必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Bengaluru

省份(region): Karnataka

国家(country): India

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbots
Mar  2 15:19:57 xxxxxxx7446550 sshd[19084]: Invalid user postgres from 134.209.148.148
Mar  2 15:19:57 xxxxxxx7446550 sshd[19084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.148 
Mar  2 15:19:59 xxxxxxx7446550 sshd[19084]: Failed password for invalid user postgres from 134.209.148.148 port 50092 ssh2
Mar  2 15:19:59 xxxxxxx7446550 sshd[19085]: Received disconnect from 134.209.148.148: 11: Normal Shutdown
Mar  2 15:23:45 xxxxxxx7446550 sshd[19884]: Invalid user farbe-bfi1234 from 134.209.148.148
Mar  2 15:23:45 xxxxxxx7446550 sshd[19884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.148 
Mar  2 15:23:47 xxxxxxx7446550 sshd[19884]: Failed password for invalid user farbe-bfi1234 from 134.209.148.148 port 47848 ssh2
Mar  2 15:23:47 xxxxxxx7446550 sshd[19885]: Received disconnect from 134.209.148.148: 11: Normal Shutdown


........
-----------------------------------------------
https://www.blocklist.de/
2020-03-08 05:41:12
相同子网IP讨论:
IP 类型 评论内容 时间
134.209.148.107 attackbotsspam
Oct  6 18:51:56 router sshd[24181]: Failed password for root from 134.209.148.107 port 46336 ssh2
Oct  6 18:52:49 router sshd[24183]: Failed password for root from 134.209.148.107 port 56478 ssh2
...
2020-10-07 02:13:06
134.209.148.107 attackbotsspam
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-10-06 18:08:51
134.209.148.107 attackspambots
[N1.H1.VM1] Port Scanner Detected Blocked by UFW
2020-09-30 03:43:16
134.209.148.107 attackbotsspam
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-09-29 19:49:18
134.209.148.107 attackspambots
 TCP (SYN) 134.209.148.107:44843 -> port 24561, len 44
2020-09-11 23:00:06
134.209.148.107 attackspam
Port scan denied
2020-09-11 15:04:50
134.209.148.107 attack
13978/tcp 2841/tcp 19528/tcp...
[2020-07-10/09-10]190pkt,72pt.(tcp)
2020-09-11 07:17:31
134.209.148.107 attackspam
Aug 23 11:38:05 PorscheCustomer sshd[10368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107
Aug 23 11:38:07 PorscheCustomer sshd[10368]: Failed password for invalid user zn from 134.209.148.107 port 52346 ssh2
Aug 23 11:39:31 PorscheCustomer sshd[10404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107
...
2020-08-23 18:05:59
134.209.148.107 attack
TCP port : 25791
2020-08-22 18:49:24
134.209.148.107 attackspam
2020-08-19T16:48:15.283554server.mjenks.net sshd[3507142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107
2020-08-19T16:48:15.276367server.mjenks.net sshd[3507142]: Invalid user szd from 134.209.148.107 port 59392
2020-08-19T16:48:17.967383server.mjenks.net sshd[3507142]: Failed password for invalid user szd from 134.209.148.107 port 59392 ssh2
2020-08-19T16:52:17.263658server.mjenks.net sshd[3507575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107  user=root
2020-08-19T16:52:19.169542server.mjenks.net sshd[3507575]: Failed password for root from 134.209.148.107 port 38798 ssh2
...
2020-08-20 08:42:45
134.209.148.107 attackspambots
Aug 19 21:26:38 pornomens sshd\[26061\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107  user=root
Aug 19 21:26:40 pornomens sshd\[26061\]: Failed password for root from 134.209.148.107 port 40294 ssh2
Aug 19 21:33:27 pornomens sshd\[26112\]: Invalid user mort from 134.209.148.107 port 48678
Aug 19 21:33:27 pornomens sshd\[26112\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107
...
2020-08-20 03:39:40
134.209.148.107 attackspam
Aug 19 00:51:57 rotator sshd\[30371\]: Failed password for root from 134.209.148.107 port 48254 ssh2Aug 19 00:54:14 rotator sshd\[30389\]: Failed password for root from 134.209.148.107 port 55288 ssh2Aug 19 00:56:23 rotator sshd\[31160\]: Invalid user mee from 134.209.148.107Aug 19 00:56:25 rotator sshd\[31160\]: Failed password for invalid user mee from 134.209.148.107 port 34098 ssh2Aug 19 00:58:38 rotator sshd\[31169\]: Invalid user courses from 134.209.148.107Aug 19 00:58:40 rotator sshd\[31169\]: Failed password for invalid user courses from 134.209.148.107 port 41142 ssh2
...
2020-08-19 07:35:56
134.209.148.107 attackspambots
firewall-block, port(s): 13059/tcp
2020-08-15 02:48:55
134.209.148.107 attack
SSH Brute Force
2020-08-13 09:52:07
134.209.148.107 attackbotsspam
firewall-block, port(s): 16314/tcp
2020-08-08 16:28:09
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.209.148.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5360
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.209.148.148.		IN	A

;; AUTHORITY SECTION:
.			374	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020030701 1800 900 604800 86400

;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 08 05:41:09 CST 2020
;; MSG SIZE  rcvd: 119
HOST信息:
Host 148.148.209.134.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 148.148.209.134.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
196.52.43.87 attack
 TCP (SYN) 196.52.43.87:52476 -> port 990, len 44
2020-07-07 14:06:39
142.147.110.220 attackbots
Automatic report - Banned IP Access
2020-07-07 14:23:33
122.51.85.227 attack
Jul  7 05:54:51 debian-2gb-nbg1-2 kernel: \[16352696.763065\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=122.51.85.227 DST=195.201.40.59 LEN=52 TOS=0x00 PREC=0x00 TTL=111 ID=32168 DF PROTO=TCP SPT=52909 DPT=1433 WINDOW=8192 RES=0x00 SYN URGP=0
2020-07-07 13:59:07
199.58.86.206 attack
20 attempts against mh-misbehave-ban on plane
2020-07-07 14:22:38
45.141.84.57 attack
2020-07-06 16:58:02 Reject access to port(s):3389 1 times a day
2020-07-07 14:17:13
14.249.129.191 attack
20/7/6@23:54:53: FAIL: Alarm-Network address from=14.249.129.191
20/7/6@23:54:53: FAIL: Alarm-Network address from=14.249.129.191
...
2020-07-07 13:59:57
95.255.14.141 attackspam
Jul  7 05:24:51 ip-172-31-62-245 sshd\[14437\]: Failed password for root from 95.255.14.141 port 44010 ssh2\
Jul  7 05:27:35 ip-172-31-62-245 sshd\[14486\]: Invalid user cache from 95.255.14.141\
Jul  7 05:27:37 ip-172-31-62-245 sshd\[14486\]: Failed password for invalid user cache from 95.255.14.141 port 40672 ssh2\
Jul  7 05:30:26 ip-172-31-62-245 sshd\[14529\]: Invalid user poliana from 95.255.14.141\
Jul  7 05:30:28 ip-172-31-62-245 sshd\[14529\]: Failed password for invalid user poliana from 95.255.14.141 port 37130 ssh2\
2020-07-07 14:26:58
252.204.183.93 attackbotsspam
CMS Bruteforce / WebApp Attack attempt
2020-07-07 14:24:13
193.32.161.149 attackspambots
SmallBizIT.US 7 packets to tcp(13033,13034,13035,51639,62002,62003,62004)
2020-07-07 14:25:14
3.17.141.16 attackbots
mue-Direct access to plugin not allowed
2020-07-07 13:56:01
200.143.184.150 attack
2020-07-07T08:22:15.152753afi-git.jinr.ru sshd[14880]: Failed password for git from 200.143.184.150 port 28286 ssh2
2020-07-07T08:25:47.778626afi-git.jinr.ru sshd[15617]: Invalid user postgres from 200.143.184.150 port 29523
2020-07-07T08:25:47.781935afi-git.jinr.ru sshd[15617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.143.184.150
2020-07-07T08:25:47.778626afi-git.jinr.ru sshd[15617]: Invalid user postgres from 200.143.184.150 port 29523
2020-07-07T08:25:49.678742afi-git.jinr.ru sshd[15617]: Failed password for invalid user postgres from 200.143.184.150 port 29523 ssh2
...
2020-07-07 14:04:51
139.170.150.251 attackspambots
$f2bV_matches
2020-07-07 14:17:58
45.4.14.241 attackbots
port scan and connect, tcp 23 (telnet)
2020-07-07 14:07:58
159.65.5.164 attackspambots
Jul  7 08:06:31 h1745522 sshd[22988]: Invalid user eam from 159.65.5.164 port 33724
Jul  7 08:06:31 h1745522 sshd[22988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.5.164
Jul  7 08:06:31 h1745522 sshd[22988]: Invalid user eam from 159.65.5.164 port 33724
Jul  7 08:06:33 h1745522 sshd[22988]: Failed password for invalid user eam from 159.65.5.164 port 33724 ssh2
Jul  7 08:09:51 h1745522 sshd[23310]: Invalid user dyy from 159.65.5.164 port 58190
Jul  7 08:09:51 h1745522 sshd[23310]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.5.164
Jul  7 08:09:51 h1745522 sshd[23310]: Invalid user dyy from 159.65.5.164 port 58190
Jul  7 08:09:53 h1745522 sshd[23310]: Failed password for invalid user dyy from 159.65.5.164 port 58190 ssh2
Jul  7 08:13:11 h1745522 sshd[23503]: Invalid user cisco from 159.65.5.164 port 54428
...
2020-07-07 14:27:47
222.186.175.216 attackbotsspam
2020-07-07T06:07:56.035828shield sshd\[575\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.216  user=root
2020-07-07T06:07:58.454099shield sshd\[575\]: Failed password for root from 222.186.175.216 port 18362 ssh2
2020-07-07T06:08:01.897718shield sshd\[575\]: Failed password for root from 222.186.175.216 port 18362 ssh2
2020-07-07T06:08:05.226831shield sshd\[575\]: Failed password for root from 222.186.175.216 port 18362 ssh2
2020-07-07T06:08:08.301456shield sshd\[575\]: Failed password for root from 222.186.175.216 port 18362 ssh2
2020-07-07 14:12:01

最近上报的IP列表

135.0.169.33 195.69.0.238 125.183.249.167 223.120.116.224
123.20.16.71 3.120.163.162 111.251.182.143 125.209.169.15
120.145.158.121 177.166.55.116 99.128.202.37 117.7.26.68
41.27.34.215 112.163.254.66 80.226.59.4 166.152.195.142
1.249.13.7 206.189.131.211 151.83.37.182 63.157.156.102