必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Bengaluru

省份(region): Karnataka

国家(country): India

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attackbots
Mar  2 15:19:57 xxxxxxx7446550 sshd[19084]: Invalid user postgres from 134.209.148.148
Mar  2 15:19:57 xxxxxxx7446550 sshd[19084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.148 
Mar  2 15:19:59 xxxxxxx7446550 sshd[19084]: Failed password for invalid user postgres from 134.209.148.148 port 50092 ssh2
Mar  2 15:19:59 xxxxxxx7446550 sshd[19085]: Received disconnect from 134.209.148.148: 11: Normal Shutdown
Mar  2 15:23:45 xxxxxxx7446550 sshd[19884]: Invalid user farbe-bfi1234 from 134.209.148.148
Mar  2 15:23:45 xxxxxxx7446550 sshd[19884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.148 
Mar  2 15:23:47 xxxxxxx7446550 sshd[19884]: Failed password for invalid user farbe-bfi1234 from 134.209.148.148 port 47848 ssh2
Mar  2 15:23:47 xxxxxxx7446550 sshd[19885]: Received disconnect from 134.209.148.148: 11: Normal Shutdown


........
-----------------------------------------------
https://www.blocklist.de/
2020-03-08 05:41:12
相同子网IP讨论:
IP 类型 评论内容 时间
134.209.148.107 attackbotsspam
Oct  6 18:51:56 router sshd[24181]: Failed password for root from 134.209.148.107 port 46336 ssh2
Oct  6 18:52:49 router sshd[24183]: Failed password for root from 134.209.148.107 port 56478 ssh2
...
2020-10-07 02:13:06
134.209.148.107 attackbotsspam
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-10-06 18:08:51
134.209.148.107 attackspambots
[N1.H1.VM1] Port Scanner Detected Blocked by UFW
2020-09-30 03:43:16
134.209.148.107 attackbotsspam
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-09-29 19:49:18
134.209.148.107 attackspambots
 TCP (SYN) 134.209.148.107:44843 -> port 24561, len 44
2020-09-11 23:00:06
134.209.148.107 attackspam
Port scan denied
2020-09-11 15:04:50
134.209.148.107 attack
13978/tcp 2841/tcp 19528/tcp...
[2020-07-10/09-10]190pkt,72pt.(tcp)
2020-09-11 07:17:31
134.209.148.107 attackspam
Aug 23 11:38:05 PorscheCustomer sshd[10368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107
Aug 23 11:38:07 PorscheCustomer sshd[10368]: Failed password for invalid user zn from 134.209.148.107 port 52346 ssh2
Aug 23 11:39:31 PorscheCustomer sshd[10404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107
...
2020-08-23 18:05:59
134.209.148.107 attack
TCP port : 25791
2020-08-22 18:49:24
134.209.148.107 attackspam
2020-08-19T16:48:15.283554server.mjenks.net sshd[3507142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107
2020-08-19T16:48:15.276367server.mjenks.net sshd[3507142]: Invalid user szd from 134.209.148.107 port 59392
2020-08-19T16:48:17.967383server.mjenks.net sshd[3507142]: Failed password for invalid user szd from 134.209.148.107 port 59392 ssh2
2020-08-19T16:52:17.263658server.mjenks.net sshd[3507575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107  user=root
2020-08-19T16:52:19.169542server.mjenks.net sshd[3507575]: Failed password for root from 134.209.148.107 port 38798 ssh2
...
2020-08-20 08:42:45
134.209.148.107 attackspambots
Aug 19 21:26:38 pornomens sshd\[26061\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107  user=root
Aug 19 21:26:40 pornomens sshd\[26061\]: Failed password for root from 134.209.148.107 port 40294 ssh2
Aug 19 21:33:27 pornomens sshd\[26112\]: Invalid user mort from 134.209.148.107 port 48678
Aug 19 21:33:27 pornomens sshd\[26112\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107
...
2020-08-20 03:39:40
134.209.148.107 attackspam
Aug 19 00:51:57 rotator sshd\[30371\]: Failed password for root from 134.209.148.107 port 48254 ssh2Aug 19 00:54:14 rotator sshd\[30389\]: Failed password for root from 134.209.148.107 port 55288 ssh2Aug 19 00:56:23 rotator sshd\[31160\]: Invalid user mee from 134.209.148.107Aug 19 00:56:25 rotator sshd\[31160\]: Failed password for invalid user mee from 134.209.148.107 port 34098 ssh2Aug 19 00:58:38 rotator sshd\[31169\]: Invalid user courses from 134.209.148.107Aug 19 00:58:40 rotator sshd\[31169\]: Failed password for invalid user courses from 134.209.148.107 port 41142 ssh2
...
2020-08-19 07:35:56
134.209.148.107 attackspambots
firewall-block, port(s): 13059/tcp
2020-08-15 02:48:55
134.209.148.107 attack
SSH Brute Force
2020-08-13 09:52:07
134.209.148.107 attackbotsspam
firewall-block, port(s): 16314/tcp
2020-08-08 16:28:09
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.209.148.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5360
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.209.148.148.		IN	A

;; AUTHORITY SECTION:
.			374	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020030701 1800 900 604800 86400

;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 08 05:41:09 CST 2020
;; MSG SIZE  rcvd: 119
HOST信息:
Host 148.148.209.134.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 148.148.209.134.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
185.151.242.91 attackbotsspam
Honeypot hit.
2020-01-23 21:12:30
142.93.251.1 attackspambots
Invalid user ftpuser from 142.93.251.1 port 52962
2020-01-23 21:22:29
51.38.80.104 attack
Unauthorized connection attempt detected from IP address 51.38.80.104 to port 2220 [J]
2020-01-23 21:04:27
211.159.150.10 attackspambots
"SSH brute force auth login attempt."
2020-01-23 21:33:50
220.120.106.254 attackbots
Unauthorized connection attempt detected from IP address 220.120.106.254 to port 2220 [J]
2020-01-23 20:54:32
95.249.180.196 attackbotsspam
"SSH brute force auth login attempt."
2020-01-23 21:08:22
222.186.175.147 attack
Jan 23 13:56:06 MK-Soft-VM6 sshd[15733]: Failed password for root from 222.186.175.147 port 45684 ssh2
Jan 23 13:56:10 MK-Soft-VM6 sshd[15733]: Failed password for root from 222.186.175.147 port 45684 ssh2
...
2020-01-23 20:59:23
47.15.182.238 attackspam
firewall-block, port(s): 8291/tcp
2020-01-23 21:07:03
106.75.105.223 attackspam
"SSH brute force auth login attempt."
2020-01-23 21:23:29
78.108.177.54 attack
TCP port 8080: Scan and connection
2020-01-23 20:55:58
198.57.151.178 attack
HTTP 503 XSS Attempt
2020-01-23 21:24:29
123.20.187.137 attackspambots
"SMTP brute force auth login attempt."
2020-01-23 20:55:26
101.91.242.119 attack
Unauthorized connection attempt detected from IP address 101.91.242.119 to port 2220 [J]
2020-01-23 21:34:56
200.84.120.144 attack
1579765792 - 01/23/2020 08:49:52 Host: 200.84.120.144/200.84.120.144 Port: 445 TCP Blocked
2020-01-23 21:31:40
59.61.166.46 attackspambots
Jan 23 13:15:11 www sshd\[62323\]: Invalid user oracle from 59.61.166.46Jan 23 13:15:12 www sshd\[62323\]: Failed password for invalid user oracle from 59.61.166.46 port 35200 ssh2Jan 23 13:17:21 www sshd\[62356\]: Failed password for root from 59.61.166.46 port 53760 ssh2
...
2020-01-23 21:27:42

最近上报的IP列表

135.0.169.33 195.69.0.238 125.183.249.167 223.120.116.224
123.20.16.71 3.120.163.162 111.251.182.143 125.209.169.15
120.145.158.121 177.166.55.116 99.128.202.37 117.7.26.68
41.27.34.215 112.163.254.66 80.226.59.4 166.152.195.142
1.249.13.7 206.189.131.211 151.83.37.182 63.157.156.102