171.34.207.14 - IPInfo

基本信息:

城市(city): Ganzhou

省份(region): Jiangxi

国家(country): China

运营商(isp): China Unicom Jiangxi Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic	2020-05-12 07:54:28

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 171.34.207.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61158
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;171.34.207.14.			IN	A

;; AUTHORITY SECTION:
.			421	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051101 1800 900 604800 86400

;; Query time: 116 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue May 12 07:54:20 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

14.207.34.171.in-addr.arpa domain name pointer 14.207.34.171.adsl-pool.jx.chinaunicom.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
14.207.34.171.in-addr.arpa	name = 14.207.34.171.adsl-pool.jx.chinaunicom.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
151.70.169.163	attackbotsspam	Automatic report - Port Scan Attack	2020-08-19 08:39:17
14.203.201.85	attack	Port probing on unauthorized port 5555	2020-08-19 09:02:29
188.19.183.135	attack	[MK-Root1] Blocked by UFW	2020-08-19 08:56:59
218.92.0.220	attackbotsspam	Aug 19 00:52:28 email sshd\[10515\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.220 user=root Aug 19 00:52:30 email sshd\[10515\]: Failed password for root from 218.92.0.220 port 27909 ssh2 Aug 19 00:53:01 email sshd\[10609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.220 user=root Aug 19 00:53:04 email sshd\[10609\]: Failed password for root from 218.92.0.220 port 10025 ssh2 Aug 19 00:53:47 email sshd\[10739\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.220 user=root ...	2020-08-19 08:55:36
129.122.16.156	attackspambots	Ssh brute force	2020-08-19 09:13:22
134.209.150.94	attackspambots	TCP (SYN) 134.209.150.94:59079 -> port 4746, len 44	2020-08-19 08:40:52
129.150.118.99	attackbots	Aug 18 15:30:42 * sshd[2534]: Invalid user webpage from 129.150.118.99 Aug 18 15:30:42 * sshd[2534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=oc-129-150-118-99.compute.oraclecloud.com Aug 18 15:30:45 * sshd[2534]: Failed password for invalid user webpage from 129.150.118.99 port 49870 ssh2 Aug 18 15:30:45 * sshd[2534]: Received disconnect from 129.150.118.99: 11: Normal Shutdown, Thank you for playing [preauth] Aug 18 15:30:53 * sshd[2558]: Invalid user jumam from 129.150.118.99 Aug 18 15:30:53 * sshd[2558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=oc-129-150-118-99.compute.oraclecloud.com Aug 18 15:30:56 * sshd[2558]: Failed password for invalid user jumam from 129.150.118.99 port 51371 ssh2 Aug 18 15:30:56 * sshd[2558]: Received disconnect from 129.150.118.99: 11: Normal Shutdown, Thank you for playing [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en	2020-08-19 08:35:48
54.248.204.214	attackbotsspam	Aug 18 18:36:00 django sshd[112417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-54-248-204-214.ap-northeast-1.compute.amazonaws.com user=r.r Aug 18 18:36:03 django sshd[112417]: Failed password for r.r from 54.248.204.214 port 42154 ssh2 Aug 18 18:36:03 django sshd[112418]: Received disconnect from 54.248.204.214: 11: Bye Bye Aug 18 18:45:18 django sshd[114905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-54-248-204-214.ap-northeast-1.compute.amazonaws.com user=r.r Aug 18 18:45:20 django sshd[114905]: Failed password for r.r from 54.248.204.214 port 44408 ssh2 Aug 18 18:45:21 django sshd[114906]: Received disconnect from 54.248.204.214: 11: Bye Bye Aug 18 18:48:38 django sshd[115149]: Invalid user oat from 54.248.204.214 Aug 18 18:48:38 django sshd[115149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-54-248-204-214.ap-northea........ -------------------------------	2020-08-19 08:51:56
39.101.150.29	attackspam	GET /data/admin/allowurl.txt 404	2020-08-19 09:00:12
128.199.240.31	attackbotsspam	Brute-force attempt banned	2020-08-19 08:39:31
177.10.100.115	attack	177.10.100.115 (BR/Brazil/177-10-100-115.najatelecom.net.br), 3 distributed imapd attacks on account [robert179@webpods.com] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Aug 18 16:43:35 server dovecot: imap-login: Disconnected (auth failed, 1 attempts in 7 secs): user=, method=PLAIN, rip=191.97.1.40, lip=69.195.129.243, TLS: Disconnected, session= Aug 18 16:09:28 server dovecot: imap-login: Disconnected (auth failed, 1 attempts in 16 secs): user=, method=PLAIN, rip=177.10.100.115, lip=69.195.129.243, TLS, session=<1zv5dSytQOKxCmRz> Aug 18 16:34:49 server dovecot: imap-login: Disconnected (auth failed, 1 attempts in 7 secs): user=, method=PLAIN, rip=183.89.229.146, lip=69.195.129.243, TLS, session=<3kQh0Syt0ry3WeWS> IP Addresses Blocked: 191.97.1.40 (CO/Colombia/-)	2020-08-19 08:44:51
45.78.43.205	attackspambots	web-1 [ssh] SSH Attack	2020-08-19 09:07:48
58.23.16.254	attack	Aug 19 02:23:51 server sshd[5160]: Failed password for invalid user gaurav from 58.23.16.254 port 6919 ssh2 Aug 19 02:28:54 server sshd[7304]: Failed password for invalid user deploy from 58.23.16.254 port 51534 ssh2 Aug 19 02:34:24 server sshd[9856]: Failed password for invalid user zhangle from 58.23.16.254 port 9573 ssh2	2020-08-19 08:41:52
119.29.240.238	attackspam	2020-08-19T01:47:54.037897ns386461 sshd\[6786\]: Invalid user amorozov from 119.29.240.238 port 62155 2020-08-19T01:47:54.042318ns386461 sshd\[6786\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.240.238 2020-08-19T01:47:56.063136ns386461 sshd\[6786\]: Failed password for invalid user amorozov from 119.29.240.238 port 62155 ssh2 2020-08-19T01:59:16.221001ns386461 sshd\[16709\]: Invalid user mm from 119.29.240.238 port 11892 2020-08-19T01:59:16.225622ns386461 sshd\[16709\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.240.238 ...	2020-08-19 08:40:23
144.34.240.47	attackspam	Aug 19 00:40:25 cosmoit sshd[16252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.34.240.47	2020-08-19 08:58:15

最近上报的IP列表

142.77.135.10	114.94.21.87	90.181.184.60	65.217.0.162
137.59.225.234	116.181.135.224	132.232.63.133	68.92.106.58
54.146.81.190	211.37.44.90	20.39.33.136	2.251.88.3
165.201.137.245	24.12.234.177	126.219.76.31	188.52.79.1
186.119.1.219	194.25.127.178	94.97.39.137	66.158.160.119