必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attack
Automatic report - Port Scan Attack
2019-11-14 02:24:29
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.169.53.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41043
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.169.53.34.			IN	A

;; AUTHORITY SECTION:
.			558	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111300 1800 900 604800 86400

;; Query time: 115 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 14 02:24:24 CST 2019
;; MSG SIZE  rcvd: 116
HOST信息:
34.53.169.14.in-addr.arpa domain name pointer static.vnpt.vn.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
34.53.169.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
128.199.249.213 attackspambots
plussize.fitness 128.199.249.213 \[06/Aug/2019:23:46:51 +0200\] "POST /wp-login.php HTTP/1.1" 200 5630 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
plussize.fitness 128.199.249.213 \[06/Aug/2019:23:46:52 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4095 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2019-08-07 07:49:07
218.153.159.198 attack
Aug  7 01:13:23 [munged] sshd[24471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.153.159.198
2019-08-07 07:43:16
18.233.99.179 attack
Lines containing failures of 18.233.99.179
Aug  6 14:31:23 server-name sshd[8899]: Invalid user demo3 from 18.233.99.179 port 50524
Aug  6 14:31:23 server-name sshd[8899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.233.99.179 
Aug  6 14:31:25 server-name sshd[8899]: Failed password for invalid user demo3 from 18.233.99.179 port 50524 ssh2
Aug  6 14:31:25 server-name sshd[8899]: Received disconnect from 18.233.99.179 port 50524:11: Bye Bye [preauth]
Aug  6 14:31:25 server-name sshd[8899]: Disconnected from invalid user demo3 18.233.99.179 port 50524 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=18.233.99.179
2019-08-07 07:24:02
178.135.92.9 attackspam
Aug  6 23:31:04 tamoto postfix/smtpd[31480]: connect from unknown[178.135.92.9]
Aug  6 23:31:05 tamoto postfix/smtpd[31480]: warning: unknown[178.135.92.9]: SASL PLAIN authentication failed: authentication failure
Aug  6 23:31:06 tamoto postfix/smtpd[31480]: warning: unknown[178.135.92.9]: SASL PLAIN authentication failed: authentication failure
Aug  6 23:31:07 tamoto postfix/smtpd[31480]: warning: unknown[178.135.92.9]: SASL PLAIN authentication failed: authentication failure
Aug  6 23:31:08 tamoto postfix/smtpd[31480]: warning: unknown[178.135.92.9]: SASL PLAIN authentication failed: authentication failure
Aug  6 23:31:08 tamoto postfix/smtpd[31480]: warning: unknown[178.135.92.9]: SASL PLAIN authentication failed: authentication failure


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=178.135.92.9
2019-08-07 07:17:36
109.185.141.196 attack
Automatic report - Port Scan Attack
2019-08-07 07:47:41
43.227.66.223 attackspambots
Aug  6 23:24:16 xb0 sshd[14151]: Failed password for invalid user julien from 43.227.66.223 port 47472 ssh2
Aug  6 23:24:16 xb0 sshd[14151]: Received disconnect from 43.227.66.223: 11: Bye Bye [preauth]
Aug  6 23:29:31 xb0 sshd[11647]: Failed password for invalid user three from 43.227.66.223 port 52560 ssh2
Aug  6 23:29:31 xb0 sshd[11647]: Received disconnect from 43.227.66.223: 11: Bye Bye [preauth]
Aug  6 23:31:35 xb0 sshd[3763]: Failed password for invalid user applmgr from 43.227.66.223 port 43370 ssh2
Aug  6 23:31:35 xb0 sshd[3763]: Received disconnect from 43.227.66.223: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=43.227.66.223
2019-08-07 07:21:30
23.94.16.72 attackbots
2019-08-06T18:49:09.254354mizuno.rwx.ovh sshd[22578]: Connection from 23.94.16.72 port 41212 on 78.46.61.178 port 22
2019-08-06T18:49:10.096353mizuno.rwx.ovh sshd[22578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.94.16.72  user=git
2019-08-06T18:49:11.769929mizuno.rwx.ovh sshd[22578]: Failed password for git from 23.94.16.72 port 41212 ssh2
2019-08-06T19:14:38.093592mizuno.rwx.ovh sshd[28186]: Connection from 23.94.16.72 port 41588 on 78.46.61.178 port 22
2019-08-06T19:14:38.832774mizuno.rwx.ovh sshd[28186]: Invalid user hduser from 23.94.16.72 port 41588
...
2019-08-07 07:18:28
218.92.0.204 attackbots
Aug  7 01:27:25 mail sshd\[17101\]: Failed password for root from 218.92.0.204 port 58214 ssh2
Aug  7 01:27:27 mail sshd\[17101\]: Failed password for root from 218.92.0.204 port 58214 ssh2
Aug  7 01:32:26 mail sshd\[17648\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.204  user=root
Aug  7 01:32:28 mail sshd\[17648\]: Failed password for root from 218.92.0.204 port 55228 ssh2
Aug  7 01:32:32 mail sshd\[17648\]: Failed password for root from 218.92.0.204 port 55228 ssh2
2019-08-07 07:44:23
106.75.63.218 attack
08/06/2019-17:47:20.069361 106.75.63.218 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-08-07 07:40:47
81.170.199.41 attack
Telnet/23 MH Probe, BF, Hack -
2019-08-07 07:12:04
185.176.27.50 attackspam
08/06/2019-17:47:43.550820 185.176.27.50 Protocol: 6 ET DROP Dshield Block Listed Source group 1
2019-08-07 07:28:22
192.3.70.147 attack
Caught in portsentry honeypot
2019-08-07 07:24:19
171.83.234.61 attack
SSH/22 MH Probe, BF, Hack -
2019-08-07 07:42:01
213.165.94.151 attackbotsspam
Aug  7 00:33:51 microserver sshd[33076]: Invalid user mri from 213.165.94.151 port 56150
Aug  7 00:33:51 microserver sshd[33076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.165.94.151
Aug  7 00:33:54 microserver sshd[33076]: Failed password for invalid user mri from 213.165.94.151 port 56150 ssh2
Aug  7 00:38:11 microserver sshd[33755]: Invalid user b from 213.165.94.151 port 52850
Aug  7 00:38:11 microserver sshd[33755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.165.94.151
Aug  7 00:50:58 microserver sshd[35667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.165.94.151  user=root
Aug  7 00:51:00 microserver sshd[35667]: Failed password for root from 213.165.94.151 port 43240 ssh2
Aug  7 00:55:25 microserver sshd[36347]: Invalid user usuario from 213.165.94.151 port 40086
Aug  7 00:55:25 microserver sshd[36347]: pam_unix(sshd:auth): authentication failure; logname= u
2019-08-07 07:25:20
198.108.66.64 attackbots
EventTime:Wed Aug 7 09:14:13 AEST 2019,EventName:Client denied: configuration,TargetDataNamespace:/,TargetDataContainer:srv/www/upperbay.info/site/,TargetDataName:E_NULL,SourceIP:198.108.66.64,VendorOutcomeCode:E_NULL,InitiatorServiceName:10974
2019-08-07 07:53:52

最近上报的IP列表

45.93.247.180 74.105.48.104 120.193.134.140 178.226.30.202
32.30.22.33 113.118.214.27 94.175.27.198 63.88.23.251
187.91.11.126 65.251.228.16 184.45.135.106 213.170.247.39
178.120.25.134 97.88.81.241 170.231.59.34 90.42.150.163
77.193.219.133 31.181.241.175 60.118.34.60 90.100.44.193