134.209.6.158 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	2019-02-28 20:44:38 H=warlike.farzamlift.com \(useless.applecraftbw.icu\) \[134.209.6.158\]:55603 I=\[193.107.88.166\]:25 sender verify fail for \: Unrouteable address 2019-02-28 20:44:38 H=warlike.farzamlift.com \(useless.applecraftbw.icu\) \[134.209.6.158\]:55603 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-02-28 20:44:38 H=warlike.farzamlift.com \(fumbling.applecraftbw.icu\) \[134.209.6.158\]:54739 I=\[193.107.88.166\]:25 sender verify fail for \: Unrouteable address 2019-02-28 20:44:38 H=warlike.farzamlift.com \(fumbling.applecraftbw.icu\) \[134.209.6.158\]:54739 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-02-05 03:03:09

类型

评论内容

时间

attack

2019-02-28 20:44:38 H=warlike.farzamlift.com \(useless.applecraftbw.icu\) \[134.209.6.158\]:55603 I=\[193.107.88.166\]:25 sender verify fail for \: Unrouteable address
2019-02-28 20:44:38 H=warlike.farzamlift.com \(useless.applecraftbw.icu\) \[134.209.6.158\]:55603 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-02-28 20:44:38 H=warlike.farzamlift.com \(fumbling.applecraftbw.icu\) \[134.209.6.158\]:54739 I=\[193.107.88.166\]:25 sender verify fail for \: Unrouteable address
2019-02-28 20:44:38 H=warlike.farzamlift.com \(fumbling.applecraftbw.icu\) \[134.209.6.158\]:54739 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
...

2020-02-05 03:03:09

相同子网IP讨论:

IP	类型	评论内容	时间
134.209.63.140	attack	" "	2020-10-08 03:20:51
134.209.63.140	attackbots	bruteforce, ssh, scan port	2020-10-07 19:35:11
134.209.63.140	attackbots	TCP (SYN) 134.209.63.140:47573 -> port 27666, len 44	2020-09-11 01:45:29
134.209.63.140	attackbots	32123/tcp 13573/tcp 4566/tcp... [2020-07-10/09-10]466pkt,172pt.(tcp)	2020-09-10 17:06:11
134.209.63.140	attackbotsspam	TCP (SYN) 134.209.63.140:48449 -> port 13573, len 44	2020-09-10 07:39:52
134.209.63.140	attack	firewall-block, port(s): 13008/tcp	2020-08-27 20:56:00
134.209.63.140	attackbotsspam	Unauthorized connection attempt detected from IP address 134.209.63.140 to port 9404 [T]	2020-08-13 03:58:41
134.209.63.140	attackbotsspam	TCP ports : 8312 / 29972	2020-08-10 19:43:56
134.209.63.140	attack	SIP/5060 Probe, BF, Hack -	2020-08-04 16:48:44
134.209.63.140	attack	Jul 29 05:57:00 debian-2gb-nbg1-2 kernel: \[18253517.433330\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=134.209.63.140 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=5032 PROTO=TCP SPT=53393 DPT=17320 WINDOW=1024 RES=0x00 SYN URGP=0	2020-07-29 12:03:07
134.209.63.140	attackspambots	port scan and connect, tcp 4569 (iax2)	2020-07-28 14:42:28
134.209.63.140	attackbotsspam	Port scanning [3 denied]	2020-07-28 02:35:03
134.209.63.140	attackspam	Jul 25 05:54:41 debian-2gb-nbg1-2 kernel: \[17907798.620294\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=134.209.63.140 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=6127 PROTO=TCP SPT=43052 DPT=30408 WINDOW=1024 RES=0x00 SYN URGP=0	2020-07-25 13:22:43
134.209.63.140	attackbotsspam	07/22/2020-10:52:24.965878 134.209.63.140 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-07-22 23:30:59
134.209.63.140	attackspam	firewall-block, port(s): 22738/tcp	2020-07-10 05:55:05

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.209.6.158
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45103
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.209.6.158.			IN	A

;; AUTHORITY SECTION:
.			443	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020401 1800 900 604800 86400

;; Query time: 457 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 03:03:04 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 158.6.209.134.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 158.6.209.134.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
14.189.245.3	attackbotsspam	2019-06-21 10:41:38 1heF72-00072X-Ao SMTP connection from \(static.vnpt.vn\) \[14.189.245.3\]:33367 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-06-21 10:41:59 1heF7M-00072r-BI SMTP connection from \(static.vnpt.vn\) \[14.189.245.3\]:33480 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-06-21 10:42:10 1heF7Y-000737-GD SMTP connection from \(static.vnpt.vn\) \[14.189.245.3\]:33546 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-02-04 22:10:17
218.92.0.175	attackspambots	Feb 4 15:03:20 v22019058497090703 sshd[18057]: Failed password for root from 218.92.0.175 port 41971 ssh2 Feb 4 15:03:33 v22019058497090703 sshd[18057]: error: maximum authentication attempts exceeded for root from 218.92.0.175 port 41971 ssh2 [preauth] ...	2020-02-04 22:31:16
198.108.66.97	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-04 22:22:06
14.187.225.165	attackbots	2019-07-06 10:07:52 1hjfjb-0000cz-KY SMTP connection from \(static.vnpt.vn\) \[14.187.225.165\]:47070 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-06 10:08:01 1hjfjk-0000d7-Q6 SMTP connection from \(static.vnpt.vn\) \[14.187.225.165\]:47156 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-06 10:08:07 1hjfjq-0000dI-1t SMTP connection from \(static.vnpt.vn\) \[14.187.225.165\]:47205 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-02-04 22:15:05
185.156.73.57	attackbotsspam	" "	2020-02-04 22:23:37
222.186.180.142	attackspam	Unauthorized connection attempt detected from IP address 222.186.180.142 to port 22 [J]	2020-02-04 22:46:11
159.203.74.227	attackbots	Feb 4 15:05:57 silence02 sshd[23949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.74.227 Feb 4 15:05:59 silence02 sshd[23949]: Failed password for invalid user byuan from 159.203.74.227 port 34468 ssh2 Feb 4 15:09:16 silence02 sshd[24251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.74.227	2020-02-04 22:17:57
156.251.174.241	attackspambots	SSH brutforce	2020-02-04 22:16:36
198.108.66.96	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-04 22:26:53
71.6.146.185	attackspam	Honeypot hit.	2020-02-04 22:40:49
14.171.235.189	attackspam	2019-07-07 04:12:23 1hjwf8-0002eK-0c SMTP connection from \(static.vnpt.vn\) \[14.171.235.189\]:22144 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-07 04:12:43 1hjwfS-0002ei-5Q SMTP connection from \(static.vnpt.vn\) \[14.171.235.189\]:22261 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-07 04:12:58 1hjwfg-0002ey-TI SMTP connection from \(static.vnpt.vn\) \[14.171.235.189\]:22336 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-02-04 22:55:11
179.124.36.196	attack	Feb 4 04:41:30 hpm sshd\[3742\]: Invalid user percev from 179.124.36.196 Feb 4 04:41:30 hpm sshd\[3742\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.124.36.196 Feb 4 04:41:32 hpm sshd\[3742\]: Failed password for invalid user percev from 179.124.36.196 port 33969 ssh2 Feb 4 04:44:56 hpm sshd\[4209\]: Invalid user unix from 179.124.36.196 Feb 4 04:44:56 hpm sshd\[4209\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.124.36.196	2020-02-04 22:55:41
190.193.179.54	attackbots	Feb 4 14:53:05 grey postfix/smtpd\[10805\]: NOQUEUE: reject: RCPT from unknown\[190.193.179.54\]: 554 5.7.1 Service unavailable\; Client host \[190.193.179.54\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=190.193.179.54\; from=\ to=\ proto=ESMTP helo=\<54-179-193-190.cab.prima.net.ar\> ...	2020-02-04 22:10:41
14.171.191.235	attackspambots	2019-04-21 07:36:20 1hI59F-00027Z-DU SMTP connection from \(static.vnpt.vn\) \[14.171.191.235\]:33553 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-04-21 07:37:54 1hI5Al-00029M-AI SMTP connection from \(static.vnpt.vn\) \[14.171.191.235\]:33938 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-04-21 07:38:27 1hI5BH-0002A3-IG SMTP connection from \(static.vnpt.vn\) \[14.171.191.235\]:34051 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-02-04 22:56:17
14.192.149.178	attackspam	2020-01-24 23:06:50 1iv76H-0005co-VX SMTP connection from \(fn149-static178.fariya.com\) \[14.192.149.178\]:17910 I=\[193.107.88.166\]:25 closed by DROP in ACL 2020-01-24 23:06:55 1iv76M-0005cv-TW SMTP connection from \(fn149-static178.fariya.com\) \[14.192.149.178\]:17976 I=\[193.107.88.166\]:25 closed by DROP in ACL 2020-01-24 23:06:59 1iv76Q-0005d2-Uu SMTP connection from \(fn149-static178.fariya.com\) \[14.192.149.178\]:18035 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-02-04 22:09:45

最近上报的IP列表

92.11.250.129	134.209.27.242	58.186.113.110	134.209.27.206
84.229.158.138	134.209.27.203	134.209.27.20	134.209.26.88
101.161.27.87	107.115.179.84	46.176.134.167	134.209.26.78
134.209.26.76	92.118.38.57	134.209.26.178	134.209.19.73
81.17.246.102	42.113.4.172	134.209.19.184	134.209.19.132