必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Google LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Dec  7 14:57:24 server sshd\[27340\]: Invalid user laney from 34.80.6.68
Dec  7 14:57:24 server sshd\[27340\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.6.80.34.bc.googleusercontent.com 
Dec  7 14:57:32 server sshd\[27340\]: Failed password for invalid user laney from 34.80.6.68 port 33034 ssh2
Dec  7 15:07:48 server sshd\[29806\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.6.80.34.bc.googleusercontent.com  user=root
Dec  7 15:07:50 server sshd\[29806\]: Failed password for root from 34.80.6.68 port 35472 ssh2
...
2019-12-07 22:42:31
相同子网IP讨论:
IP 类型 评论内容 时间
34.80.68.186 attackspambots
Unauthorized connection attempt detected from IP address 34.80.68.186 to port 23 [T]
2020-07-22 04:24:15
34.80.66.39 attack
Jun  4 15:19:31 home sshd[20923]: Failed password for root from 34.80.66.39 port 60482 ssh2
Jun  4 15:23:33 home sshd[21397]: Failed password for root from 34.80.66.39 port 37440 ssh2
...
2020-06-04 21:29:25
34.80.6.92 attack
Mar 25 13:48:40 MainVPS sshd[18573]: Invalid user dingwei from 34.80.6.92 port 57808
Mar 25 13:48:40 MainVPS sshd[18573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.80.6.92
Mar 25 13:48:40 MainVPS sshd[18573]: Invalid user dingwei from 34.80.6.92 port 57808
Mar 25 13:48:43 MainVPS sshd[18573]: Failed password for invalid user dingwei from 34.80.6.92 port 57808 ssh2
Mar 25 13:52:46 MainVPS sshd[26603]: Invalid user www from 34.80.6.92 port 44532
...
2020-03-25 23:59:01
34.80.6.92 attackbots
Mar 22 22:01:26 powerpi2 sshd[25569]: Invalid user gisele from 34.80.6.92 port 38148
Mar 22 22:01:28 powerpi2 sshd[25569]: Failed password for invalid user gisele from 34.80.6.92 port 38148 ssh2
Mar 22 22:05:49 powerpi2 sshd[25759]: Invalid user youtube from 34.80.6.92 port 58028
...
2020-03-23 06:30:03
34.80.6.92 attackbotsspam
Mar 20 07:26:43 firewall sshd[13288]: Failed password for root from 34.80.6.92 port 54162 ssh2
Mar 20 07:31:09 firewall sshd[13607]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.80.6.92  user=root
Mar 20 07:31:11 firewall sshd[13607]: Failed password for root from 34.80.6.92 port 43850 ssh2
...
2020-03-20 19:08:56
34.80.6.92 attackbotsspam
Mar 18 23:43:06 ns3042688 sshd\[5083\]: Failed password for root from 34.80.6.92 port 48688 ssh2
Mar 18 23:44:47 ns3042688 sshd\[5247\]: Invalid user eric from 34.80.6.92
Mar 18 23:44:49 ns3042688 sshd\[5247\]: Failed password for invalid user eric from 34.80.6.92 port 52742 ssh2
Mar 18 23:46:30 ns3042688 sshd\[5394\]: Invalid user smart from 34.80.6.92
Mar 18 23:46:32 ns3042688 sshd\[5394\]: Failed password for invalid user smart from 34.80.6.92 port 56798 ssh2
...
2020-03-19 08:13:20
34.80.61.159 attack
Nov  4 07:12:25 sinope sshd[2979]: Failed password for r.r from 34.80.61.159 port 53846 ssh2
Nov  4 07:12:25 sinope sshd[2979]: Received disconnect from 34.80.61.159: 11: Bye Bye [preauth]
Nov  4 07:27:43 sinope sshd[3046]: Failed password for r.r from 34.80.61.159 port 59486 ssh2
Nov  4 07:27:49 sinope sshd[3046]: Received disconnect from 34.80.61.159: 11: Bye Bye [preauth]
Nov  4 07:36:24 sinope sshd[3056]: Connection closed by 34.80.61.159 [preauth]
Nov  4 07:44:49 sinope sshd[3086]: Failed password for r.r from 34.80.61.159 port 57310 ssh2
Nov  4 07:44:50 sinope sshd[3086]: Received disconnect from 34.80.61.159: 11: Bye Bye [preauth]
Nov  4 07:53:01 sinope sshd[3117]: Invalid user stream from 34.80.61.159
Nov  4 07:53:03 sinope sshd[3117]: Failed password for invalid user stream from 34.80.61.159 port 42112 ssh2
Nov  4 07:53:03 sinope sshd[3117]: Received disconnect from 34.80.61.159: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=
2019-11-06 19:06:59
34.80.66.227 attackspam
Jul 20 17:39:16 srv1 sshd[5372]: Invalid user admin from 34.80.66.227
Jul 20 17:39:18 srv1 sshd[5372]: Failed password for invalid user admin from 34.80.66.227 port 43300 ssh2
Jul 20 17:39:18 srv1 sshd[5373]: Received disconnect from 34.80.66.227: 11: Normal Shutdown, Thank you for playing


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=34.80.66.227
2019-07-21 23:54:54
34.80.66.227 attackbots
Jul 21 04:34:49 unicornsoft sshd\[32753\]: Invalid user jboss from 34.80.66.227
Jul 21 04:34:49 unicornsoft sshd\[32753\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.80.66.227
Jul 21 04:34:51 unicornsoft sshd\[32753\]: Failed password for invalid user jboss from 34.80.66.227 port 48634 ssh2
2019-07-21 15:34:22
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 34.80.6.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14985
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;34.80.6.68.			IN	A

;; AUTHORITY SECTION:
.			124	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019120700 1800 900 604800 86400

;; Query time: 2114 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Dec 07 22:48:33 CST 2019
;; MSG SIZE  rcvd: 114

HOST信息:
68.6.80.34.in-addr.arpa domain name pointer 68.6.80.34.bc.googleusercontent.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
68.6.80.34.in-addr.arpa	name = 68.6.80.34.bc.googleusercontent.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
130.43.59.165 attackspam
TCP port 23 (Telnet) attempt blocked by firewall. [2019-07-08 01:08:15]
2019-07-08 09:38:23
129.205.208.23 attackspambots
Jul  7 23:52:46 MK-Soft-VM5 sshd\[1544\]: Invalid user louis from 129.205.208.23 port 27158
Jul  7 23:52:46 MK-Soft-VM5 sshd\[1544\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.205.208.23
Jul  7 23:52:48 MK-Soft-VM5 sshd\[1544\]: Failed password for invalid user louis from 129.205.208.23 port 27158 ssh2
...
2019-07-08 10:10:06
218.92.1.142 attackbotsspam
Jul  7 21:16:46 TORMINT sshd\[27164\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142  user=root
Jul  7 21:16:47 TORMINT sshd\[27164\]: Failed password for root from 218.92.1.142 port 19769 ssh2
Jul  7 21:23:53 TORMINT sshd\[27731\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.1.142  user=root
...
2019-07-08 09:48:16
145.239.10.217 attackspambots
Jul  8 00:20:00 l01 sshd[502259]: Invalid user meng from 145.239.10.217
Jul  8 00:20:02 l01 sshd[502259]: Failed password for invalid user meng from 145.239.10.217 port 59078 ssh2
Jul  8 00:21:42 l01 sshd[502593]: Invalid user proman from 145.239.10.217
Jul  8 00:21:44 l01 sshd[502593]: Failed password for invalid user proman from 145.239.10.217 port 51046 ssh2
Jul  8 00:23:07 l01 sshd[502875]: Failed password for r.r from 145.239.10.217 port 40194 ssh2
Jul  8 00:24:30 l01 sshd[503080]: Invalid user teste from 145.239.10.217
Jul  8 00:24:32 l01 sshd[503080]: Failed password for invalid user teste from 145.239.10.217 port 57570 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=145.239.10.217
2019-07-08 09:45:13
118.24.40.130 attackbotsspam
Jul  8 00:59:19 ns41 sshd[9826]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.40.130
Jul  8 00:59:21 ns41 sshd[9826]: Failed password for invalid user deploy from 118.24.40.130 port 39554 ssh2
Jul  8 01:07:39 ns41 sshd[10555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.40.130
2019-07-08 10:04:37
85.128.142.17 attackspambots
xmlrpc attack
2019-07-08 09:50:33
5.39.82.197 attackbotsspam
Jul  8 07:12:33 itv-usvr-01 sshd[9169]: Invalid user wpadmin from 5.39.82.197
Jul  8 07:12:33 itv-usvr-01 sshd[9169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.39.82.197
Jul  8 07:12:33 itv-usvr-01 sshd[9169]: Invalid user wpadmin from 5.39.82.197
Jul  8 07:12:35 itv-usvr-01 sshd[9169]: Failed password for invalid user wpadmin from 5.39.82.197 port 58858 ssh2
Jul  8 07:15:16 itv-usvr-01 sshd[9282]: Invalid user nd from 5.39.82.197
2019-07-08 09:29:48
177.206.87.206 attack
Jul  8 08:59:49 localhost sshd[5768]: Invalid user webuser from 177.206.87.206 port 38026
...
2019-07-08 09:39:37
107.170.194.62 attackbotsspam
firewall-block, port(s): 138/tcp
2019-07-08 09:28:14
111.38.25.114 attackbotsspam
firewall-block, port(s): 23/tcp
2019-07-08 09:27:49
190.186.86.132 attackspambots
DATE:2019-07-08_01:07:10, IP:190.186.86.132, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)
2019-07-08 10:11:34
190.7.141.42 attack
Jul  7 17:08:02 mail postfix/postscreen[81202]: PREGREET 44 after 0.4 from [190.7.141.42]:36738: EHLO dinamic-Cable-190-7-141-42.epm.net.co

...
2019-07-08 09:54:46
167.86.117.95 attackspambots
Jul  7 19:57:38 borg sshd[87996]: Failed unknown for invalid user admin from 167.86.117.95 port 42138 ssh2
Jul  7 19:57:40 borg sshd[88000]: Failed unknown for invalid user admin from 167.86.117.95 port 45182 ssh2
Jul  7 19:57:42 borg sshd[88002]: Failed unknown for invalid user user from 167.86.117.95 port 47044 ssh2
...
2019-07-08 09:36:31
185.254.122.31 attackspam
Jul  8 03:53:41 mail kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3c:4d:20:28:99:3a:4d:30:af:08:00 SRC=185.254.122.31 DST=213.136.73.128 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=45289 PROTO=TCP SPT=42812 DPT=6807 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2019-07-08 09:55:07
192.241.181.125 attackspambots
08.07.2019 00:51:08 Connection to port 1023 blocked by firewall
2019-07-08 09:59:39

最近上报的IP列表

197.251.144.207 186.219.255.186 124.235.138.136 124.94.129.220
149.129.110.135 185.184.79.35 61.130.28.203 177.70.193.46
221.234.239.186 221.13.12.42 246.49.181.60 193.253.218.93
171.36.143.239 124.88.113.46 123.157.144.97 123.145.5.92
118.166.129.176 113.128.104.191 112.193.168.253 111.175.59.80