必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Germany

运营商(isp): Contabo GmbH

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbots
2019-07-16 06:29:00 -> 2019-07-18 08:42:26 : 918 login attempts (193.34.145.6)
2019-07-19 08:02:20
attackbots
2019-07-14 06:27:54 -> 2019-07-16 23:01:46 : 1171 login attempts (193.34.145.6)
2019-07-17 07:53:37
attackbotsspam
2019-07-12 08:51:05 -> 2019-07-14 23:01:52 : 1140 login attempts (193.34.145.6)
2019-07-15 13:41:20
相同子网IP讨论:
IP 类型 评论内容 时间
193.34.145.204 attack
193.34.145.204 - - [29/Aug/2020:20:31:41 +0200] "GET /wp-login.php HTTP/1.1" 200 9163 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
193.34.145.204 - - [29/Aug/2020:20:31:43 +0200] "POST /wp-login.php HTTP/1.1" 200 9414 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
193.34.145.204 - - [29/Aug/2020:20:31:44 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-08-30 02:34:22
193.34.145.204 attack
Automatic report - XMLRPC Attack
2020-08-08 07:20:42
193.34.145.205 attackbots
193.34.145.205 - - [04/Jun/2020:04:55:21 +0100] "POST /wp-login.php HTTP/1.1" 200 1861 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
193.34.145.205 - - [04/Jun/2020:04:55:22 +0100] "POST /wp-login.php HTTP/1.1" 200 1880 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
193.34.145.205 - - [04/Jun/2020:04:55:22 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-06-04 14:38:41
193.34.145.205 attackbots
WordPress login Brute force / Web App Attack on client site.
2020-05-29 12:08:04
193.34.145.205 attack
xmlrpc attack
2020-05-25 19:08:54
193.34.145.205 attackbotsspam
193.34.145.205 - - \[24/May/2020:23:34:02 +0200\] "POST /wp-login.php HTTP/1.0" 200 2797 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
193.34.145.205 - - \[24/May/2020:23:34:03 +0200\] "POST /wp-login.php HTTP/1.0" 200 2727 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
193.34.145.205 - - \[24/May/2020:23:34:04 +0200\] "POST /wp-login.php HTTP/1.0" 200 2764 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
2020-05-25 08:04:53
193.34.145.205 attackbotsspam
xmlrpc attack
2020-05-16 04:12:40
193.34.145.203 attackspambots
Brute force VPN server
2019-12-21 07:03:33
193.34.145.18 attackbotsspam
fail2ban honeypot
2019-09-20 17:53:55
193.34.145.252 attack
port scan and connect, tcp 8080 (http-proxy)
2019-08-27 12:49:04
193.34.145.56 attack
Brute forcing Wordpress login
2019-08-13 14:08:40
193.34.145.202 attackspambots
xmlrpc attack
2019-08-12 16:15:05
193.34.145.18 attack
193.34.145.18 - - [01/Aug/2019:05:18:13 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
193.34.145.18 - - [01/Aug/2019:05:18:13 +0200] "POST /wp-login.php HTTP/1.1" 200 1704 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
193.34.145.18 - - [01/Aug/2019:05:18:13 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
193.34.145.18 - - [01/Aug/2019:05:18:13 +0200] "POST /wp-login.php HTTP/1.1" 200 1684 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
193.34.145.18 - - [01/Aug/2019:05:18:14 +0200] "GET /wp-login.php HTTP/1.1" 200 1301 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
193.34.145.18 - - [01/Aug/2019:05:18:14 +0200] "POST /wp-login.php HTTP/1.1" 200 1688 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2019-08-01 21:28:10
193.34.145.18 attackspambots
Wordpress Admin Login attack
2019-07-20 03:14:27
193.34.145.56 attack
Wordpress Admin Login attack
2019-07-16 19:17:30
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 193.34.145.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25871
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;193.34.145.6.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071500 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 15 13:41:12 CST 2019
;; MSG SIZE  rcvd: 116
HOST信息:
6.145.34.193.in-addr.arpa domain name pointer vmi30996.contabo.host.
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
6.145.34.193.in-addr.arpa	name = vmi30996.contabo.host.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
200.208.19.114 attackbots
Unauthorized connection attempt from IP address 200.208.19.114 on Port 445(SMB)
2019-09-01 05:19:26
106.13.51.110 attackbots
SSH Bruteforce attack
2019-09-01 05:09:55
24.210.199.30 attackspam
Aug 31 20:21:10 meumeu sshd[1310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.210.199.30 
Aug 31 20:21:12 meumeu sshd[1310]: Failed password for invalid user semenov from 24.210.199.30 port 33128 ssh2
Aug 31 20:26:17 meumeu sshd[1939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.210.199.30 
...
2019-09-01 05:28:15
5.196.118.54 attackspam
WordPress wp-login brute force :: 5.196.118.54 0.052 BYPASS [01/Sep/2019:06:42:47  1000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 4630 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-09-01 05:29:05
49.206.29.62 attackbots
Unauthorized connection attempt from IP address 49.206.29.62 on Port 445(SMB)
2019-09-01 05:32:41
94.41.208.143 attack
Unauthorized connection attempt from IP address 94.41.208.143 on Port 445(SMB)
2019-09-01 05:39:40
197.50.187.38 attackspambots
Unauthorized connection attempt from IP address 197.50.187.38 on Port 445(SMB)
2019-09-01 05:33:36
107.180.68.110 attackbotsspam
Invalid user ftpd from 107.180.68.110 port 37639
2019-09-01 05:06:00
177.50.201.131 attack
Automatic report - Banned IP Access
2019-09-01 05:24:27
27.208.128.126 attackspam
Lines containing failures of 27.208.128.126
Aug 31 14:17:47 hwd04 sshd[17356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.208.128.126  user=r.r
Aug 31 14:17:50 hwd04 sshd[17356]: Failed password for r.r from 27.208.128.126 port 54051 ssh2
Aug 31 14:17:59 hwd04 sshd[17356]: message repeated 4 serveres: [ Failed password for r.r from 27.208.128.126 port 54051 ssh2]
Aug 31 14:18:01 hwd04 sshd[17356]: Failed password for r.r from 27.208.128.126 port 54051 ssh2
Aug 31 14:18:01 hwd04 sshd[17356]: error: maximum authentication attempts exceeded for r.r from 27.208.128.126 port 54051 ssh2 [preauth]
Aug 31 14:18:01 hwd04 sshd[17356]: Disconnecting authenticating user r.r 27.208.128.126 port 54051: Too many authentication failures [preauth]
Aug 31 14:18:01 hwd04 sshd[17356]: PAM 5 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.208.128.126  user=r.r


........
-----------------------------------------------
https://www.blocklist.de/en/view.html
2019-09-01 05:16:40
68.183.181.7 attackspambots
Aug 31 21:32:28 lnxded63 sshd[31843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.181.7
2019-09-01 05:46:18
182.71.130.10 attackspambots
Unauthorized connection attempt from IP address 182.71.130.10 on Port 445(SMB)
2019-09-01 05:06:22
89.221.84.236 attackspam
Unauthorized connection attempt from IP address 89.221.84.236 on Port 445(SMB)
2019-09-01 05:08:20
49.88.112.57 attackbots
Sep  1 03:23:27 itv-usvr-01 sshd[32760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.57  user=root
Sep  1 03:23:29 itv-usvr-01 sshd[32760]: Failed password for root from 49.88.112.57 port 9295 ssh2
2019-09-01 05:19:03
151.80.162.216 attackspam
Aug 31 19:39:57  postfix/smtpd: warning: unknown[151.80.162.216]: SASL LOGIN authentication failed
2019-09-01 05:05:39

最近上报的IP列表

108.247.64.158 141.165.253.201 177.67.165.47 100.164.172.189
181.192.75.235 198.238.56.153 177.57.66.134 84.201.134.30
77.248.76.32 213.149.191.65 223.244.97.211 213.182.93.172
133.41.92.217 94.255.24.74 194.28.221.28 105.64.232.89
10.114.88.132 167.240.149.242 27.81.204.37 114.233.226.93