134.209.107.107

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Singapore

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	vps1:sshd-InvalidUser	2019-08-22 01:57:39
attackspam	Aug 19 22:36:44 srv206 sshd[29367]: Invalid user celery from 134.209.107.107 ...	2019-08-20 05:19:18
attack	vps1:sshd-InvalidUser	2019-08-18 01:07:24
attack	Aug 17 03:06:08 eventyay sshd[23650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.107.107 Aug 17 03:06:10 eventyay sshd[23650]: Failed password for invalid user bi from 134.209.107.107 port 42292 ssh2 Aug 17 03:11:21 eventyay sshd[25214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.107.107 ...	2019-08-17 09:23:46

相同子网IP讨论:

IP	类型	评论内容	时间
134.209.107.160	attack	firewall-block, port(s): 2742/tcp	2020-07-09 04:58:16
134.209.107.151	attack	Too many connections or unauthorized access detected from Arctic banned ip	2019-09-08 08:16:39
134.209.107.206	attack	Aug 28 05:47:55 lcdev sshd\[16944\]: Invalid user student06 from 134.209.107.206 Aug 28 05:47:55 lcdev sshd\[16944\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.107.206 Aug 28 05:47:58 lcdev sshd\[16944\]: Failed password for invalid user student06 from 134.209.107.206 port 33764 ssh2 Aug 28 05:52:52 lcdev sshd\[17328\]: Invalid user suporte from 134.209.107.206 Aug 28 05:52:52 lcdev sshd\[17328\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.107.206	2019-08-29 05:18:40
134.209.107.193	attackbots	Brute force SMTP login attempted. ...	2019-08-10 06:01:14
134.209.107.95	attack	Brute force SMTP login attempted. ...	2019-08-10 06:00:59

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.209.107.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60248
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.209.107.107.		IN	A

;; AUTHORITY SECTION:
.			244	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081601 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 17 09:23:41 CST 2019
;; MSG SIZE  rcvd: 119

HOST信息:

Host 107.107.209.134.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 107.107.209.134.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
103.242.56.174	attackbots	May 8 14:39:48 piServer sshd[4627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.242.56.174 May 8 14:39:50 piServer sshd[4627]: Failed password for invalid user a from 103.242.56.174 port 53569 ssh2 May 8 14:44:21 piServer sshd[4971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.242.56.174 ...	2020-05-08 20:56:37
206.189.98.225	attack	2020-05-08T14:37:06.984401struts4.enskede.local sshd\[23495\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.98.225 user=root 2020-05-08T14:37:09.565788struts4.enskede.local sshd\[23495\]: Failed password for root from 206.189.98.225 port 40262 ssh2 2020-05-08T14:42:15.677504struts4.enskede.local sshd\[23555\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.98.225 user=root 2020-05-08T14:42:17.890036struts4.enskede.local sshd\[23555\]: Failed password for root from 206.189.98.225 port 49722 ssh2 2020-05-08T14:47:03.869508struts4.enskede.local sshd\[23585\]: Invalid user io from 206.189.98.225 port 59176 ...	2020-05-08 20:49:54
128.199.170.135	attackspambots	May 8 14:39:34 meumeu sshd[18129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.170.135 May 8 14:39:36 meumeu sshd[18129]: Failed password for invalid user renato from 128.199.170.135 port 10281 ssh2 May 8 14:41:31 meumeu sshd[18364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.170.135 ...	2020-05-08 20:55:45
177.102.18.62	attack	Unauthorized connection attempt from IP address 177.102.18.62 on Port 445(SMB)	2020-05-08 21:18:40
137.74.198.126	attack	May 8 14:11:40 vpn01 sshd[12974]: Failed password for root from 137.74.198.126 port 50992 ssh2 ...	2020-05-08 20:47:42
203.109.47.233	attackbots	Unauthorized connection attempt from IP address 203.109.47.233 on Port 445(SMB)	2020-05-08 20:37:55
62.4.14.123	attack	" "	2020-05-08 21:09:50
27.71.81.174	attackspambots	Unauthorized connection attempt from IP address 27.71.81.174 on Port 445(SMB)	2020-05-08 21:01:37
95.110.129.91	attackbotsspam	95.110.129.91 - - \[08/May/2020:14:15:22 +0200\] "POST /wp-login.php HTTP/1.0" 200 6020 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 95.110.129.91 - - \[08/May/2020:14:15:23 +0200\] "POST /wp-login.php HTTP/1.0" 200 5868 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 95.110.129.91 - - \[08/May/2020:14:15:24 +0200\] "POST /wp-login.php HTTP/1.0" 200 5871 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-05-08 21:08:25
111.230.152.175	attack	2020-05-08T12:09:04.233156abusebot-6.cloudsearch.cf sshd[615]: Invalid user host from 111.230.152.175 port 57524 2020-05-08T12:09:04.245827abusebot-6.cloudsearch.cf sshd[615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.152.175 2020-05-08T12:09:04.233156abusebot-6.cloudsearch.cf sshd[615]: Invalid user host from 111.230.152.175 port 57524 2020-05-08T12:09:06.389008abusebot-6.cloudsearch.cf sshd[615]: Failed password for invalid user host from 111.230.152.175 port 57524 ssh2 2020-05-08T12:12:06.056719abusebot-6.cloudsearch.cf sshd[809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.152.175 user=root 2020-05-08T12:12:08.520753abusebot-6.cloudsearch.cf sshd[809]: Failed password for root from 111.230.152.175 port 42230 ssh2 2020-05-08T12:15:20.859027abusebot-6.cloudsearch.cf sshd[981]: Invalid user paul from 111.230.152.175 port 55260 ...	2020-05-08 21:18:10
106.12.22.209	attackbots	May 8 14:57:54 MainVPS sshd[2612]: Invalid user monkey from 106.12.22.209 port 33822 May 8 14:57:54 MainVPS sshd[2612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.22.209 May 8 14:57:54 MainVPS sshd[2612]: Invalid user monkey from 106.12.22.209 port 33822 May 8 14:57:56 MainVPS sshd[2612]: Failed password for invalid user monkey from 106.12.22.209 port 33822 ssh2 May 8 14:59:56 MainVPS sshd[4249]: Invalid user control from 106.12.22.209 port 54906 ...	2020-05-08 21:12:19
151.84.135.188	attack	May 8 08:27:51 ny01 sshd[9660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.84.135.188 May 8 08:27:53 ny01 sshd[9660]: Failed password for invalid user sharon from 151.84.135.188 port 58921 ssh2 May 8 08:36:44 ny01 sshd[10993]: Failed password for root from 151.84.135.188 port 41506 ssh2	2020-05-08 20:54:09
80.234.1.190	attackbotsspam	SMB Server BruteForce Attack	2020-05-08 20:59:43
168.196.120.2	attack	May 8 14:15:37 smtp postfix/smtpd[9138]: NOQUEUE: reject: RCPT from unknown[168.196.120.2]: 554 5.7.1 Service unavailable; Client host [168.196.120.2] blocked using cbl.abuseat.org; Blocked - see http://www.abuseat.org/lookup.cgi?ip=168.196.120.2; from= to= proto=ESMTP helo=<[168.196.120.2]> ...	2020-05-08 20:51:00
222.186.175.215	attackspam	May 8 15:09:06 MainVPS sshd[11989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.215 user=root May 8 15:09:08 MainVPS sshd[11989]: Failed password for root from 222.186.175.215 port 28770 ssh2 May 8 15:09:21 MainVPS sshd[11989]: Failed password for root from 222.186.175.215 port 28770 ssh2 May 8 15:09:06 MainVPS sshd[11989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.215 user=root May 8 15:09:08 MainVPS sshd[11989]: Failed password for root from 222.186.175.215 port 28770 ssh2 May 8 15:09:21 MainVPS sshd[11989]: Failed password for root from 222.186.175.215 port 28770 ssh2 May 8 15:09:06 MainVPS sshd[11989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.215 user=root May 8 15:09:08 MainVPS sshd[11989]: Failed password for root from 222.186.175.215 port 28770 ssh2 May 8 15:09:21 MainVPS sshd[11989]: Failed password for root from 222.18	2020-05-08 21:11:23

最近上报的IP列表

157.146.151.208	177.93.109.138	46.14.236.51	37.147.197.58
24.237.145.10	184.30.35.22	112.195.109.187	23.216.1.194
190.71.49.191	71.208.23.165	217.116.152.206	60.147.121.98
175.145.102.147	111.67.206.43	46.170.92.188	35.29.153.35
36.81.235.34	3.20.71.13	199.173.76.71	109.194.54.126