134.209.205.14

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Jun 28 22:38:06 vdcadm1 sshd[7339]: User r.r from 134.209.205.14 not allowed because listed in DenyUsers Jun 28 22:38:06 vdcadm1 sshd[7340]: Received disconnect from 134.209.205.14: 11: Bye Bye Jun 28 22:38:06 vdcadm1 sshd[7342]: Invalid user admin from 134.209.205.14 Jun 28 22:38:06 vdcadm1 sshd[7343]: Received disconnect from 134.209.205.14: 11: Bye Bye Jun 28 22:38:06 vdcadm1 sshd[7344]: Invalid user admin from 134.209.205.14 Jun 28 22:38:07 vdcadm1 sshd[7345]: Received disconnect from 134.209.205.14: 11: Bye Bye Jun 28 22:38:07 vdcadm1 sshd[7346]: Invalid user user from 134.209.205.14 Jun 28 22:38:07 vdcadm1 sshd[7347]: Received disconnect from 134.209.205.14: 11: Bye Bye Jun 28 22:38:07 vdcadm1 sshd[7348]: Invalid user ubnt from 134.209.205.14 Jun 28 22:38:07 vdcadm1 sshd[7349]: Received disconnect from 134.209.205.14: 11: Bye Bye Jun 28 22:38:07 vdcadm1 sshd[7350]: Invalid user admin from 134.209.205.14 Jun 28 22:38:07 vdcadm1 sshd[7351]: Received disconnect from ........ -------------------------------	2019-07-01 11:25:33

类型

评论内容

时间

attack

Jun 28 22:38:06 vdcadm1 sshd[7339]: User r.r from 134.209.205.14 not allowed because listed in DenyUsers
Jun 28 22:38:06 vdcadm1 sshd[7340]: Received disconnect from 134.209.205.14: 11: Bye Bye
Jun 28 22:38:06 vdcadm1 sshd[7342]: Invalid user admin from 134.209.205.14
Jun 28 22:38:06 vdcadm1 sshd[7343]: Received disconnect from 134.209.205.14: 11: Bye Bye
Jun 28 22:38:06 vdcadm1 sshd[7344]: Invalid user admin from 134.209.205.14
Jun 28 22:38:07 vdcadm1 sshd[7345]: Received disconnect from 134.209.205.14: 11: Bye Bye
Jun 28 22:38:07 vdcadm1 sshd[7346]: Invalid user user from 134.209.205.14
Jun 28 22:38:07 vdcadm1 sshd[7347]: Received disconnect from 134.209.205.14: 11: Bye Bye
Jun 28 22:38:07 vdcadm1 sshd[7348]: Invalid user ubnt from 134.209.205.14
Jun 28 22:38:07 vdcadm1 sshd[7349]: Received disconnect from 134.209.205.14: 11: Bye Bye
Jun 28 22:38:07 vdcadm1 sshd[7350]: Invalid user admin from 134.209.205.14
Jun 28 22:38:07 vdcadm1 sshd[7351]: Received disconnect from ........
-------------------------------

2019-07-01 11:25:33

相同子网IP讨论:

IP	类型	评论内容	时间
134.209.205.254	attack	Jan 13 22:56:46 ArkNodeAT sshd\[12332\]: Invalid user dev from 134.209.205.254 Jan 13 22:56:46 ArkNodeAT sshd\[12332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.205.254 Jan 13 22:56:47 ArkNodeAT sshd\[12332\]: Failed password for invalid user dev from 134.209.205.254 port 50846 ssh2	2020-01-14 06:03:56

类型

评论内容

时间

134.209.205.254

attack

Jan 13 22:56:46 ArkNodeAT sshd\[12332\]: Invalid user dev from 134.209.205.254
Jan 13 22:56:46 ArkNodeAT sshd\[12332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.205.254
Jan 13 22:56:47 ArkNodeAT sshd\[12332\]: Failed password for invalid user dev from 134.209.205.254 port 50846 ssh2

2020-01-14 06:03:56

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.209.205.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4159
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.209.205.14.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019063001 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 01 11:25:24 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 14.205.209.134.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 14.205.209.134.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
121.143.203.201	attack	Invalid user pi from 121.143.203.201 port 39918	2020-05-29 02:33:43
106.12.48.216	attackbotsspam	2020-05-27 14:41:50 server sshd[61577]: Failed password for invalid user root from 106.12.48.216 port 45738 ssh2	2020-05-29 02:13:59
45.95.168.207	attack	Invalid user oracle from 45.95.168.207 port 52850	2020-05-29 02:41:26
101.89.150.171	attackspambots	May 28 19:39:01 PorscheCustomer sshd[19723]: Failed password for root from 101.89.150.171 port 48616 ssh2 May 28 19:40:25 PorscheCustomer sshd[19770]: Failed password for root from 101.89.150.171 port 35930 ssh2 ...	2020-05-29 02:37:02
103.115.104.229	attackbotsspam	(sshd) Failed SSH login from 103.115.104.229 (ID/Indonesia/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 28 17:28:09 ubnt-55d23 sshd[14012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.115.104.229 user=root May 28 17:28:12 ubnt-55d23 sshd[14012]: Failed password for root from 103.115.104.229 port 42718 ssh2	2020-05-29 02:36:46
132.232.29.131	attack	May 28 19:34:38 ArkNodeAT sshd\[14830\]: Invalid user student06 from 132.232.29.131 May 28 19:34:38 ArkNodeAT sshd\[14830\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.29.131 May 28 19:34:40 ArkNodeAT sshd\[14830\]: Failed password for invalid user student06 from 132.232.29.131 port 44596 ssh2	2020-05-29 02:08:18
51.161.8.70	attackbots	May 28 13:01:19 Tower sshd[14824]: Connection from 51.161.8.70 port 38542 on 192.168.10.220 port 22 rdomain "" May 28 13:01:21 Tower sshd[14824]: Failed password for root from 51.161.8.70 port 38542 ssh2 May 28 13:01:21 Tower sshd[14824]: Received disconnect from 51.161.8.70 port 38542:11: Bye Bye [preauth] May 28 13:01:21 Tower sshd[14824]: Disconnected from authenticating user root 51.161.8.70 port 38542 [preauth]	2020-05-29 02:18:53
45.253.26.216	attackspambots	Invalid user bbuser from 45.253.26.216 port 48252	2020-05-29 02:22:15
54.36.163.142	attackspam	prod6 ...	2020-05-29 02:17:58
118.70.185.229	attack	May 28 15:27:58 serwer sshd\[15186\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.185.229 user=root May 28 15:28:00 serwer sshd\[15186\]: Failed password for root from 118.70.185.229 port 49278 ssh2 May 28 15:32:18 serwer sshd\[15826\]: User news from 118.70.185.229 not allowed because not listed in AllowUsers May 28 15:32:18 serwer sshd\[15826\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.185.229 user=news ...	2020-05-29 02:10:24
218.78.92.29	attackbotsspam	Automatic report BANNED IP	2020-05-29 02:42:44
212.83.56.182	attack	Invalid user oracle from 212.83.56.182 port 49060	2020-05-29 02:27:10
201.249.169.210	attackspambots	2020-05-28T13:48:41.9435081495-001 sshd[50102]: Failed password for root from 201.249.169.210 port 39168 ssh2 2020-05-28T13:52:18.0118091495-001 sshd[50274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mat-03-082.mat.ras.cantv.net user=root 2020-05-28T13:52:19.5200981495-001 sshd[50274]: Failed password for root from 201.249.169.210 port 44554 ssh2 2020-05-28T13:56:07.6011881495-001 sshd[50425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=mat-03-082.mat.ras.cantv.net user=root 2020-05-28T13:56:10.3527361495-001 sshd[50425]: Failed password for root from 201.249.169.210 port 49936 ssh2 2020-05-28T13:59:48.7337511495-001 sshd[50597]: Invalid user bong from 201.249.169.210 port 55320 ...	2020-05-29 02:43:37
194.9.70.18	attackbots	TCP (SYN) 194.9.70.18:48591 -> port 22, len 40	2020-05-29 02:44:56
210.5.151.245	attackspam	"fail2ban match"	2020-05-29 02:43:14

最近上报的IP列表

113.141.70.249	193.42.108.88	45.117.80.90	185.150.190.198
237.184.19.78	106.12.206.253	90.216.107.73	173.212.197.158
191.240.24.114	2604:2000:e089:d900:c583:7ff2:4cb1:20a9	70.48.34.12	66.188.100.139
62.179.194.208	62.213.109.76	2403:6200:8946:f220:5cf8:4086:e7a1:f86a	93.158.129.135
36.8.197.154	28.192.82.76	54.121.227.120	111.17.73.192