning: 178.89.134.240: hostname 178.89.134.240.megaline.telecom.kz verification failed: No address associated whostnameh hostname
Jun  2 13:44:22 srv01 postfix/smtpd[17913]: connect from unknown[178.89.134.240]
Jun x@x
Jun  2 13:44:25 srv01 postfix/smtpd[17913]: lost connection after RCPT from unknown[178.89.134.240]
Jun  2 13:44:25 srv01 postfix/smtpd[17913]: disconnect from unknown[178.89.134.240]
Jun  2 13:52:28 srv01 postfix/smtpd[18021]: warning: 178.89.134.240: hostname 178.89.134.240.megaline.telecom.kz verification failed: No address associated whostnameh hostname
Jun  2 13:52:28 srv01 postfix/smtpd[18021]: connect from unknown[178.89.134.240]
Jun x@x
Jun  2 13:52:29 srv01 postfix/smtpd[18021]: lost connection after RCPT from unknown[178.89.134.240]
Jun  2 13:52:29 srv01 postfix/smtpd[18021]: disconnect from unknown[178.89.134.240]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=178.89.134.240
2020-06-03 00:22:02
119.207.126.21 attackspambots
2020-06-02T16:28:57.473476struts4.enskede.local sshd\[4323\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.207.126.21  user=root
2020-06-02T16:28:59.581103struts4.enskede.local sshd\[4323\]: Failed password for root from 119.207.126.21 port 45996 ssh2
2020-06-02T16:33:12.938455struts4.enskede.local sshd\[4353\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.207.126.21  user=root
2020-06-02T16:33:16.558807struts4.enskede.local sshd\[4353\]: Failed password for root from 119.207.126.21 port 52430 ssh2
2020-06-02T16:37:33.990461struts4.enskede.local sshd\[4373\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.207.126.21  user=root
...
2020-06-03 00:21:02
211.116.234.149 attackbots
Jun  2 14:34:36 vps647732 sshd[28437]: Failed password for root from 211.116.234.149 port 51306 ssh2
...
2020-06-02 23:48:40
95.111.237.161 attackspam
Jun  2 17:36:58 gw1 sshd[30486]: Failed password for root from 95.111.237.161 port 52256 ssh2
Jun  2 17:46:58 gw1 sshd[31028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.111.237.161
...
2020-06-03 00:23:07
117.4.185.183 attackbots
'IP reached maximum auth failures for a one day block'
2020-06-03 00:20:04
1.235.192.218 attackbotsspam
SSH Brute Force
2020-06-03 00:24:56
188.163.249.18 attack
2020-06-02 09:23:49.290691-0500  localhost sshd[88920]: Failed password for root from 188.163.249.18 port 35089 ssh2
2020-06-02 23:58:29
178.93.42.166 attackspambots
Lines containing failures of 178.93.42.166
Jun  2 12:34:27 shared03 postfix/smtpd[10623]: connect from 166-42-93-178.pool.ukrtel.net[178.93.42.166]
Jun  2 12:34:29 shared03 policyd-spf[10659]: prepend Received-SPF: Softfail (mailfrom) identhostnamey=mailfrom; client-ip=178.93.42.166; helo=mx1.hostinger.com; envelope-from=x@x
Jun x@x
Jun x@x
Jun  2 12:34:30 shared03 postfix/smtpd[10623]: lost connection after RCPT from 166-42-93-178.pool.ukrtel.net[178.93.42.166]
Jun  2 12:34:30 shared03 postfix/smtpd[10623]: disconnect from 166-42-93-178.pool.ukrtel.net[178.93.42.166] ehlo=1 mail=1 rcpt=0/2 commands=2/4
Jun  2 13:50:27 shared03 postfix/smtpd[22401]: connect from 166-42-93-178.pool.ukrtel.net[178.93.42.166]
Jun  2 13:50:29 shared03 policyd-spf[7410]: prepend Received-SPF: None (mailfrom) identhostnamey=mailfrom; client-ip=178.93.42.166; helo=111iu.com; envelope-from=x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.ht
2020-06-03 00:08:40
177.32.168.211 attackspam
Jun  2 13:54:14 mxgate1 postfix/postscreen[1463]: CONNECT from [177.32.168.211]:25309 to [176.31.12.44]:25
Jun  2 13:54:14 mxgate1 postfix/dnsblog[1556]: addr 177.32.168.211 listed by domain zen.spamhaus.org as 127.0.0.11
Jun  2 13:54:14 mxgate1 postfix/dnsblog[1556]: addr 177.32.168.211 listed by domain zen.spamhaus.org as 127.0.0.4
Jun  2 13:54:14 mxgate1 postfix/dnsblog[1574]: addr 177.32.168.211 listed by domain cbl.abuseat.org as 127.0.0.2
Jun  2 13:54:14 mxgate1 postfix/dnsblog[1558]: addr 177.32.168.211 listed by domain b.barracudacentral.org as 127.0.0.2
Jun  2 13:54:15 mxgate1 postfix/dnsblog[1559]: addr 177.32.168.211 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Jun  2 13:54:20 mxgate1 postfix/postscreen[1463]: DNSBL rank 5 for [177.32.168.211]:25309
Jun x@x
Jun  2 13:54:21 mxgate1 postfix/postscreen[1463]: HANGUP after 1.1 from [177.32.168.211]:25309 in tests after SMTP handshake
Jun  2 13:54:21 mxgate1 postfix/postscreen[1463]: DISCONNECT [177.32.168.21........
-------------------------------
2020-06-03 00:24:03
123.20.229.48 attackspam
Unauthorized connection attempt from IP address 123.20.229.48 on port 465
2020-06-03 00:13:34

最近上报的IP列表

203.109.177.147 145.161.152.155 32.59.129.234 30.71.109.163
76.161.131.108 169.119.124.210 194.121.23.180 119.108.140.3
59.216.30.145 14.152.104.131 155.187.159.187 24.245.154.232
149.146.12.183 242.131.132.114 123.130.145.150 3.13.29.144
34.129.95.18 60.13.131.121 30.209.61.218 30.40.199.105