Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Taipei

Region: Taipei City

Country: Taiwan, China

Internet Service Provider: Chunghwa Telecom Co. Ltd.

Hostname: unknown

Organization: Data Communication Business Group

Usage Type: unknown

Comments:
Type Details Datetime
attackspambots
TW_MAINT-TW-TWNIC_<177>1585225417 [1:2403302:56258] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 2 [Classification: Misc Attack] [Priority: 2]:  {TCP} 1.34.1.148:61990
2020-03-27 00:04:08
attackspam
23/tcp
[2019-10-06/11-01]2pkt
2019-11-01 17:06:51
attack
Honeypot attack, port: 23, PTR: 1-34-1-148.HINET-IP.hinet.net.
2019-08-12 02:25:11
Comments on same subnet:
IP Type Details Datetime
1.34.16.210 attackbots
 TCP (SYN) 1.34.16.210:2676 -> port 23, len 44
2020-10-05 06:54:30
1.34.16.210 attack
 TCP (SYN) 1.34.16.210:2676 -> port 23, len 44
2020-10-04 23:00:08
1.34.16.210 attackbotsspam
 TCP (SYN) 1.34.16.210:34293 -> port 2323, len 44
2020-10-04 14:46:03
1.34.107.92 attack
2019-12-12T22:33:27.009332suse-nuc sshd[25101]: Invalid user guest from 1.34.107.92 port 37998
...
2020-09-27 04:26:36
1.34.117.251 attackbotsspam
2019-11-25T20:06:03.734670suse-nuc sshd[27511]: Invalid user user from 1.34.117.251 port 44506
...
2020-09-27 04:25:39
1.34.195.88 attack
2020-09-10T07:02:08.767291suse-nuc sshd[19245]: User root from 1.34.195.88 not allowed because listed in DenyUsers
...
2020-09-27 04:25:19
1.34.107.92 attackbotsspam
2019-12-12T22:33:27.009332suse-nuc sshd[25101]: Invalid user guest from 1.34.107.92 port 37998
...
2020-09-26 20:34:06
1.34.117.251 attackspam
2019-11-25T20:06:03.734670suse-nuc sshd[27511]: Invalid user user from 1.34.117.251 port 44506
...
2020-09-26 20:33:08
1.34.195.88 attackbots
2020-09-10T07:02:08.767291suse-nuc sshd[19245]: User root from 1.34.195.88 not allowed because listed in DenyUsers
...
2020-09-26 20:32:52
1.34.107.92 attack
2019-12-12T22:33:27.009332suse-nuc sshd[25101]: Invalid user guest from 1.34.107.92 port 37998
...
2020-09-26 12:18:01
1.34.195.88 attackbotsspam
2020-09-10T07:02:08.767291suse-nuc sshd[19245]: User root from 1.34.195.88 not allowed because listed in DenyUsers
...
2020-09-26 12:16:55
1.34.19.58 attackspam
firewall-block, port(s): 23/tcp
2020-09-25 11:44:19
1.34.164.204 attack
invalid user
2020-09-22 01:48:10
1.34.141.44 attackbots
Found on   CINS badguys     / proto=6  .  srcport=44251  .  dstport=23  .     (2323)
2020-09-21 23:13:04
1.34.164.204 attack
Port scan followed by SSH.
2020-09-21 17:31:52
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 1.34.1.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41678
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;1.34.1.148.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081100 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Aug 12 02:25:03 CST 2019
;; MSG SIZE  rcvd: 114
Host info
148.1.34.1.in-addr.arpa domain name pointer 1-34-1-148.HINET-IP.hinet.net.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
148.1.34.1.in-addr.arpa	name = 1-34-1-148.HINET-IP.hinet.net.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
178.128.247.181 attack
Brute-force attempt banned
2020-03-20 03:05:03
49.73.61.26 attackspam
Mar 19 15:01:43 santamaria sshd\[11699\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.73.61.26  user=root
Mar 19 15:01:45 santamaria sshd\[11699\]: Failed password for root from 49.73.61.26 port 43254 ssh2
Mar 19 15:05:42 santamaria sshd\[11783\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.73.61.26  user=root
...
2020-03-20 02:59:26
80.23.235.225 attackspambots
SSH brute-force attempt
2020-03-20 02:39:42
165.227.6.207 attackbots
Spoofing spamming phishing fraudulent perpetrator of various scams, including fake scratch cards, fake Netflix offers, spoofed BT messages, delayed parcels awaiting shipment, please confirm transaction, a new message is waiting for you, your Bitcoin transaction has been approved, bogus investment scams, or false mobile phone offers. This is sent from a different domain and IP address each and every time. This one has come from domain of @arnitocrio.com designates 165.227.6.207 as permitted sender.
2020-03-20 02:53:23
165.22.216.8 attackspam
Mar 19 18:18:21 hosting180 sshd[18878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.216.8  user=root
Mar 19 18:18:23 hosting180 sshd[18878]: Failed password for root from 165.22.216.8 port 56742 ssh2
...
2020-03-20 03:05:52
200.252.68.34 attack
$f2bV_matches
2020-03-20 03:01:02
177.188.240.172 attackspam
Invalid user wangqj from 177.188.240.172 port 56464
2020-03-20 03:05:33
200.170.151.3 attackbotsspam
Invalid user odroid from 200.170.151.3 port 34970
2020-03-20 03:03:02
51.91.212.79 attackspambots
03/19/2020-14:20:26.521734 51.91.212.79 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 52
2020-03-20 02:44:54
187.189.241.135 attackspambots
Mar 19 18:37:37 marvibiene sshd[46219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.189.241.135  user=root
Mar 19 18:37:39 marvibiene sshd[46219]: Failed password for root from 187.189.241.135 port 37374 ssh2
Mar 19 18:45:14 marvibiene sshd[46332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.189.241.135  user=root
Mar 19 18:45:16 marvibiene sshd[46332]: Failed password for root from 187.189.241.135 port 38853 ssh2
...
2020-03-20 02:54:11
37.106.122.176 attackbotsspam
Mar 19 13:59:42 debian-2gb-nbg1-2 kernel: \[6881888.643365\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=37.106.122.176 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=53 ID=6233 PROTO=TCP SPT=7340 DPT=23 WINDOW=27604 RES=0x00 SYN URGP=0
2020-03-20 02:48:32
164.155.117.196 attackspam
Lines containing failures of 164.155.117.196
Mar 18 10:16:50 MAKserver06 sshd[30028]: Invalid user student3 from 164.155.117.196 port 48424
Mar 18 10:16:50 MAKserver06 sshd[30028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.155.117.196 
Mar 18 10:16:52 MAKserver06 sshd[30028]: Failed password for invalid user student3 from 164.155.117.196 port 48424 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=164.155.117.196
2020-03-20 02:46:08
120.29.158.173 attackspambots
Mar 19 13:25:31 askasleikir sshd[64552]: Failed password for root from 120.29.158.173 port 37770 ssh2
2020-03-20 03:10:56
222.186.169.194 attack
Mar 19 19:56:14 sso sshd[16215]: Failed password for root from 222.186.169.194 port 9420 ssh2
Mar 19 19:56:18 sso sshd[16215]: Failed password for root from 222.186.169.194 port 9420 ssh2
...
2020-03-20 02:58:03
94.191.90.85 attackspam
Mar 19 14:30:56 [host] sshd[22181]: pam_unix(sshd:
Mar 19 14:30:59 [host] sshd[22181]: Failed passwor
Mar 19 14:35:28 [host] sshd[22431]: pam_unix(sshd:
2020-03-20 02:50:55

Recently Reported IPs

222.189.245.215 71.72.172.156 222.153.172.9 117.239.193.48
196.221.91.215 186.92.0.245 210.160.13.110 173.49.171.120
195.14.244.104 155.252.219.135 85.109.95.199 125.231.135.248
45.111.49.21 203.205.41.21 156.194.110.89 35.239.8.123
139.162.31.103 186.204.146.61 214.145.129.236 81.42.219.153