134.209.19.132

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United Kingdom

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	2019-05-08 09:28:52 H=bamboozle.bridgecoaa.com \(scarce.renodairyfarm.icu\) \[134.209.19.132\]:38161 I=\[193.107.88.166\]:25 sender verify fail for \: Unrouteable address 2019-05-08 09:28:52 H=bamboozle.bridgecoaa.com \(scarce.renodairyfarm.icu\) \[134.209.19.132\]:38161 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-05-08 09:31:40 H=bamboozle.bridgecoaa.com \(photocopy.renodairyfarm.icu\) \[134.209.19.132\]:50248 I=\[193.107.90.29\]:25 sender verify fail for \: Unrouteable address 2019-05-08 09:31:40 H=bamboozle.bridgecoaa.com \(photocopy.renodairyfarm.icu\) \[134.209.19.132\]:50248 I=\[193.107.90.29\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-02-05 03:30:27

类型

评论内容

时间

attackspambots

2019-05-08 09:28:52 H=bamboozle.bridgecoaa.com \(scarce.renodairyfarm.icu\) \[134.209.19.132\]:38161 I=\[193.107.88.166\]:25 sender verify fail for \: Unrouteable address
2019-05-08 09:28:52 H=bamboozle.bridgecoaa.com \(scarce.renodairyfarm.icu\) \[134.209.19.132\]:38161 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-05-08 09:31:40 H=bamboozle.bridgecoaa.com \(photocopy.renodairyfarm.icu\) \[134.209.19.132\]:50248 I=\[193.107.90.29\]:25 sender verify fail for \: Unrouteable address
2019-05-08 09:31:40 H=bamboozle.bridgecoaa.com \(photocopy.renodairyfarm.icu\) \[134.209.19.132\]:50248 I=\[193.107.90.29\]:25 F=\ rejected RCPT \: Sender verify failed
...

2020-02-05 03:30:27

相同子网IP讨论:

IP	类型	评论内容	时间
134.209.191.184	attack	Oct 10 17:23:00 mail sshd[32523]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.191.184 Oct 10 17:23:03 mail sshd[32523]: Failed password for invalid user developer from 134.209.191.184 port 50192 ssh2 ...	2020-10-11 00:37:35
134.209.191.184	attackbotsspam	Lines containing failures of 134.209.191.184 Oct 7 22:00:40 shared02 sshd[5189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.191.184 user=r.r Oct 7 22:00:42 shared02 sshd[5189]: Failed password for r.r from 134.209.191.184 port 35696 ssh2 Oct 7 22:00:42 shared02 sshd[5189]: Received disconnect from 134.209.191.184 port 35696:11: Bye Bye [preauth] Oct 7 22:00:42 shared02 sshd[5189]: Disconnected from authenticating user r.r 134.209.191.184 port 35696 [preauth] Oct 7 22:09:46 shared02 sshd[7862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.191.184 user=r.r Oct 7 22:09:48 shared02 sshd[7862]: Failed password for r.r from 134.209.191.184 port 48704 ssh2 Oct 7 22:09:48 shared02 sshd[7862]: Received disconnect from 134.209.191.184 port 48704:11: Bye Bye [preauth] Oct 7 22:09:48 shared02 sshd[7862]: Disconnected from authenticating user r.r 134.209.191.184 port 4870........ ------------------------------	2020-10-10 16:26:14
134.209.191.184	attackspambots	Oct 9 22:53:52 s1 sshd\[15995\]: Invalid user administrator from 134.209.191.184 port 43420 Oct 9 22:53:52 s1 sshd\[15995\]: Failed password for invalid user administrator from 134.209.191.184 port 43420 ssh2 Oct 9 22:56:56 s1 sshd\[16954\]: Invalid user fish from 134.209.191.184 port 48006 Oct 9 22:56:56 s1 sshd\[16954\]: Failed password for invalid user fish from 134.209.191.184 port 48006 ssh2 Oct 9 23:00:05 s1 sshd\[17365\]: User root from 134.209.191.184 not allowed because not listed in AllowUsers Oct 9 23:00:05 s1 sshd\[17365\]: Failed password for invalid user root from 134.209.191.184 port 52580 ssh2 ...	2020-10-10 05:14:12
134.209.191.184	attack	Lines containing failures of 134.209.191.184 Oct 7 22:00:40 shared02 sshd[5189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.191.184 user=r.r Oct 7 22:00:42 shared02 sshd[5189]: Failed password for r.r from 134.209.191.184 port 35696 ssh2 Oct 7 22:00:42 shared02 sshd[5189]: Received disconnect from 134.209.191.184 port 35696:11: Bye Bye [preauth] Oct 7 22:00:42 shared02 sshd[5189]: Disconnected from authenticating user r.r 134.209.191.184 port 35696 [preauth] Oct 7 22:09:46 shared02 sshd[7862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.191.184 user=r.r Oct 7 22:09:48 shared02 sshd[7862]: Failed password for r.r from 134.209.191.184 port 48704 ssh2 Oct 7 22:09:48 shared02 sshd[7862]: Received disconnect from 134.209.191.184 port 48704:11: Bye Bye [preauth] Oct 7 22:09:48 shared02 sshd[7862]: Disconnected from authenticating user r.r 134.209.191.184 port 4870........ ------------------------------	2020-10-09 21:15:40
134.209.191.184	attackspam	Oct 9 04:55:37 web8 sshd\[14001\]: Invalid user user from 134.209.191.184 Oct 9 04:55:37 web8 sshd\[14001\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.191.184 Oct 9 04:55:39 web8 sshd\[14001\]: Failed password for invalid user user from 134.209.191.184 port 49796 ssh2 Oct 9 04:59:32 web8 sshd\[15752\]: Invalid user weblogic from 134.209.191.184 Oct 9 04:59:32 web8 sshd\[15752\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.191.184	2020-10-09 13:03:59
134.209.194.208	attackspambots	Invalid user pc from 134.209.194.208 port 43752	2020-08-20 14:50:44
134.209.194.208	attackspam	Aug 14 05:29:22 firewall sshd[26477]: Failed password for root from 134.209.194.208 port 36092 ssh2 Aug 14 05:33:10 firewall sshd[26559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.194.208 user=root Aug 14 05:33:12 firewall sshd[26559]: Failed password for root from 134.209.194.208 port 45362 ssh2 ...	2020-08-14 18:13:26
134.209.197.218	attack	$f2bV_matches	2020-07-27 23:27:02
134.209.197.218	attackspam	Jul 20 19:06:17 ny01 sshd[1181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.197.218 Jul 20 19:06:19 ny01 sshd[1181]: Failed password for invalid user deploy from 134.209.197.218 port 16438 ssh2 Jul 20 19:10:10 ny01 sshd[1681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.197.218	2020-07-21 07:38:44
134.209.194.208	attackspam	$f2bV_matches	2020-07-21 01:14:54
134.209.197.218	attack	Jul 18 23:45:13 lukav-desktop sshd\[19484\]: Invalid user zxc from 134.209.197.218 Jul 18 23:45:13 lukav-desktop sshd\[19484\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.197.218 Jul 18 23:45:16 lukav-desktop sshd\[19484\]: Failed password for invalid user zxc from 134.209.197.218 port 14408 ssh2 Jul 18 23:49:06 lukav-desktop sshd\[19588\]: Invalid user manon from 134.209.197.218 Jul 18 23:49:06 lukav-desktop sshd\[19588\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.197.218	2020-07-19 04:50:56
134.209.194.208	attackspam	Jul 14 15:29:18 debian-2gb-nbg1-2 kernel: \[16991927.823834\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=134.209.194.208 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=34609 PROTO=TCP SPT=44253 DPT=18389 WINDOW=1024 RES=0x00 SYN URGP=0	2020-07-14 21:52:47
134.209.197.218	attackbots	Jul 9 16:45:32 xeon sshd[13916]: Failed password for invalid user songlin from 134.209.197.218 port 11458 ssh2	2020-07-09 23:04:12
134.209.197.218	attackspambots	$f2bV_matches	2020-07-06 14:47:49
134.209.197.218	attackbots	110. On Jul 4 2020 experienced a Brute Force SSH login attempt -> 1 unique times by 134.209.197.218.	2020-07-05 07:54:10

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.209.19.132
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38098
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.209.19.132.			IN	A

;; AUTHORITY SECTION:
.			133	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020401 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 03:30:19 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 132.19.209.134.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 132.19.209.134.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
51.75.202.218	attack	Aug 6 15:15:35 vps639187 sshd\[3206\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.202.218 user=root Aug 6 15:15:37 vps639187 sshd\[3206\]: Failed password for root from 51.75.202.218 port 34220 ssh2 Aug 6 15:19:52 vps639187 sshd\[3296\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.202.218 user=root ...	2020-08-07 03:41:42
47.251.38.185	attackbotsspam	/html/gdpr/en.inc.php	2020-08-07 03:49:11
139.59.14.91	attackspam	WordPress brute-force	2020-08-07 03:40:03
51.77.213.136	attackspam	Aug 6 13:39:02 localhost sshd[110478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.ip-51-77-213.eu user=root Aug 6 13:39:04 localhost sshd[110478]: Failed password for root from 51.77.213.136 port 36612 ssh2 Aug 6 13:43:08 localhost sshd[110938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.ip-51-77-213.eu user=root Aug 6 13:43:10 localhost sshd[110938]: Failed password for root from 51.77.213.136 port 48092 ssh2 Aug 6 13:47:21 localhost sshd[111457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=136.ip-51-77-213.eu user=root Aug 6 13:47:23 localhost sshd[111457]: Failed password for root from 51.77.213.136 port 59574 ssh2 ...	2020-08-07 03:18:24
197.50.250.124	attack	1596720012 - 08/06/2020 15:20:12 Host: 197.50.250.124/197.50.250.124 Port: 445 TCP Blocked	2020-08-07 03:23:40
138.197.25.187	attackspambots	Aug 6 16:22:22 server sshd[1584]: Failed password for root from 138.197.25.187 port 50852 ssh2 Aug 6 16:26:25 server sshd[7363]: Failed password for root from 138.197.25.187 port 60580 ssh2 Aug 6 16:30:26 server sshd[14396]: Failed password for root from 138.197.25.187 port 42076 ssh2	2020-08-07 03:40:55
218.92.0.208	attack	Aug 6 21:15:56 eventyay sshd[15846]: Failed password for root from 218.92.0.208 port 50817 ssh2 Aug 6 21:17:08 eventyay sshd[15878]: Failed password for root from 218.92.0.208 port 16474 ssh2 ...	2020-08-07 03:22:05
178.62.0.215	attackbots	$f2bV_matches	2020-08-07 03:44:57
86.38.174.217	attackspambots	MAIL: User Login Brute Force Attempt	2020-08-07 03:24:41
106.55.151.227	attack	Aug 6 17:42:32 lnxmail61 sshd[32049]: Failed password for root from 106.55.151.227 port 47308 ssh2 Aug 6 17:42:32 lnxmail61 sshd[32049]: Failed password for root from 106.55.151.227 port 47308 ssh2	2020-08-07 03:42:31
94.23.38.191	attack	Too many connections or unauthorized access detected from Arctic banned ip	2020-08-07 03:29:05
193.27.228.220	attack	Aug 6 19:40:31 debian-2gb-nbg1-2 kernel: \[18994086.010401\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=193.27.228.220 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=18059 PROTO=TCP SPT=50583 DPT=3450 WINDOW=1024 RES=0x00 SYN URGP=0	2020-08-07 03:17:33
5.62.20.36	attackspam	sww-(visforms) : try to access forms...	2020-08-07 03:21:39
185.74.5.156	attackspam	Too many connections or unauthorized access detected from Arctic banned ip	2020-08-07 03:14:58
85.248.227.164	attack	GET /wp-config.php.orig HTTP/1.1	2020-08-07 03:47:46

最近上报的IP列表

112.50.130.105	183.80.0.0	239.35.183.94	138.122.146.162
77.44.54.18	2.85.96.210	40.91.180.81	93.214.45.118
1.127.28.118	62.253.81.70	141.119.167.213	132.81.250.23
192.223.125.20	217.60.81.248	240.109.157.168	123.183.90.119
87.186.109.191	101.143.159.108	174.95.232.83	134.209.148.227