47.34.107.68 - IPInfo

基本信息:

城市(city): Imperial

省份(region): Missouri

国家(country): United States

运营商(isp): Charter Communications Inc

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Invalid user pi from 47.34.107.68 port 35042	2019-08-01 20:27:52
attackbotsspam	[portscan] tcp/22 [SSH] *(RWIN=65535)(07281057)	2019-07-29 16:37:52
attackbotsspam	Jul 13 12:19:24 ArkNodeAT sshd\[30336\]: Invalid user pi from 47.34.107.68 Jul 13 12:19:24 ArkNodeAT sshd\[30336\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.34.107.68 Jul 13 12:19:24 ArkNodeAT sshd\[30338\]: Invalid user pi from 47.34.107.68	2019-07-13 19:54:33
attackspam	Jul 10 23:03:44 [munged] sshd[7003]: Invalid user pi from 47.34.107.68 port 36074 Jul 10 23:03:44 [munged] sshd[7005]: Invalid user pi from 47.34.107.68 port 36078	2019-07-11 05:19:15
attack	2019-07-09T06:32:44.615247enmeeting.mahidol.ac.th sshd\[8283\]: Invalid user pi from 47.34.107.68 port 38088 2019-07-09T06:32:44.615250enmeeting.mahidol.ac.th sshd\[8284\]: Invalid user pi from 47.34.107.68 port 38090 2019-07-09T06:32:44.884039enmeeting.mahidol.ac.th sshd\[8284\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47-34-107-68.dhcp.blvl.il.charter.com 2019-07-09T06:32:44.887545enmeeting.mahidol.ac.th sshd\[8283\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=47-34-107-68.dhcp.blvl.il.charter.com ...	2019-07-09 11:36:28

相同子网IP讨论:

IP	类型	评论内容	时间
47.34.107.184	attackbots	unauthorized connection attempt	2020-01-12 19:39:07

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 47.34.107.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17925
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;47.34.107.68.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070802 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jul 09 11:36:17 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

68.107.34.47.in-addr.arpa domain name pointer 47-34-107-68.dhcp.blvl.il.charter.com.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
68.107.34.47.in-addr.arpa	name = 47-34-107-68.dhcp.blvl.il.charter.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
185.106.228.12	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-17 01:50:28
124.226.184.92	attackspambots	Feb 16 19:16:34 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 7 secs\): user=\, method=PLAIN, rip=124.226.184.92, lip=212.111.212.230, session=\ Feb 16 19:16:45 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 8 secs\): user=\, method=PLAIN, rip=124.226.184.92, lip=212.111.212.230, session=\ Feb 16 19:16:58 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 11 secs\): user=\, method=PLAIN, rip=124.226.184.92, lip=212.111.212.230, session=\ Feb 16 19:18:49 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=124.226.184.92, lip=212.111.212.230, session=\ Feb 16 19:18:59 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 8 secs\): user=\, method=PLAIN, rip=124.226.184.92, lip=21 ...	2020-02-17 02:01:29
92.16.31.3	attackbots	Portscan detected	2020-02-17 02:04:34
111.251.45.102	attack	Lines containing failures of 111.251.45.102 /var/log/apache/pucorp.org.log.1:Feb 9 10:21:51 server01 postfix/smtpd[18257]: connect from 111-251-45-102.dynamic-ip.hinet.net[111.251.45.102] /var/log/apache/pucorp.org.log.1:Feb x@x /var/log/apache/pucorp.org.log.1:Feb x@x /var/log/apache/pucorp.org.log.1:Feb 9 10:22:08 server01 postfix/policy-spf[18268]: : Policy action=PREPEND Received-SPF: none (performinformatica.com.br: No applicable sender policy available) receiver=x@x /var/log/apache/pucorp.org.log.1:Feb x@x /var/log/apache/pucorp.org.log.1:Feb 9 10:27:11 server01 postfix/smtpd[18257]: servereout after DATA from 111-251-45-102.dynamic-ip.hinet.net[111.251.45.102] /var/log/apache/pucorp.org.log.1:Feb 9 10:27:11 server01 postfix/smtpd[18257]: disconnect from 111-251-45-102.dynamic-ip.hinet.net[111.251.45.102] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=111.251.45.102	2020-02-17 02:23:18
185.220.101.45	attackspambots	02/16/2020-14:47:22.717787 185.220.101.45 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 32	2020-02-17 01:43:26
222.186.175.183	attack	2020-02-16T17:53:51.979413shield sshd\[6548\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.183 user=root 2020-02-16T17:53:54.109413shield sshd\[6548\]: Failed password for root from 222.186.175.183 port 2812 ssh2 2020-02-16T17:53:58.023567shield sshd\[6548\]: Failed password for root from 222.186.175.183 port 2812 ssh2 2020-02-16T17:54:01.483871shield sshd\[6548\]: Failed password for root from 222.186.175.183 port 2812 ssh2 2020-02-16T17:54:05.018161shield sshd\[6548\]: Failed password for root from 222.186.175.183 port 2812 ssh2	2020-02-17 01:56:09
45.154.255.44	attack	02/16/2020-14:46:40.040992 45.154.255.44 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 67	2020-02-17 02:22:29
112.205.173.24	attackbotsspam	1581860828 - 02/16/2020 14:47:08 Host: 112.205.173.24/112.205.173.24 Port: 445 TCP Blocked	2020-02-17 01:54:13
77.81.230.143	attackspambots	Feb 16 07:26:33 server sshd\[32209\]: Invalid user nautica from 77.81.230.143 Feb 16 07:26:33 server sshd\[32209\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.81.230.143 Feb 16 07:26:36 server sshd\[32209\]: Failed password for invalid user nautica from 77.81.230.143 port 40364 ssh2 Feb 16 17:04:59 server sshd\[8441\]: Invalid user wrock from 77.81.230.143 Feb 16 17:04:59 server sshd\[8441\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.81.230.143 ...	2020-02-17 02:16:28
61.19.35.154	attackspambots	1581860807 - 02/16/2020 20:46:47 Host: 61.19.35.154/61.19.35.154 Port: 8080 TCP Blocked ...	2020-02-17 02:13:29
187.32.242.217	attackspam	Feb 16 17:26:12 vpn01 sshd[24076]: Failed password for root from 187.32.242.217 port 50130 ssh2 ...	2020-02-17 02:20:03
185.107.47.171	attack	02/16/2020-17:50:59.568377 185.107.47.171 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 27	2020-02-17 01:57:57
86.247.50.30	attack	2020-02-16T15:58:47.261043scmdmz1 sshd[5236]: Invalid user sasyan from 86.247.50.30 port 58676 2020-02-16T15:58:47.264117scmdmz1 sshd[5236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=lfbn-idf2-1-843-30.w86-247.abo.wanadoo.fr 2020-02-16T15:58:47.261043scmdmz1 sshd[5236]: Invalid user sasyan from 86.247.50.30 port 58676 2020-02-16T15:58:49.721762scmdmz1 sshd[5236]: Failed password for invalid user sasyan from 86.247.50.30 port 58676 ssh2 2020-02-16T16:04:49.805379scmdmz1 sshd[5982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=lfbn-idf2-1-843-30.w86-247.abo.wanadoo.fr user=root 2020-02-16T16:04:51.615993scmdmz1 sshd[5982]: Failed password for root from 86.247.50.30 port 39640 ssh2 ...	2020-02-17 01:38:02
148.228.16.16	attackspam	Feb 16 18:42:19 v22018076622670303 sshd\[19369\]: Invalid user admin from 148.228.16.16 port 58686 Feb 16 18:42:19 v22018076622670303 sshd\[19369\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.228.16.16 Feb 16 18:42:21 v22018076622670303 sshd\[19369\]: Failed password for invalid user admin from 148.228.16.16 port 58686 ssh2 ...	2020-02-17 02:01:15
62.171.137.47	attackspambots	5080/udp [2020-02-16]1pkt	2020-02-17 01:44:45

最近上报的IP列表

117.156.165.5	190.233.70.229	69.195.124.115	47.169.20.40
161.10.90.38	119.28.81.225	38.132.108.175	66.147.244.195
119.163.35.49	2607:5300:120:251::	45.35.97.227	45.77.66.109
123.207.20.136	119.42.75.140	36.70.26.11	238.17.158.104
203.127.100.226	93.152.159.11	14.98.207.146	188.217.140.106