必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): Santa Clara

省份(region): California

国家(country): United States

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): DigitalOcean, LLC

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
" "
2020-10-08 03:20:51
attackbots
bruteforce, ssh, scan port
2020-10-07 19:35:11
attackbots
 TCP (SYN) 134.209.63.140:47573 -> port 27666, len 44
2020-09-11 01:45:29
attackbots
32123/tcp 13573/tcp 4566/tcp...
[2020-07-10/09-10]466pkt,172pt.(tcp)
2020-09-10 17:06:11
attackbotsspam
 TCP (SYN) 134.209.63.140:48449 -> port 13573, len 44
2020-09-10 07:39:52
attack
firewall-block, port(s): 13008/tcp
2020-08-27 20:56:00
attackbotsspam
Unauthorized connection attempt detected from IP address 134.209.63.140 to port 9404 [T]
2020-08-13 03:58:41
attackbotsspam
TCP ports : 8312 / 29972
2020-08-10 19:43:56
attack
SIP/5060 Probe, BF, Hack -
2020-08-04 16:48:44
attack
Jul 29 05:57:00 debian-2gb-nbg1-2 kernel: \[18253517.433330\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=134.209.63.140 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=5032 PROTO=TCP SPT=53393 DPT=17320 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-29 12:03:07
attackspambots
port scan and connect, tcp 4569 (iax2)
2020-07-28 14:42:28
attackbotsspam
Port scanning [3 denied]
2020-07-28 02:35:03
attackspam
Jul 25 05:54:41 debian-2gb-nbg1-2 kernel: \[17907798.620294\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=134.209.63.140 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=6127 PROTO=TCP SPT=43052 DPT=30408 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-25 13:22:43
attackbotsspam
07/22/2020-10:52:24.965878 134.209.63.140 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-07-22 23:30:59
attackspam
firewall-block, port(s): 22738/tcp
2020-07-10 05:55:05
attack
 TCP (SYN) 134.209.63.140:53862 -> port 15728, len 44
2020-07-06 23:16:57
attackbotsspam
Unauthorized connection attempt detected from IP address 134.209.63.140 to port 8874 [T]
2020-06-24 17:33:34
attack
Multiport scan : 4 ports scanned 232 4186 14768 31475
2020-06-22 08:06:36
attackspambots
scans 2 times in preceeding hours on the ports (in chronological order) 16829 15215
2020-06-17 21:47:37
attackbotsspam
Jun 10 08:06:56 debian-2gb-nbg1-2 kernel: \[14027948.083591\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=134.209.63.140 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=59219 PROTO=TCP SPT=51544 DPT=31587 WINDOW=1024 RES=0x00 SYN URGP=0
2020-06-10 16:20:53
attackbotsspam
Port Scan detected!
...
2020-05-31 23:24:27
attack
firewall-block, port(s): 14606/tcp
2020-05-21 23:56:39
attack
firewall-block, port(s): 8647/tcp
2020-05-16 15:02:24
attackbots
SSH Brute Force
2020-05-16 03:04:11
attackbotsspam
26470/tcp 18616/tcp 26672/tcp...
[2020-03-21/05-06]246pkt,85pt.(tcp)
2020-05-07 01:59:29
attack
*Port Scan* detected from 134.209.63.140 (US/United States/California/Santa Clara/-). 4 hits in the last 120 seconds
2020-05-06 14:08:15
attackspambots
Port scan(s) denied
2020-04-26 13:40:56
attack
scans 2 times in preceeding hours on the ports (in chronological order) 12207 15984
2020-04-25 21:07:53
attackspambots
Port scan(s) denied
2020-04-25 15:09:02
attackbotsspam
Port Scan: Events[2] countPorts[2]: 13647 25770 ..
2020-04-16 05:09:00
相同子网IP讨论:
IP 类型 评论内容 时间
134.209.63.54 attackbotsspam
400 BAD REQUEST
2019-08-10 11:06:09
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.209.63.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50236
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.209.63.140.			IN	A

;; AUTHORITY SECTION:
.			2922	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040402 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Fri Apr 05 12:49:00 +08 2019
;; MSG SIZE  rcvd: 118

HOST信息:
Host 140.63.209.134.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 140.63.209.134.in-addr.arpa: NXDOMAIN

相关IP信息:
最新评论:
IP 类型 评论内容 时间
193.27.242.2 attackspam
[portscan] Port scan
2019-12-09 20:09:28
189.250.176.176 attackspam
SSH invalid-user multiple login attempts
2019-12-09 20:34:48
51.79.44.52 attackspambots
2019-12-09T11:50:00.534675abusebot-4.cloudsearch.cf sshd\[22385\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip52.ip-51-79-44.net  user=root
2019-12-09 20:16:20
49.234.24.154 attackspambots
Dec  9 00:40:41 XXX sshd[15806]: User r.r from 49.234.24.154 not allowed because none of user's groups are listed in AllowGroups
Dec  9 00:40:41 XXX sshd[15806]: Received disconnect from 49.234.24.154: 11: Bye Bye [preauth]
Dec  9 00:40:43 XXX sshd[15808]: User r.r from 49.234.24.154 not allowed because none of user's groups are listed in AllowGroups
Dec  9 00:40:43 XXX sshd[15808]: Received disconnect from 49.234.24.154: 11: Bye Bye [preauth]
Dec  9 00:40:45 XXX sshd[15819]: User r.r from 49.234.24.154 not allowed because none of user's groups are listed in AllowGroups
Dec  9 00:40:45 XXX sshd[15819]: Received disconnect from 49.234.24.154: 11: Bye Bye [preauth]
Dec  9 00:40:46 XXX sshd[15821]: User r.r from 49.234.24.154 not allowed because none of user's groups are listed in AllowGroups
Dec  9 00:40:47 XXX sshd[15821]: Received disconnect from 49.234.24.154: 11: Bye Bye [preauth]
Dec  9 00:40:48 XXX sshd[15823]: User r.r from 49.234.24.154 not allowed because none of........
-------------------------------
2019-12-09 20:43:52
46.105.124.52 attack
Dec  9 12:08:26 MK-Soft-Root2 sshd[10803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.105.124.52 
Dec  9 12:08:28 MK-Soft-Root2 sshd[10803]: Failed password for invalid user holicki from 46.105.124.52 port 36256 ssh2
...
2019-12-09 20:25:10
41.77.145.34 attack
Dec  9 06:41:55 game-panel sshd[14678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.77.145.34
Dec  9 06:41:57 game-panel sshd[14678]: Failed password for invalid user arnim from 41.77.145.34 port 3471 ssh2
Dec  9 06:49:05 game-panel sshd[14978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.77.145.34
2019-12-09 20:10:57
162.158.243.109 attack
162.158.243.109 - - [09/Dec/2019:06:26:51 +0000] "POST /wp-login.php HTTP/1.1" 200 1449 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-12-09 20:29:38
83.171.99.217 attackspam
fail2ban
2019-12-09 20:45:32
213.251.41.52 attack
Dec  9 12:36:22 MK-Soft-VM7 sshd[3002]: Failed password for nobody from 213.251.41.52 port 59828 ssh2
...
2019-12-09 20:10:16
206.189.93.108 attack
Dec  9 02:32:48 giraffe sshd[28436]: Invalid user tahak from 206.189.93.108
Dec  9 02:32:48 giraffe sshd[28436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.93.108
Dec  9 02:32:49 giraffe sshd[28436]: Failed password for invalid user tahak from 206.189.93.108 port 58009 ssh2
Dec  9 02:32:50 giraffe sshd[28436]: Received disconnect from 206.189.93.108 port 58009:11: Bye Bye [preauth]
Dec  9 02:32:50 giraffe sshd[28436]: Disconnected from 206.189.93.108 port 58009 [preauth]
Dec  9 02:39:55 giraffe sshd[28767]: Invalid user nfs from 206.189.93.108
Dec  9 02:39:55 giraffe sshd[28767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.93.108
Dec  9 02:39:56 giraffe sshd[28767]: Failed password for invalid user nfs from 206.189.93.108 port 37535 ssh2
Dec  9 02:39:57 giraffe sshd[28767]: Received disconnect from 206.189.93.108 port 37535:11: Bye Bye [preauth]
Dec  9 02:39:57 giraf........
-------------------------------
2019-12-09 20:50:27
167.99.65.138 attackbotsspam
Dec  9 11:13:09 wh01 sshd[21612]: Invalid user server from 167.99.65.138 port 58096
Dec  9 11:13:09 wh01 sshd[21612]: Failed password for invalid user server from 167.99.65.138 port 58096 ssh2
Dec  9 11:13:09 wh01 sshd[21612]: Received disconnect from 167.99.65.138 port 58096:11: Bye Bye [preauth]
Dec  9 11:13:09 wh01 sshd[21612]: Disconnected from 167.99.65.138 port 58096 [preauth]
Dec  9 11:25:00 wh01 sshd[22496]: Invalid user nagios from 167.99.65.138 port 44154
Dec  9 11:25:00 wh01 sshd[22496]: Failed password for invalid user nagios from 167.99.65.138 port 44154 ssh2
Dec  9 11:25:00 wh01 sshd[22496]: Received disconnect from 167.99.65.138 port 44154:11: Bye Bye [preauth]
Dec  9 11:25:00 wh01 sshd[22496]: Disconnected from 167.99.65.138 port 44154 [preauth]
Dec  9 11:51:07 wh01 sshd[24957]: Invalid user michelle from 167.99.65.138 port 45884
Dec  9 11:51:07 wh01 sshd[24957]: Failed password for invalid user michelle from 167.99.65.138 port 45884 ssh2
Dec  9 11:51:07 wh01 sshd[24957
2019-12-09 20:38:07
83.14.199.49 attackbotsspam
fail2ban
2019-12-09 20:30:31
183.63.87.236 attackspambots
Dec  9 13:09:29 minden010 sshd[4339]: Failed password for root from 183.63.87.236 port 53950 ssh2
Dec  9 13:16:45 minden010 sshd[6823]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.63.87.236
Dec  9 13:16:47 minden010 sshd[6823]: Failed password for invalid user rycom from 183.63.87.236 port 60094 ssh2
...
2019-12-09 20:42:52
134.175.39.108 attackspambots
$f2bV_matches
2019-12-09 20:39:17
138.68.18.232 attackbots
Dec  9 11:51:28 MK-Soft-VM3 sshd[22656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.18.232 
Dec  9 11:51:30 MK-Soft-VM3 sshd[22656]: Failed password for invalid user odroid from 138.68.18.232 port 36548 ssh2
...
2019-12-09 20:19:56

最近上报的IP列表

144.22.112.42 129.211.0.126 124.107.217.68 122.155.223.59
122.129.78.82 114.220.28.43 95.80.93.52 92.12.184.15
80.232.243.243 79.143.180.170 58.56.19.253 52.231.154.244
46.191.169.145 14.63.170.28 3.120.139.38 192.81.217.111
103.29.69.96 35.200.162.35 165.227.69.188 213.32.90.123