134.209.70.2 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): DigitalOcean LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	SSH login attempts with user root.	2019-11-30 06:31:48

相同子网IP讨论:

IP	类型	评论内容	时间
134.209.70.255	attackspam	Invalid user http from 134.209.70.255 port 56304	2019-12-31 17:32:49
134.209.70.255	attackspam	Dec 22 07:44:28 server sshd\[855\]: Invalid user holeman from 134.209.70.255 Dec 22 07:44:28 server sshd\[855\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.70.255 Dec 22 07:44:30 server sshd\[855\]: Failed password for invalid user holeman from 134.209.70.255 port 50716 ssh2 Dec 22 07:54:41 server sshd\[3537\]: Invalid user robuck from 134.209.70.255 Dec 22 07:54:41 server sshd\[3537\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.70.255 ...	2019-12-22 14:00:48
134.209.70.255	attackspam	SSH login attempts.	2019-12-15 06:09:04
134.209.70.255	attackbotsspam	2019-12-13T08:31:18.494273shield sshd\[2597\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.70.255 user=root 2019-12-13T08:31:19.936492shield sshd\[2597\]: Failed password for root from 134.209.70.255 port 55408 ssh2 2019-12-13T08:37:01.243410shield sshd\[4516\]: Invalid user lauren from 134.209.70.255 port 40026 2019-12-13T08:37:01.247693shield sshd\[4516\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.70.255 2019-12-13T08:37:03.111985shield sshd\[4516\]: Failed password for invalid user lauren from 134.209.70.255 port 40026 ssh2	2019-12-13 16:55:56
134.209.70.255	attackspam	Dec 6 14:46:12 [host] sshd[10125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.70.255 user=root Dec 6 14:46:14 [host] sshd[10125]: Failed password for root from 134.209.70.255 port 51140 ssh2 Dec 6 14:52:05 [host] sshd[10210]: Invalid user offill from 134.209.70.255	2019-12-06 22:36:21
134.209.70.255	attack	Dec 6 00:22:13 TORMINT sshd\[9605\]: Invalid user mangue from 134.209.70.255 Dec 6 00:22:13 TORMINT sshd\[9605\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.70.255 Dec 6 00:22:15 TORMINT sshd\[9605\]: Failed password for invalid user mangue from 134.209.70.255 port 38896 ssh2 ...	2019-12-06 13:26:35
134.209.70.255	attackbotsspam	Dec 2 12:39:31 Ubuntu-1404-trusty-64-minimal sshd\[29104\]: Invalid user mysql from 134.209.70.255 Dec 2 12:39:31 Ubuntu-1404-trusty-64-minimal sshd\[29104\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.70.255 Dec 2 12:39:33 Ubuntu-1404-trusty-64-minimal sshd\[29104\]: Failed password for invalid user mysql from 134.209.70.255 port 60170 ssh2 Dec 2 12:46:03 Ubuntu-1404-trusty-64-minimal sshd\[4869\]: Invalid user bitch from 134.209.70.255 Dec 2 12:46:03 Ubuntu-1404-trusty-64-minimal sshd\[4869\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.70.255	2019-12-02 20:35:45
134.209.70.255	attack	Nov 29 05:52:21 ns3042688 sshd\[653\]: Invalid user ben from 134.209.70.255 Nov 29 05:52:21 ns3042688 sshd\[653\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.70.255 Nov 29 05:52:24 ns3042688 sshd\[653\]: Failed password for invalid user ben from 134.209.70.255 port 51390 ssh2 Nov 29 05:55:36 ns3042688 sshd\[1949\]: Invalid user taildeman from 134.209.70.255 Nov 29 05:55:36 ns3042688 sshd\[1949\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.70.255 ...	2019-11-29 14:14:40
134.209.70.103	attack	LAMP,DEF GET /wp-login.php	2019-09-26 01:45:58
134.209.70.255	attackbotsspam	Sep 20 02:43:08 web8 sshd\[4342\]: Invalid user PS from 134.209.70.255 Sep 20 02:43:08 web8 sshd\[4342\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.70.255 Sep 20 02:43:10 web8 sshd\[4342\]: Failed password for invalid user PS from 134.209.70.255 port 35710 ssh2 Sep 20 02:47:34 web8 sshd\[6311\]: Invalid user admin from 134.209.70.255 Sep 20 02:47:34 web8 sshd\[6311\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.70.255	2019-09-20 10:52:22
134.209.70.255	attack	Sep 10 09:39:27 nextcloud sshd\[7185\]: Invalid user user from 134.209.70.255 Sep 10 09:39:27 nextcloud sshd\[7185\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.70.255 Sep 10 09:39:29 nextcloud sshd\[7185\]: Failed password for invalid user user from 134.209.70.255 port 46928 ssh2 ...	2019-09-10 16:15:21
134.209.70.255	attackspambots	Sep 9 15:50:09 xtremcommunity sshd\[152008\]: Invalid user 13 from 134.209.70.255 port 55224 Sep 9 15:50:09 xtremcommunity sshd\[152008\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.70.255 Sep 9 15:50:11 xtremcommunity sshd\[152008\]: Failed password for invalid user 13 from 134.209.70.255 port 55224 ssh2 Sep 9 15:56:12 xtremcommunity sshd\[152167\]: Invalid user 97 from 134.209.70.255 port 37312 Sep 9 15:56:12 xtremcommunity sshd\[152167\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.70.255 ...	2019-09-10 04:28:55
134.209.70.255	attackbotsspam	2019-09-05T22:35:09.658527abusebot-8.cloudsearch.cf sshd\[26857\]: Invalid user postgres from 134.209.70.255 port 56136	2019-09-06 11:14:06
134.209.70.255	attack	Aug 27 20:32:12 hanapaa sshd\[16472\]: Invalid user no1 from 134.209.70.255 Aug 27 20:32:12 hanapaa sshd\[16472\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.70.255 Aug 27 20:32:14 hanapaa sshd\[16472\]: Failed password for invalid user no1 from 134.209.70.255 port 42782 ssh2 Aug 27 20:36:17 hanapaa sshd\[16838\]: Invalid user suporte from 134.209.70.255 Aug 27 20:36:17 hanapaa sshd\[16838\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.70.255	2019-08-28 14:41:30
134.209.70.255	attackspam	Invalid user user1 from 134.209.70.255 port 42210	2019-08-23 16:36:27

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.209.70.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14974
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.209.70.2.			IN	A

;; AUTHORITY SECTION:
.			556	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112901 1800 900 604800 86400

;; Query time: 116 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Nov 30 06:31:45 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 2.70.209.134.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 2.70.209.134.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
170.130.140.2	attack	IP: 170.130.140.2 Ports affected Simple Mail Transfer (25) Found in DNSBL('s) ASN Details AS62904 EONIX-COMMUNICATIONS-ASBLOCK-62904 United States (US) CIDR 170.130.128.0/19 Log Date: 31/07/2020 7:43:03 PM UTC	2020-08-01 08:11:30
200.73.219.12	attack	Automatic report - Banned IP Access	2020-08-01 12:02:33
157.230.248.89	attackbots	Automatic report - Banned IP Access	2020-08-01 08:41:05
106.53.238.111	attack	Jul 31 23:52:25 eventyay sshd[24671]: Failed password for root from 106.53.238.111 port 41346 ssh2 Jul 31 23:55:25 eventyay sshd[24832]: Failed password for root from 106.53.238.111 port 59188 ssh2 ...	2020-08-01 08:06:08
117.92.120.145	attackspam	Telnetd brute force attack detected by fail2ban	2020-08-01 08:40:45
51.210.107.217	attack	Invalid user wyg from 51.210.107.217 port 56836	2020-08-01 08:26:29
49.233.153.154	attack	$f2bV_matches	2020-08-01 08:20:49
191.13.193.152	attackspambots	1596227369 - 07/31/2020 22:29:29 Host: 191.13.193.152/191.13.193.152 Port: 445 TCP Blocked	2020-08-01 08:34:52
203.86.91.118	attackspam	Unauthorised access (Jul 31) SRC=203.86.91.118 LEN=40 TTL=234 ID=21934 TCP DPT=1433 WINDOW=1024 SYN Unauthorised access (Jul 28) SRC=203.86.91.118 LEN=40 TTL=234 ID=53930 TCP DPT=1433 WINDOW=1024 SYN	2020-08-01 08:31:46
139.219.0.102	attack	Jul 31 23:31:34 santamaria sshd\[24041\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 user=root Jul 31 23:31:36 santamaria sshd\[24041\]: Failed password for root from 139.219.0.102 port 62796 ssh2 Jul 31 23:35:57 santamaria sshd\[24174\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.219.0.102 user=root ...	2020-08-01 08:19:45
94.102.51.17	attack	07/31/2020-20:18:34.062456 94.102.51.17 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-08-01 08:23:33
172.241.213.95	attackbots	[2020-07-31 17:34:39] NOTICE[1248][C-00001fc2] chan_sip.c: Call from '' (172.241.213.95:55064) to extension '00853442037692346' rejected because extension not found in context 'public'. [2020-07-31 17:34:39] SECURITY[1275] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-31T17:34:39.205-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00853442037692346",SessionID="0x7f272007c5b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/172.241.213.95/55064",ACLName="no_extension_match" [2020-07-31 17:35:08] NOTICE[1248][C-00001fc3] chan_sip.c: Call from '' (172.241.213.95:50378) to extension '85300442037692346' rejected because extension not found in context 'public'. [2020-07-31 17:35:08] SECURITY[1275] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-31T17:35:08.284-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="85300442037692346",SessionID="0x7f27200510e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress ...	2020-08-01 08:10:15
141.98.9.159	attackbotsspam	2020-08-01T02:13:14.910391centos sshd[31170]: Failed none for invalid user admin from 141.98.9.159 port 39243 ssh2 2020-08-01T02:13:39.177512centos sshd[31195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.159 user=root 2020-08-01T02:13:41.092915centos sshd[31195]: Failed password for root from 141.98.9.159 port 34377 ssh2 ...	2020-08-01 08:21:58
141.98.10.195	attackbots	Jul 31 20:58:56 dns1 sshd[18279]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.10.195 Jul 31 20:58:58 dns1 sshd[18279]: Failed password for invalid user 1234 from 141.98.10.195 port 41362 ssh2 Jul 31 20:59:52 dns1 sshd[18395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.10.195	2020-08-01 08:21:35
154.56.142.153	attackbotsspam	TCP (SYN) 154.56.142.153:26316 -> port 23, len 44	2020-08-01 08:30:44

最近上报的IP列表

119.29.203.1	108.162.210.154	134.209.24.63	119.29.10.2
118.98.127.1	118.24.114.1	117.157.15.2	115.112.143.1
114.118.96.2	114.112.58.1	119.90.3.21	113.200.236.6
111.93.200.5	111.68.104.1	221.232.130.26	111.231.119.1
109.102.158.1	162.135.184.115	109.86.213.5	94.6.146.134