必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.207.134.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34106
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;14.207.134.142.			IN	A

;; AUTHORITY SECTION:
.			117	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400

;; Query time: 75 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 13:21:52 CST 2022
;; MSG SIZE  rcvd: 107
HOST信息:
142.134.207.14.in-addr.arpa domain name pointer mx-ll-14.207.134-142.dynamic.3bb.in.th.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
142.134.207.14.in-addr.arpa	name = mx-ll-14.207.134-142.dynamic.3bb.in.th.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
45.77.249.229 attack
Aug  3 03:26:07 web1 sshd\[14240\]: Invalid user 0 from 45.77.249.229
Aug  3 03:26:07 web1 sshd\[14240\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.77.249.229
Aug  3 03:26:08 web1 sshd\[14240\]: Failed password for invalid user 0 from 45.77.249.229 port 59642 ssh2
Aug  3 03:29:04 web1 sshd\[14500\]: Invalid user 0101 from 45.77.249.229
Aug  3 03:29:04 web1 sshd\[14500\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.77.249.229
2020-08-03 22:47:59
193.112.156.65 attack
sshd jail - ssh hack attempt
2020-08-03 22:52:31
35.194.64.202 attack
Aug  3 13:27:49 ip-172-31-61-156 sshd[3333]: Failed password for root from 35.194.64.202 port 53374 ssh2
Aug  3 13:31:53 ip-172-31-61-156 sshd[3509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.194.64.202  user=root
Aug  3 13:31:55 ip-172-31-61-156 sshd[3509]: Failed password for root from 35.194.64.202 port 37652 ssh2
Aug  3 13:31:53 ip-172-31-61-156 sshd[3509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.194.64.202  user=root
Aug  3 13:31:55 ip-172-31-61-156 sshd[3509]: Failed password for root from 35.194.64.202 port 37652 ssh2
...
2020-08-03 23:04:56
2401:4900:30cb:c18d:7d91:5ea7:af4f:e8cd attackspambots
Wordpress attack
2020-08-03 22:56:18
150.136.116.126 attack
Aug  3 03:15:54 web1 sshd\[13325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.116.126  user=root
Aug  3 03:15:56 web1 sshd\[13325\]: Failed password for root from 150.136.116.126 port 39436 ssh2
Aug  3 03:19:44 web1 sshd\[13672\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.116.126  user=root
Aug  3 03:19:47 web1 sshd\[13672\]: Failed password for root from 150.136.116.126 port 50336 ssh2
Aug  3 03:23:41 web1 sshd\[14017\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.116.126  user=root
2020-08-03 22:51:43
42.194.144.170 attack
Lines containing failures of 42.194.144.170
Aug  3 02:49:30 ntop sshd[23592]: User r.r from 42.194.144.170 not allowed because not listed in AllowUsers
Aug  3 02:49:30 ntop sshd[23592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.194.144.170  user=r.r
Aug  3 02:49:32 ntop sshd[23592]: Failed password for invalid user r.r from 42.194.144.170 port 38908 ssh2
Aug  3 02:49:33 ntop sshd[23592]: Received disconnect from 42.194.144.170 port 38908:11: Bye Bye [preauth]
Aug  3 02:49:33 ntop sshd[23592]: Disconnected from invalid user r.r 42.194.144.170 port 38908 [preauth]
Aug  3 03:04:53 ntop sshd[25533]: User r.r from 42.194.144.170 not allowed because not listed in AllowUsers
Aug  3 03:04:53 ntop sshd[25533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.194.144.170  user=r.r
Aug  3 03:04:55 ntop sshd[25533]: Failed password for invalid user r.r from 42.194.144.170 port 52370 ssh2
Aug  ........
------------------------------
2020-08-03 22:33:16
144.172.84.41 attack
Volume spam messages from a changing domain (word numbers change periodically) ... mail-a.webstudioonehundredone.com[144.172.84.41]
2020-08-03 23:00:18
200.125.236.59 attack
Port probing on unauthorized port 445
2020-08-03 22:56:45
133.200.170.32 attackbotsspam
Lines containing failures of 133.200.170.32
Aug  3 11:55:22 kmh-vmh-001-fsn07 sshd[19157]: Bad protocol version identification '' from 133.200.170.32 port 23417
Aug  3 11:55:27 kmh-vmh-001-fsn07 sshd[19179]: Invalid user plexuser from 133.200.170.32 port 27511
Aug  3 11:55:28 kmh-vmh-001-fsn07 sshd[19179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=133.200.170.32 
Aug  3 11:55:30 kmh-vmh-001-fsn07 sshd[19179]: Failed password for invalid user plexuser from 133.200.170.32 port 27511 ssh2
Aug  3 11:55:31 kmh-vmh-001-fsn07 sshd[19179]: Connection closed by invalid user plexuser 133.200.170.32 port 27511 [preauth]
Aug  3 11:55:39 kmh-vmh-001-fsn07 sshd[19263]: Invalid user admin from 133.200.170.32 port 15227
Aug  3 11:55:39 kmh-vmh-001-fsn07 sshd[19263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=133.200.170.32 
Aug  3 11:55:41 kmh-vmh-001-fsn07 sshd[19263]: Failed password for invalid........
------------------------------
2020-08-03 22:36:20
163.172.117.227 attack
163.172.117.227 - - [03/Aug/2020:14:43:03 +0100] "POST /wp-login.php HTTP/1.1" 200 2081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
163.172.117.227 - - [03/Aug/2020:14:43:04 +0100] "POST /wp-login.php HTTP/1.1" 200 2081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
163.172.117.227 - - [03/Aug/2020:14:43:05 +0100] "POST /wp-login.php HTTP/1.1" 200 2084 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-03 22:30:52
39.104.14.232 attack
Lines containing failures of 39.104.14.232 (max 1000)
Aug  3 12:20:10 UTC__SANYALnet-Labs__cac12 sshd[12812]: Connection from 39.104.14.232 port 56584 on 64.137.176.96 port 22
Aug  3 12:20:12 UTC__SANYALnet-Labs__cac12 sshd[12812]: User r.r from 39.104.14.232 not allowed because not listed in AllowUsers
Aug  3 12:20:12 UTC__SANYALnet-Labs__cac12 sshd[12812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.104.14.232  user=r.r
Aug  3 12:20:14 UTC__SANYALnet-Labs__cac12 sshd[12812]: Failed password for invalid user r.r from 39.104.14.232 port 56584 ssh2
Aug  3 12:20:14 UTC__SANYALnet-Labs__cac12 sshd[12812]: Received disconnect from 39.104.14.232 port 56584:11: Bye Bye [preauth]
Aug  3 12:20:14 UTC__SANYALnet-Labs__cac12 sshd[12812]: Disconnected from 39.104.14.232 port 56584 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=39.104.14.232
2020-08-03 22:51:22
133.130.97.166 attackbots
Aug  3 15:28:26 vpn01 sshd[27762]: Failed password for root from 133.130.97.166 port 43420 ssh2
...
2020-08-03 22:24:10
45.129.33.7 attackspam
Aug  3 16:43:53 debian-2gb-nbg1-2 kernel: \[18724304.006190\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.129.33.7 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=15241 PROTO=TCP SPT=59555 DPT=5846 WINDOW=1024 RES=0x00 SYN URGP=0
2020-08-03 22:59:37
36.153.0.228 attackspam
"fail2ban match"
2020-08-03 22:53:29
198.46.189.106 attackspam
2020-08-03T16:51[Censored Hostname] sshd[21673]: Failed password for root from 198.46.189.106 port 42846 ssh2
2020-08-03T16:55[Censored Hostname] sshd[24435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.46.189.106  user=root
2020-08-03T16:55[Censored Hostname] sshd[24435]: Failed password for root from 198.46.189.106 port 55672 ssh2[...]
2020-08-03 23:05:13

最近上报的IP列表

14.207.135.17 14.207.135.43 14.207.133.97 14.207.133.142
14.207.136.14 14.207.136.104 14.207.136.110 14.207.133.127
14.207.133.135 14.207.133.103 14.207.136.146 14.207.136.160
14.207.136.2 14.207.136.207 14.207.136.220 14.207.136.232
14.207.136.230 14.207.136.178 14.207.136.237 14.207.136.21