必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Moore

省份(region): Oklahoma

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
暂无关于此IP所属子网相关IP的讨论.
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 68.235.140.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45602
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;68.235.140.34.			IN	A

;; AUTHORITY SECTION:
.			221	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020070100 1800 900 604800 86400

;; Query time: 52 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jul 01 09:16:26 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
34.140.235.68.in-addr.arpa domain name pointer 68-235-140-34.dynsouth.hsi.pldi.net.
34.140.235.68.in-addr.arpa domain name pointer 38-235-140-34.dynsouth.hsi.pldi.net.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
34.140.235.68.in-addr.arpa	name = 68-235-140-34.dynsouth.hsi.pldi.net.
34.140.235.68.in-addr.arpa	name = 38-235-140-34.dynsouth.hsi.pldi.net.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
104.206.128.42 attackbotsspam
Found on   CINS badguys     / proto=6  .  srcport=60186  .  dstport=21  .     (3194)
2020-09-28 04:59:00
87.27.5.116 attackbotsspam
Unauthorised access (Sep 27) SRC=87.27.5.116 LEN=44 TTL=50 ID=51286 TCP DPT=23 WINDOW=48745 SYN
2020-09-28 05:15:19
136.49.109.217 attackbots
(sshd) Failed SSH login from 136.49.109.217 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 27 16:25:17 optimus sshd[17962]: Invalid user osm from 136.49.109.217
Sep 27 16:25:17 optimus sshd[17962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.49.109.217 
Sep 27 16:25:19 optimus sshd[17962]: Failed password for invalid user osm from 136.49.109.217 port 43914 ssh2
Sep 27 16:41:48 optimus sshd[25034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.49.109.217  user=root
Sep 27 16:41:50 optimus sshd[25034]: Failed password for root from 136.49.109.217 port 37056 ssh2
2020-09-28 05:14:23
5.62.20.22 attack
0,59-02/04 [bc00/m59] PostRequest-Spammer scoring: lisboa
2020-09-28 05:02:38
222.186.160.114 attackspambots
Sep 27 22:50:12 sip sshd[1750767]: Invalid user peace from 222.186.160.114 port 37686
Sep 27 22:50:14 sip sshd[1750767]: Failed password for invalid user peace from 222.186.160.114 port 37686 ssh2
Sep 27 22:53:22 sip sshd[1750777]: Invalid user demo from 222.186.160.114 port 40460
...
2020-09-28 05:07:48
125.212.219.50 attackspambots
Port Scan
...
2020-09-28 05:21:25
13.127.50.37 attackspambots
Lines containing failures of 13.127.50.37 (max 1000)
Sep 27 08:03:00 srv sshd[59890]: Invalid user www from 13.127.50.37 port 37436
Sep 27 08:03:00 srv sshd[59890]: Received disconnect from 13.127.50.37 port 37436:11: Bye Bye [preauth]
Sep 27 08:03:00 srv sshd[59890]: Disconnected from invalid user www 13.127.50.37 port 37436 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=13.127.50.37
2020-09-28 05:35:16
192.241.237.202 attackspam
 TCP (SYN) 192.241.237.202:57617 -> port 5631, len 44
2020-09-28 05:32:49
209.127.38.38 attack
(From information@total-healthchiropractic.com) ATT: total-healthchiropractic.com / Total Health Chiropractic of Kalispell, Montana Official Website Chiropractor Dr. Richard Puchta offering Gentle Chiropractic Care. INTERNET SITE SOLUTIONS
This notification ENDS ON: Sep 27, 2020


We have actually not obtained a payment from you.
We've tried to call you but were unable to contact you.


Kindly Visit: https://bit.ly/32XRmKa .

For info and also to process a optional settlement for services.



09272020033352.
2020-09-28 05:18:56
188.166.159.127 attackbotsspam
Sep 27 13:41:24 vlre-nyc-1 sshd\[30753\]: Invalid user dummy from 188.166.159.127
Sep 27 13:41:24 vlre-nyc-1 sshd\[30753\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.159.127
Sep 27 13:41:26 vlre-nyc-1 sshd\[30753\]: Failed password for invalid user dummy from 188.166.159.127 port 41922 ssh2
Sep 27 13:49:01 vlre-nyc-1 sshd\[30914\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.159.127  user=root
Sep 27 13:49:03 vlre-nyc-1 sshd\[30914\]: Failed password for root from 188.166.159.127 port 59950 ssh2
...
2020-09-28 05:25:46
112.85.42.174 attackbots
Sep 27 23:07:33 marvibiene sshd[1914]: Failed password for root from 112.85.42.174 port 42873 ssh2
Sep 27 23:07:36 marvibiene sshd[1914]: Failed password for root from 112.85.42.174 port 42873 ssh2
2020-09-28 05:20:37
106.12.171.253 attackspam
Sep 27 16:12:15 Tower sshd[38616]: Connection from 106.12.171.253 port 33246 on 192.168.10.220 port 22 rdomain ""
Sep 27 16:12:16 Tower sshd[38616]: Invalid user cesar from 106.12.171.253 port 33246
Sep 27 16:12:16 Tower sshd[38616]: error: Could not get shadow information for NOUSER
Sep 27 16:12:16 Tower sshd[38616]: Failed password for invalid user cesar from 106.12.171.253 port 33246 ssh2
Sep 27 16:12:16 Tower sshd[38616]: Received disconnect from 106.12.171.253 port 33246:11: Bye Bye [preauth]
Sep 27 16:12:16 Tower sshd[38616]: Disconnected from invalid user cesar 106.12.171.253 port 33246 [preauth]
2020-09-28 05:34:07
180.76.165.107 attack
SSH Honeypot -> SSH Bruteforce / Login
2020-09-28 05:08:17
37.187.174.55 attackbots
37.187.174.55 - - [27/Sep/2020:21:22:33 +0100] "POST /wp-login.php HTTP/1.1" 200 2307 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
37.187.174.55 - - [27/Sep/2020:21:22:34 +0100] "POST /wp-login.php HTTP/1.1" 200 2289 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
37.187.174.55 - - [27/Sep/2020:21:22:35 +0100] "POST /wp-login.php HTTP/1.1" 200 2240 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-09-28 05:03:50
123.58.109.42 attack
DATE:2020-09-27 20:18:55, IP:123.58.109.42, PORT:ssh SSH brute force auth (docker-dc)
2020-09-28 05:21:46

最近上报的IP列表

99.148.248.86 106.211.34.203 205.158.133.165 57.227.28.147
40.90.160.203 177.37.194.31 116.22.199.156 66.198.246.56
94.154.159.137 68.98.137.59 43.165.68.107 36.81.45.36
1.116.8.83 186.168.113.171 143.255.242.203 159.33.222.40
149.53.224.108 4.110.174.94 213.49.135.187 70.131.81.111