必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Google LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:
类型 评论内容 时间
attack
Dec  7 14:57:24 server sshd\[27340\]: Invalid user laney from 34.80.6.68
Dec  7 14:57:24 server sshd\[27340\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.6.80.34.bc.googleusercontent.com 
Dec  7 14:57:32 server sshd\[27340\]: Failed password for invalid user laney from 34.80.6.68 port 33034 ssh2
Dec  7 15:07:48 server sshd\[29806\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.6.80.34.bc.googleusercontent.com  user=root
Dec  7 15:07:50 server sshd\[29806\]: Failed password for root from 34.80.6.68 port 35472 ssh2
...
2019-12-07 22:42:31
相同子网IP讨论:
IP 类型 评论内容 时间
34.80.68.186 attackspambots
Unauthorized connection attempt detected from IP address 34.80.68.186 to port 23 [T]
2020-07-22 04:24:15
34.80.66.39 attack
Jun  4 15:19:31 home sshd[20923]: Failed password for root from 34.80.66.39 port 60482 ssh2
Jun  4 15:23:33 home sshd[21397]: Failed password for root from 34.80.66.39 port 37440 ssh2
...
2020-06-04 21:29:25
34.80.6.92 attack
Mar 25 13:48:40 MainVPS sshd[18573]: Invalid user dingwei from 34.80.6.92 port 57808
Mar 25 13:48:40 MainVPS sshd[18573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.80.6.92
Mar 25 13:48:40 MainVPS sshd[18573]: Invalid user dingwei from 34.80.6.92 port 57808
Mar 25 13:48:43 MainVPS sshd[18573]: Failed password for invalid user dingwei from 34.80.6.92 port 57808 ssh2
Mar 25 13:52:46 MainVPS sshd[26603]: Invalid user www from 34.80.6.92 port 44532
...
2020-03-25 23:59:01
34.80.6.92 attackbots
Mar 22 22:01:26 powerpi2 sshd[25569]: Invalid user gisele from 34.80.6.92 port 38148
Mar 22 22:01:28 powerpi2 sshd[25569]: Failed password for invalid user gisele from 34.80.6.92 port 38148 ssh2
Mar 22 22:05:49 powerpi2 sshd[25759]: Invalid user youtube from 34.80.6.92 port 58028
...
2020-03-23 06:30:03
34.80.6.92 attackbotsspam
Mar 20 07:26:43 firewall sshd[13288]: Failed password for root from 34.80.6.92 port 54162 ssh2
Mar 20 07:31:09 firewall sshd[13607]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.80.6.92  user=root
Mar 20 07:31:11 firewall sshd[13607]: Failed password for root from 34.80.6.92 port 43850 ssh2
...
2020-03-20 19:08:56
34.80.6.92 attackbotsspam
Mar 18 23:43:06 ns3042688 sshd\[5083\]: Failed password for root from 34.80.6.92 port 48688 ssh2
Mar 18 23:44:47 ns3042688 sshd\[5247\]: Invalid user eric from 34.80.6.92
Mar 18 23:44:49 ns3042688 sshd\[5247\]: Failed password for invalid user eric from 34.80.6.92 port 52742 ssh2
Mar 18 23:46:30 ns3042688 sshd\[5394\]: Invalid user smart from 34.80.6.92
Mar 18 23:46:32 ns3042688 sshd\[5394\]: Failed password for invalid user smart from 34.80.6.92 port 56798 ssh2
...
2020-03-19 08:13:20
34.80.61.159 attack
Nov  4 07:12:25 sinope sshd[2979]: Failed password for r.r from 34.80.61.159 port 53846 ssh2
Nov  4 07:12:25 sinope sshd[2979]: Received disconnect from 34.80.61.159: 11: Bye Bye [preauth]
Nov  4 07:27:43 sinope sshd[3046]: Failed password for r.r from 34.80.61.159 port 59486 ssh2
Nov  4 07:27:49 sinope sshd[3046]: Received disconnect from 34.80.61.159: 11: Bye Bye [preauth]
Nov  4 07:36:24 sinope sshd[3056]: Connection closed by 34.80.61.159 [preauth]
Nov  4 07:44:49 sinope sshd[3086]: Failed password for r.r from 34.80.61.159 port 57310 ssh2
Nov  4 07:44:50 sinope sshd[3086]: Received disconnect from 34.80.61.159: 11: Bye Bye [preauth]
Nov  4 07:53:01 sinope sshd[3117]: Invalid user stream from 34.80.61.159
Nov  4 07:53:03 sinope sshd[3117]: Failed password for invalid user stream from 34.80.61.159 port 42112 ssh2
Nov  4 07:53:03 sinope sshd[3117]: Received disconnect from 34.80.61.159: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=
2019-11-06 19:06:59
34.80.66.227 attackspam
Jul 20 17:39:16 srv1 sshd[5372]: Invalid user admin from 34.80.66.227
Jul 20 17:39:18 srv1 sshd[5372]: Failed password for invalid user admin from 34.80.66.227 port 43300 ssh2
Jul 20 17:39:18 srv1 sshd[5373]: Received disconnect from 34.80.66.227: 11: Normal Shutdown, Thank you for playing


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=34.80.66.227
2019-07-21 23:54:54
34.80.66.227 attackbots
Jul 21 04:34:49 unicornsoft sshd\[32753\]: Invalid user jboss from 34.80.66.227
Jul 21 04:34:49 unicornsoft sshd\[32753\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.80.66.227
Jul 21 04:34:51 unicornsoft sshd\[32753\]: Failed password for invalid user jboss from 34.80.66.227 port 48634 ssh2
2019-07-21 15:34:22
WHOIS信息:
b
DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 34.80.6.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14985
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;34.80.6.68.			IN	A

;; AUTHORITY SECTION:
.			124	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019120700 1800 900 604800 86400

;; Query time: 2114 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Dec 07 22:48:33 CST 2019
;; MSG SIZE  rcvd: 114

HOST信息:
68.6.80.34.in-addr.arpa domain name pointer 68.6.80.34.bc.googleusercontent.com.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
68.6.80.34.in-addr.arpa	name = 68.6.80.34.bc.googleusercontent.com.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
198.245.49.22 attackbots
198.245.49.22 - - [15/Aug/2020:06:39:37 +0100] "POST /wp-login.php HTTP/1.1" 200 2178 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
198.245.49.22 - - [15/Aug/2020:06:39:39 +0100] "POST /wp-login.php HTTP/1.1" 200 2154 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
198.245.49.22 - - [15/Aug/2020:06:39:39 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-15 15:25:04
74.82.213.249 attackbotsspam
Aug 15 06:26:05 OPSO sshd\[19404\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.82.213.249  user=root
Aug 15 06:26:07 OPSO sshd\[19404\]: Failed password for root from 74.82.213.249 port 52860 ssh2
Aug 15 06:30:03 OPSO sshd\[19851\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.82.213.249  user=root
Aug 15 06:30:05 OPSO sshd\[19851\]: Failed password for root from 74.82.213.249 port 59662 ssh2
Aug 15 06:34:05 OPSO sshd\[20290\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.82.213.249  user=root
2020-08-15 15:30:59
125.161.139.88 attackbotsspam
Aug 15 07:12:11 cdc sshd[29247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.161.139.88  user=pi
Aug 15 07:12:13 cdc sshd[29247]: Failed password for invalid user pi from 125.161.139.88 port 2779 ssh2
2020-08-15 15:30:28
171.224.38.149 attackbotsspam
1597463669 - 08/15/2020 05:54:29 Host: 171.224.38.149/171.224.38.149 Port: 445 TCP Blocked
2020-08-15 15:17:25
142.44.161.132 attackbots
Aug 14 21:01:24 php1 sshd\[13526\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.161.132  user=root
Aug 14 21:01:27 php1 sshd\[13526\]: Failed password for root from 142.44.161.132 port 45916 ssh2
Aug 14 21:05:36 php1 sshd\[13887\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.161.132  user=root
Aug 14 21:05:38 php1 sshd\[13887\]: Failed password for root from 142.44.161.132 port 56376 ssh2
Aug 14 21:09:48 php1 sshd\[14417\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.161.132  user=root
2020-08-15 15:39:26
122.115.57.174 attackspam
frenzy
2020-08-15 15:36:48
177.36.39.56 attack
$f2bV_matches
2020-08-15 15:19:47
45.157.120.16 attackspam
Aug 15 13:55:12 itv-usvr-02 sshd[28370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.157.120.16  user=root
Aug 15 13:59:35 itv-usvr-02 sshd[28535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.157.120.16  user=root
Aug 15 14:04:12 itv-usvr-02 sshd[28681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.157.120.16  user=root
2020-08-15 15:44:14
45.172.59.247 attack
Automatic report - Port Scan Attack
2020-08-15 15:14:49
222.186.175.167 attackbots
2020-08-15T10:25:47.121432afi-git.jinr.ru sshd[1996]: Failed password for root from 222.186.175.167 port 46046 ssh2
2020-08-15T10:25:50.582373afi-git.jinr.ru sshd[1996]: Failed password for root from 222.186.175.167 port 46046 ssh2
2020-08-15T10:25:54.122775afi-git.jinr.ru sshd[1996]: Failed password for root from 222.186.175.167 port 46046 ssh2
2020-08-15T10:25:54.122889afi-git.jinr.ru sshd[1996]: error: maximum authentication attempts exceeded for root from 222.186.175.167 port 46046 ssh2 [preauth]
2020-08-15T10:25:54.122903afi-git.jinr.ru sshd[1996]: Disconnecting: Too many authentication failures [preauth]
...
2020-08-15 15:27:10
41.190.153.35 attackspambots
frenzy
2020-08-15 15:13:15
152.136.133.70 attack
Aug 15 06:40:57 piServer sshd[14102]: Failed password for root from 152.136.133.70 port 33856 ssh2
Aug 15 06:43:50 piServer sshd[14291]: Failed password for root from 152.136.133.70 port 35232 ssh2
...
2020-08-15 15:29:00
196.52.43.63 attackspam
Port scan denied
2020-08-15 15:32:43
193.169.255.40 attack
Aug 15 08:31:09 srv01 postfix/smtpd\[7662\]: warning: unknown\[193.169.255.40\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 15 08:31:38 srv01 postfix/smtpd\[4522\]: warning: unknown\[193.169.255.40\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 15 08:32:44 srv01 postfix/smtpd\[4522\]: warning: unknown\[193.169.255.40\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 15 08:42:28 srv01 postfix/smtpd\[4749\]: warning: unknown\[193.169.255.40\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 15 08:42:57 srv01 postfix/smtpd\[9241\]: warning: unknown\[193.169.255.40\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-08-15 15:04:21
222.186.175.183 attack
Aug 15 03:03:52 plusreed sshd[10205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.183  user=root
Aug 15 03:03:54 plusreed sshd[10205]: Failed password for root from 222.186.175.183 port 38148 ssh2
...
2020-08-15 15:04:51

最近上报的IP列表

197.251.144.207 186.219.255.186 124.235.138.136 124.94.129.220
149.129.110.135 185.184.79.35 61.130.28.203 177.70.193.46
221.234.239.186 221.13.12.42 246.49.181.60 193.253.218.93
171.36.143.239 124.88.113.46 123.157.144.97 123.145.5.92
118.166.129.176 113.128.104.191 112.193.168.253 111.175.59.80