172.67.134.98 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 172.67.134.98
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57509
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;172.67.134.98.			IN	A

;; AUTHORITY SECTION:
.			180	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 15:37:00 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

Host 98.134.67.172.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 98.134.67.172.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
112.85.42.185	attackbotsspam	Sep 21 11:59:38 piServer sshd[28847]: Failed password for root from 112.85.42.185 port 53363 ssh2 Sep 21 11:59:42 piServer sshd[28847]: Failed password for root from 112.85.42.185 port 53363 ssh2 Sep 21 11:59:45 piServer sshd[28847]: Failed password for root from 112.85.42.185 port 53363 ssh2 ...	2020-09-21 18:15:32
167.71.194.63	attack	Attempt to hack Wordpress Login, XMLRPC or other login	2020-09-21 18:17:22
182.61.60.191	attackspambots	$f2bV_matches	2020-09-21 18:36:10
185.234.218.84	attackspam	Sep 21 10:31:45 mail postfix/smtpd\[19140\]: warning: unknown\[185.234.218.84\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Sep 21 11:03:05 mail postfix/smtpd\[20283\]: warning: unknown\[185.234.218.84\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Sep 21 11:13:32 mail postfix/smtpd\[20041\]: warning: unknown\[185.234.218.84\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\ Sep 21 11:23:56 mail postfix/smtpd\[20789\]: warning: unknown\[185.234.218.84\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\	2020-09-21 18:40:14
198.199.91.245	attackspambots	$f2bV_matches	2020-09-21 18:32:52
170.150.241.202	attackbotsspam	Sep 20 18:58:18 mail sshd[18396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.150.241.202 Sep 20 18:58:20 mail sshd[18396]: Failed password for invalid user 666666 from 170.150.241.202 port 34997 ssh2 ...	2020-09-21 18:30:13
112.254.55.131	attack	[Sun Sep 20 23:58:02.153212 2020] [:error] [pid 23423:tid 140118059661056] [client 112.254.55.131:39665] [client 112.254.55.131] ModSecurity: Access denied with code 403 (phase 1). Match of "within %{tx.allowed_http_versions}" against "REQUEST_PROTOCOL" required. [file "/etc/modsecurity/coreruleset-3.3.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1041"] [id "920430"] [msg "HTTP protocol version is not allowed by policy"] [data "HTTP/1.0"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/210/272"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/setup.cgi"] [unique_id "AAAAAKyLvmllluV-tW9b4QAAAC0"] ...	2020-09-21 18:45:11
69.51.16.248	attack	(sshd) Failed SSH login from 69.51.16.248 (US/United States/-): 5 in the last 3600 secs	2020-09-21 18:38:53
184.75.212.146	attack	[2020-09-21 05:52:09] NOTICE[1239] chan_sip.c: Registration from '"365"' failed for '184.75.212.146:41169' - Wrong password [2020-09-21 05:52:09] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-21T05:52:09.136-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="365",SessionID="0x7f4d484e59a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/184.75.212.146/41169",Challenge="3d03b1ac",ReceivedChallenge="3d03b1ac",ReceivedHash="fa9e6e61dc6e0b4fe953fe77cf9d63fd" [2020-09-21 05:55:25] NOTICE[1239] chan_sip.c: Registration from '"366"' failed for '184.75.212.146:20196' - Wrong password [2020-09-21 05:55:25] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-21T05:55:25.027-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="366",SessionID="0x7f4d48965da8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/184. ...	2020-09-21 18:11:08
183.134.74.53	attack	Sep 20 20:48:59 sso sshd[32166]: Failed password for root from 183.134.74.53 port 45070 ssh2 ...	2020-09-21 18:18:40
46.101.146.6	attack	SSH 2020-09-21 13:50:07 46.101.146.6 139.99.53.101 > POST kampunginggriskediri.id /wp-login.php HTTP/1.1 - - 2020-09-21 13:50:07 46.101.146.6 139.99.53.101 > GET kampunginggriskediri.id /wp-login.php HTTP/1.1 - - 2020-09-21 13:50:08 46.101.146.6 139.99.53.101 > POST kampunginggriskediri.id /wp-login.php HTTP/1.1 - -	2020-09-21 18:48:43
54.174.255.123	attackspam	Sep 21 10:17:44 email sshd\[26996\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.174.255.123 user=root Sep 21 10:17:47 email sshd\[26996\]: Failed password for root from 54.174.255.123 port 34912 ssh2 Sep 21 10:21:23 email sshd\[27655\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.174.255.123 user=root Sep 21 10:21:25 email sshd\[27655\]: Failed password for root from 54.174.255.123 port 44054 ssh2 Sep 21 10:25:07 email sshd\[28318\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.174.255.123 user=root ...	2020-09-21 18:28:44
158.222.38.241	attackspam	Brute forcing email accounts	2020-09-21 18:21:10
118.24.82.81	attack	[ssh] SSH attack	2020-09-21 18:33:22
51.75.126.115	attackbots	2020-09-21T03:55:49.326999server.mjenks.net sshd[2329456]: Failed password for invalid user jts from 51.75.126.115 port 54814 ssh2 2020-09-21T03:59:40.981834server.mjenks.net sshd[2329938]: Invalid user hadoop2 from 51.75.126.115 port 37628 2020-09-21T03:59:40.989053server.mjenks.net sshd[2329938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.126.115 2020-09-21T03:59:40.981834server.mjenks.net sshd[2329938]: Invalid user hadoop2 from 51.75.126.115 port 37628 2020-09-21T03:59:42.986545server.mjenks.net sshd[2329938]: Failed password for invalid user hadoop2 from 51.75.126.115 port 37628 ssh2 ...	2020-09-21 18:35:54

最近上报的IP列表

172.67.134.97	172.67.134.92	172.67.134.96	172.67.135.1
172.67.134.99	172.67.134.94	172.67.135.10	172.67.135.107
172.67.135.108	172.67.135.101	172.67.135.100	172.67.135.102
172.67.135.104	172.67.135.105	172.67.135.106	172.67.135.109
172.67.135.110	172.67.135.117	172.67.135.11	172.67.135.121