必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackspambots
Sep 11 09:46:47 sachi sshd\[24787\]: Invalid user test from 134.209.106.64
Sep 11 09:46:47 sachi sshd\[24787\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.106.64
Sep 11 09:46:49 sachi sshd\[24787\]: Failed password for invalid user test from 134.209.106.64 port 45062 ssh2
Sep 11 09:53:40 sachi sshd\[25384\]: Invalid user ftptest from 134.209.106.64
Sep 11 09:53:40 sachi sshd\[25384\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.106.64
2019-09-12 10:20:16
attack
F2B jail: sshd. Time: 2019-09-06 08:54:55, Reported by: VKReport
2019-09-06 14:55:23
attack
Invalid user ts3srv from 134.209.106.64 port 46414
2019-08-17 08:06:12
attackspambots
Aug 13 15:13:03 XXX sshd[58478]: Invalid user backup from 134.209.106.64 port 53452
2019-08-14 00:29:25
attackbotsspam
Invalid user abel from 134.209.106.64 port 37554
2019-08-03 19:26:42
attackbots
SSH/22 MH Probe, BF, Hack -
2019-07-29 21:32:05
相同子网IP讨论:
IP 类型 评论内容 时间
134.209.106.187 attackbots
Invalid user energy from 134.209.106.187 port 53556
2020-09-16 00:34:39
134.209.106.187 attack
134.209.106.187 (SG/Singapore/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 15 04:18:17 server5 sshd[30407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.106.187  user=root
Sep 15 04:18:17 server5 sshd[30399]: Failed password for root from 117.103.168.204 port 39584 ssh2
Sep 15 04:17:30 server5 sshd[29877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.43.5  user=root
Sep 15 04:17:31 server5 sshd[29877]: Failed password for root from 165.22.43.5 port 41030 ssh2
Sep 15 04:17:47 server5 sshd[30189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.57.2  user=root
Sep 15 04:17:49 server5 sshd[30189]: Failed password for root from 139.59.57.2 port 45714 ssh2

IP Addresses Blocked:
2020-09-15 16:25:56
134.209.106.187 attackspambots
Time:     Wed Sep  9 09:05:11 2020 +0000
IP:       134.209.106.187 (SG/Singapore/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep  9 08:55:04 vps1 sshd[14832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.106.187  user=root
Sep  9 08:55:06 vps1 sshd[14832]: Failed password for root from 134.209.106.187 port 34690 ssh2
Sep  9 09:00:44 vps1 sshd[15021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.106.187  user=root
Sep  9 09:00:46 vps1 sshd[15021]: Failed password for root from 134.209.106.187 port 52842 ssh2
Sep  9 09:05:09 vps1 sshd[15184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.106.187  user=root
2020-09-09 21:15:16
134.209.106.187 attackbotsspam
...
2020-09-09 15:10:58
134.209.106.187 attackbotsspam
Sep  8 20:02:44 powerpi2 sshd[6963]: Failed password for root from 134.209.106.187 port 45498 ssh2
Sep  8 20:06:24 powerpi2 sshd[7147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.106.187  user=root
Sep  8 20:06:26 powerpi2 sshd[7147]: Failed password for root from 134.209.106.187 port 49532 ssh2
...
2020-09-09 07:21:15
134.209.106.7 attackspambots
2020-09-07T21:50:01.809583afi-git.jinr.ru sshd[24986]: Failed password for root from 134.209.106.7 port 39022 ssh2
2020-09-07T21:52:04.962153afi-git.jinr.ru sshd[26021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.106.7  user=root
2020-09-07T21:52:07.519835afi-git.jinr.ru sshd[26021]: Failed password for root from 134.209.106.7 port 41318 ssh2
2020-09-07T21:54:10.473138afi-git.jinr.ru sshd[26404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.106.7  user=root
2020-09-07T21:54:12.996927afi-git.jinr.ru sshd[26404]: Failed password for root from 134.209.106.7 port 43610 ssh2
...
2020-09-08 03:07:16
134.209.106.7 attack
Time:     Mon Sep  7 09:13:43 2020 +0000
IP:       134.209.106.7 (SG/Singapore/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep  7 08:55:11 ca-29-ams1 sshd[20527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.106.7  user=root
Sep  7 08:55:13 ca-29-ams1 sshd[20527]: Failed password for root from 134.209.106.7 port 50940 ssh2
Sep  7 09:09:54 ca-29-ams1 sshd[22801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.106.7  user=root
Sep  7 09:09:55 ca-29-ams1 sshd[22801]: Failed password for root from 134.209.106.7 port 45298 ssh2
Sep  7 09:13:40 ca-29-ams1 sshd[23400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.106.7  user=root
2020-09-07 18:35:48
134.209.106.7 attackbotsspam
2020-08-30T17:19:08.986305afi-git.jinr.ru sshd[28402]: Invalid user mam from 134.209.106.7 port 37030
2020-08-30T17:19:08.989593afi-git.jinr.ru sshd[28402]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.106.7
2020-08-30T17:19:08.986305afi-git.jinr.ru sshd[28402]: Invalid user mam from 134.209.106.7 port 37030
2020-08-30T17:19:11.018480afi-git.jinr.ru sshd[28402]: Failed password for invalid user mam from 134.209.106.7 port 37030 ssh2
2020-08-30T17:20:17.679250afi-git.jinr.ru sshd[28615]: Invalid user dovecot from 134.209.106.7 port 50174
...
2020-08-31 00:23:11
134.209.106.187 attackspambots
21 attempts against mh-ssh on cloud
2020-08-30 23:46:59
134.209.106.187 attackspam
Aug 28 10:16:20 vpn01 sshd[16865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.106.187
Aug 28 10:16:21 vpn01 sshd[16865]: Failed password for invalid user test from 134.209.106.187 port 50134 ssh2
...
2020-08-28 19:38:10
134.209.106.112 attack
2020-01-01T11:23:05.569596shield sshd\[11618\]: Invalid user guest from 134.209.106.112 port 44316
2020-01-01T11:23:05.573150shield sshd\[11618\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.106.112
2020-01-01T11:23:07.074586shield sshd\[11618\]: Failed password for invalid user guest from 134.209.106.112 port 44316 ssh2
2020-01-01T11:26:21.633893shield sshd\[12638\]: Invalid user server from 134.209.106.112 port 44498
2020-01-01T11:26:21.638366shield sshd\[12638\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.106.112
2020-01-01 22:33:45
134.209.106.112 attack
Dec 22 13:51:26 sd-53420 sshd\[12441\]: Invalid user shana from 134.209.106.112
Dec 22 13:51:26 sd-53420 sshd\[12441\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.106.112
Dec 22 13:51:28 sd-53420 sshd\[12441\]: Failed password for invalid user shana from 134.209.106.112 port 58226 ssh2
Dec 22 13:57:09 sd-53420 sshd\[14429\]: Invalid user willever from 134.209.106.112
Dec 22 13:57:09 sd-53420 sshd\[14429\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.106.112
...
2019-12-22 21:06:12
134.209.106.112 attackspambots
Dec 19 08:53:24 eddieflores sshd\[19549\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.106.112  user=mysql
Dec 19 08:53:26 eddieflores sshd\[19549\]: Failed password for mysql from 134.209.106.112 port 39412 ssh2
Dec 19 08:59:22 eddieflores sshd\[20029\]: Invalid user ubnt from 134.209.106.112
Dec 19 08:59:22 eddieflores sshd\[20029\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.106.112
Dec 19 08:59:24 eddieflores sshd\[20029\]: Failed password for invalid user ubnt from 134.209.106.112 port 45786 ssh2
2019-12-20 03:16:32
134.209.106.112 attack
Dec 12 23:41:55 OPSO sshd\[3390\]: Invalid user airforce from 134.209.106.112 port 58780
Dec 12 23:41:55 OPSO sshd\[3390\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.106.112
Dec 12 23:41:57 OPSO sshd\[3390\]: Failed password for invalid user airforce from 134.209.106.112 port 58780 ssh2
Dec 12 23:48:07 OPSO sshd\[4964\]: Invalid user sachie from 134.209.106.112 port 39464
Dec 12 23:48:07 OPSO sshd\[4964\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.106.112
2019-12-13 07:04:59
134.209.106.112 attackspam
fail2ban
2019-12-06 19:11:20
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.209.106.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11307
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.209.106.64.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072900 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 29 21:31:56 CST 2019
;; MSG SIZE  rcvd: 118
HOST信息:
Host 64.106.209.134.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 64.106.209.134.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
118.24.28.39 attack
Nov  3 08:09:23 localhost sshd\[4945\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.28.39  user=root
Nov  3 08:09:25 localhost sshd\[4945\]: Failed password for root from 118.24.28.39 port 40090 ssh2
Nov  3 08:15:10 localhost sshd\[5325\]: Invalid user jubar from 118.24.28.39
Nov  3 08:15:10 localhost sshd\[5325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.28.39
Nov  3 08:15:12 localhost sshd\[5325\]: Failed password for invalid user jubar from 118.24.28.39 port 47844 ssh2
...
2019-11-03 16:58:43
118.68.9.113 attackspam
23/tcp
[2019-11-03]1pkt
2019-11-03 17:24:19
0.0.0.4 attack
chaangnoi.com 2a00:ab00:203:b::4 \[03/Nov/2019:06:51:34 +0100\] "POST /xmlrpc.php HTTP/1.1" 301 445 "-" "WordPress/4.5.15\; https://evparg.ru"
chaangnoifulda.de 2a00:ab00:203:b::4 \[03/Nov/2019:06:51:34 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4248 "-" "WordPress/4.5.15\; https://evparg.ru"
2019-11-03 17:30:14
112.85.42.238 attackspambots
Nov  3 09:54:45 h2177944 sshd\[19579\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.238  user=root
Nov  3 09:54:47 h2177944 sshd\[19579\]: Failed password for root from 112.85.42.238 port 53996 ssh2
Nov  3 09:54:49 h2177944 sshd\[19579\]: Failed password for root from 112.85.42.238 port 53996 ssh2
Nov  3 09:54:52 h2177944 sshd\[19579\]: Failed password for root from 112.85.42.238 port 53996 ssh2
...
2019-11-03 17:07:53
5.196.75.178 attackspambots
SSH invalid-user multiple login try
2019-11-03 17:19:04
49.236.198.123 attackspambots
port scan and connect, tcp 1433 (ms-sql-s)
2019-11-03 17:20:24
113.228.177.167 attack
60001/tcp
[2019-11-03]1pkt
2019-11-03 17:15:17
218.86.123.242 attackspambots
Invalid user vj from 218.86.123.242 port 60462
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.86.123.242
Failed password for invalid user vj from 218.86.123.242 port 60462 ssh2
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.86.123.242  user=root
Failed password for root from 218.86.123.242 port 24496 ssh2
2019-11-03 17:30:35
183.81.45.160 attackspambots
23/tcp
[2019-11-03]1pkt
2019-11-03 17:19:31
116.202.113.178 attackbotsspam
Port 1433 Scan
2019-11-03 17:10:24
118.24.255.191 attackspam
ssh failed login
2019-11-03 16:57:06
186.208.231.13 attackspambots
60001/tcp
[2019-11-03]1pkt
2019-11-03 16:59:31
45.136.109.15 attack
11/03/2019-04:03:22.738071 45.136.109.15 Protocol: 6 ET SCAN NMAP -sS window 1024
2019-11-03 17:27:39
14.102.152.182 attack
445/tcp 445/tcp 445/tcp
[2019-11-03]3pkt
2019-11-03 17:03:14
185.176.27.246 attack
firewall-block, port(s): 15106/tcp, 15606/tcp, 16706/tcp, 17006/tcp, 17106/tcp
2019-11-03 17:04:44

最近上报的IP列表

162.169.136.195 108.91.93.148 251.92.247.100 205.21.155.130
191.6.110.34 131.109.105.28 129.210.218.115 160.211.48.71
91.200.104.46 80.82.77.19 46.105.250.204 46.21.146.110
222.173.120.82 217.11.74.114 189.230.93.43 180.244.235.175
114.49.253.124 180.126.130.69 62.148.207.138 179.85.36.26