134.209.20.68 - IPInfo

基本信息:

城市(city): London

省份(region): England

国家(country): United Kingdom

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): DigitalOcean, LLC

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Brute force SMTP login attempted. ...	2019-08-10 05:32:39
attackbotsspam	2019-08-02T02:25:48.486394centos sshd\[27547\]: Invalid user w from 134.209.20.68 port 41524 2019-08-02T02:25:48.490810centos sshd\[27547\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.20.68 2019-08-02T02:25:50.603043centos sshd\[27547\]: Failed password for invalid user w from 134.209.20.68 port 41524 ssh2	2019-08-02 08:54:10
attack	Aug 1 14:45:41 vpn01 sshd\[13936\]: Invalid user pad from 134.209.20.68 Aug 1 14:45:41 vpn01 sshd\[13936\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.20.68 Aug 1 14:45:43 vpn01 sshd\[13936\]: Failed password for invalid user pad from 134.209.20.68 port 56992 ssh2	2019-08-01 21:05:56
attackspam	Invalid user maria from 134.209.20.68 port 37586	2019-07-28 04:37:12
attackspam	Jul 23 11:15:44 MainVPS sshd[24035]: Invalid user auditor from 134.209.20.68 port 52526 Jul 23 11:15:44 MainVPS sshd[24035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.20.68 Jul 23 11:15:44 MainVPS sshd[24035]: Invalid user auditor from 134.209.20.68 port 52526 Jul 23 11:15:46 MainVPS sshd[24035]: Failed password for invalid user auditor from 134.209.20.68 port 52526 ssh2 Jul 23 11:21:29 MainVPS sshd[24441]: Invalid user diana from 134.209.20.68 port 48876 ...	2019-07-23 18:36:50
attackbotsspam	2019-07-19T09:55:15.334464abusebot.cloudsearch.cf sshd\[16188\]: Invalid user info from 134.209.20.68 port 56280	2019-07-19 18:27:19
attackbotsspam	2019-07-18T19:17:27.025030abusebot.cloudsearch.cf sshd\[6276\]: Invalid user rita from 134.209.20.68 port 49182	2019-07-19 03:40:40
attack	Jul 6 11:40:49 nextcloud sshd\[27013\]: Invalid user snake from 134.209.20.68 Jul 6 11:40:49 nextcloud sshd\[27013\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.20.68 Jul 6 11:40:52 nextcloud sshd\[27013\]: Failed password for invalid user snake from 134.209.20.68 port 33722 ssh2 ...	2019-07-06 19:46:20
attack	Jul 5 21:17:06 dev sshd\[368\]: Invalid user trinity from 134.209.20.68 port 36488 Jul 5 21:17:06 dev sshd\[368\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.20.68 ...	2019-07-06 03:22:28
attackspam	Jul 3 17:12:25 srv-4 sshd\[17381\]: Invalid user florent from 134.209.20.68 Jul 3 17:12:25 srv-4 sshd\[17381\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.20.68 Jul 3 17:12:27 srv-4 sshd\[17381\]: Failed password for invalid user florent from 134.209.20.68 port 60104 ssh2 ...	2019-07-04 02:23:40
attackbots	Jul 3 01:44:32 mail sshd\[18485\]: Failed password for invalid user debian from 134.209.20.68 port 41064 ssh2 Jul 3 02:00:45 mail sshd\[18820\]: Invalid user jiu from 134.209.20.68 port 44554 ...	2019-07-03 10:04:53
attackspambots	Jun 27 17:23:00 pornomens sshd\[7160\]: Invalid user garrysmod from 134.209.20.68 port 39634 Jun 27 17:23:00 pornomens sshd\[7160\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.20.68 Jun 27 17:23:02 pornomens sshd\[7160\]: Failed password for invalid user garrysmod from 134.209.20.68 port 39634 ssh2 ...	2019-06-27 23:29:39

相同子网IP讨论:

IP	类型	评论内容	时间
134.209.207.188	spambotsattack	ET DROP Dshield Block Listed Source group 1 - port: 8080 proto: tcp cat: Misc Attackbytes: 60	2023-02-18 16:14:41
134.209.204.124	attackbots	SSH Bruteforce attack	2020-08-23 07:56:22
134.209.208.159	attackbots	Port scan: Attack repeated for 24 hours	2020-06-21 00:54:32
134.209.201.23	attack	3423/tcp 2974/tcp 726/tcp... [2020-06-01/19]44pkt,15pt.(tcp)	2020-06-20 05:41:48
134.209.208.159	attackspambots	TCP (SYN) 134.209.208.159:46179 -> port 7425, len 44	2020-06-15 15:37:35
134.209.208.159	attackbotsspam	firewall-block, port(s): 25804/tcp	2020-06-13 15:11:57
134.209.208.159	attackspam	May 29 22:50:47 debian-2gb-nbg1-2 kernel: \[13044230.816351\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=134.209.208.159 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=6339 PROTO=TCP SPT=58161 DPT=3540 WINDOW=1024 RES=0x00 SYN URGP=0	2020-05-30 05:16:17
134.209.208.159	attack	Port scan: Attack repeated for 24 hours	2020-05-03 01:12:31
134.209.208.159	attackbotsspam	firewall-block, port(s): 22225/tcp	2020-04-25 05:33:25
134.209.208.159	attack	Port scan(s) denied	2020-04-20 16:28:29
134.209.208.159	attackbotsspam	firewall-block, port(s): 15661/tcp	2020-04-13 06:33:44
134.209.203.34	attack	SSH/22 MH Probe, BF, Hack -	2020-02-12 23:47:18
134.209.203.238	attackbotsspam	WordPress wp-login brute force :: 134.209.203.238 0.112 BYPASS [17/Jan/2020:13:00:55 0000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 2287 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-01-18 01:05:40
134.209.208.91	attack	IP: 134.209.208.91 Ports affected Simple Mail Transfer (25) Abuse Confidence rating 16% Found in DNSBL('s) ASN Details AS14061 DigitalOcean LLC United States (US) CIDR 134.209.0.0/16 Log Date: 16/01/2020 11:43:21 AM UTC	2020-01-16 20:09:58
134.209.205.254	attack	Jan 13 22:56:46 ArkNodeAT sshd\[12332\]: Invalid user dev from 134.209.205.254 Jan 13 22:56:46 ArkNodeAT sshd\[12332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.205.254 Jan 13 22:56:47 ArkNodeAT sshd\[12332\]: Failed password for invalid user dev from 134.209.205.254 port 50846 ssh2	2020-01-14 06:03:56

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.209.20.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57485
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.209.20.68.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019050300 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Fri May 03 21:01:43 +08 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 68.20.209.134.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 68.20.209.134.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
182.150.57.34	attackspam	Brute%20Force%20SSH	2020-10-09 20:12:23
162.158.159.239	attack	This IP has been trying to break into my site	2020-10-09 20:00:44
189.211.183.151	attackbots	SSH brute-force attempt	2020-10-09 20:02:10
165.22.215.99	attackspam	2020-10-09T09:58:17.407794dmca.cloudsearch.cf sshd[21560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.215.99 user=root 2020-10-09T09:58:19.436378dmca.cloudsearch.cf sshd[21560]: Failed password for root from 165.22.215.99 port 55028 ssh2 2020-10-09T10:01:47.639536dmca.cloudsearch.cf sshd[21635]: Invalid user apache1 from 165.22.215.99 port 52518 2020-10-09T10:01:47.644624dmca.cloudsearch.cf sshd[21635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.215.99 2020-10-09T10:01:47.639536dmca.cloudsearch.cf sshd[21635]: Invalid user apache1 from 165.22.215.99 port 52518 2020-10-09T10:01:49.502569dmca.cloudsearch.cf sshd[21635]: Failed password for invalid user apache1 from 165.22.215.99 port 52518 ssh2 2020-10-09T10:05:31.463326dmca.cloudsearch.cf sshd[21738]: Invalid user br from 165.22.215.99 port 50018 ...	2020-10-09 20:14:01
103.133.109.40	attackspam	Unauthorized connection attempt from IP address 103.133.109.40	2020-10-09 20:01:22
190.128.171.250	attack	Oct 9 08:17:03 pve1 sshd[2895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.128.171.250 Oct 9 08:17:06 pve1 sshd[2895]: Failed password for invalid user school from 190.128.171.250 port 50337 ssh2 ...	2020-10-09 19:55:35
46.187.1.37	attack	Unauthorized connection attempt from IP address 46.187.1.37 on Port 445(SMB)	2020-10-09 19:59:42
50.234.173.102	attackbotsspam	[2020-10-09 07:04:23] NOTICE[1182] chan_sip.c: Registration from '' failed for '50.234.173.102:46409' - Wrong password [2020-10-09 07:04:23] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-09T07:04:23.101-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2413",SessionID="0x7f22f840f098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/50.234.173.102/46409",Challenge="42a66a63",ReceivedChallenge="42a66a63",ReceivedHash="585e0298238020ca64659a0c2031703e" [2020-10-09 07:05:14] NOTICE[1182] chan_sip.c: Registration from '' failed for '50.234.173.102:38179' - Wrong password [2020-10-09 07:05:14] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-09T07:05:14.212-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="899342825",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/ ...	2020-10-09 20:04:03
188.163.109.153	attack	0,31-02/03 [bc01/m36] PostRequest-Spammer scoring: Durban01	2020-10-09 20:16:26
62.234.6.147	attack	2020-10-09T13:34:48.790595cyberdyne sshd[1708733]: Invalid user testman from 62.234.6.147 port 33320 2020-10-09T13:34:50.829197cyberdyne sshd[1708733]: Failed password for invalid user testman from 62.234.6.147 port 33320 ssh2 2020-10-09T13:39:43.926568cyberdyne sshd[1709600]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.6.147 user=root 2020-10-09T13:39:45.788730cyberdyne sshd[1709600]: Failed password for root from 62.234.6.147 port 38098 ssh2 ...	2020-10-09 19:51:32
106.13.60.222	attackbots	Oct 9 06:29:17 lnxmysql61 sshd[14894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.60.222	2020-10-09 20:06:21
5.188.84.115	attackbotsspam	0,39-01/02 [bc01/m12] PostRequest-Spammer scoring: brussels	2020-10-09 19:53:11
200.150.77.93	attack	Oct 9 11:09:58 pornomens sshd\[24767\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.150.77.93 user=root Oct 9 11:10:00 pornomens sshd\[24767\]: Failed password for root from 200.150.77.93 port 44403 ssh2 Oct 9 11:14:12 pornomens sshd\[24831\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.150.77.93 user=root ...	2020-10-09 20:20:50
202.179.76.187	attack	Brute%20Force%20SSH	2020-10-09 19:47:23
106.13.228.21	attack	Invalid user wwwadmin from 106.13.228.21 port 33776	2020-10-09 20:21:22

最近上报的IP列表

171.14.171.212	185.165.120.14	79.186.238.156	77.10.115.165
79.137.69.130	77.107.41.82	32.186.176.61	194.219.184.2
37.131.168.73	189.13.53.108	158.238.20.233	106.15.130.249
13.216.32.62	84.167.221.203	223.197.223.103	147.128.206.191
112.232.132.101	128.250.12.124	185.114.23.244	55.165.125.70