城市(city): Hastings
省份(region): Minnesota
国家(country): United States
运营商(isp): RTC Communications LLC
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 71.34.34.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26089
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;71.34.34.55. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025062800 1800 900 604800 86400
;; Query time: 37 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jun 28 18:56:01 CST 2025
;; MSG SIZE rcvd: 10455.34.34.71.in-addr.arpa domain name pointer 71-34-34-55.mpls.qwest.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
55.34.34.71.in-addr.arpa name = 71-34-34-55.mpls.qwest.net.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 36.67.226.223 | attackspam | Jul 20 00:45:27 vps200512 sshd\[18007\]: Invalid user lab from 36.67.226.223 Jul 20 00:45:27 vps200512 sshd\[18007\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.67.226.223 Jul 20 00:45:29 vps200512 sshd\[18007\]: Failed password for invalid user lab from 36.67.226.223 port 50850 ssh2 Jul 20 00:50:34 vps200512 sshd\[18123\]: Invalid user ts3bot from 36.67.226.223 Jul 20 00:50:34 vps200512 sshd\[18123\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.67.226.223 |
2019-07-20 13:05:01 |
| 82.143.75.7 | attackspam | Jul 20 06:30:17 localhost sshd\[21210\]: Invalid user wen from 82.143.75.7 port 46182 Jul 20 06:30:17 localhost sshd\[21210\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.143.75.7 Jul 20 06:30:19 localhost sshd\[21210\]: Failed password for invalid user wen from 82.143.75.7 port 46182 ssh2 |
2019-07-20 12:43:43 |
| 171.221.241.97 | attack | Telnet Server BruteForce Attack |
2019-07-20 12:50:52 |
| 116.12.50.31 | attackbotsspam | 116.12.50.31 - - [20/Jul/2019:03:33:46 +0200] "POST [munged]wp-login.php HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 0.000 |
2019-07-20 12:38:14 |
| 92.118.37.74 | attackspam | Jul 20 06:56:01 h2177944 kernel: \[1922694.042473\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.74 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=59618 PROTO=TCP SPT=46525 DPT=47048 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 20 06:57:08 h2177944 kernel: \[1922760.743862\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.74 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=16389 PROTO=TCP SPT=46525 DPT=38425 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 20 06:59:16 h2177944 kernel: \[1922889.248789\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.74 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=6771 PROTO=TCP SPT=46525 DPT=14577 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 20 07:01:35 h2177944 kernel: \[1923028.264737\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.74 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=56105 PROTO=TCP SPT=46525 DPT=42989 WINDOW=1024 RES=0x00 SYN URGP=0 Jul 20 07:01:48 h2177944 kernel: \[1923040.926328\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=92.118.37.74 DST=85.214.117.9 L |
2019-07-20 13:19:31 |
| 91.65.188.76 | attackspambots | 2019-07-20T03:33:59.596654centos sshd\[19309\]: Invalid user pi from 91.65.188.76 port 37552 2019-07-20T03:33:59.596655centos sshd\[19311\]: Invalid user pi from 91.65.188.76 port 37558 2019-07-20T03:33:59.637662centos sshd\[19311\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip5b41bc4c.dynamic.kabel-deutschland.de |
2019-07-20 12:33:07 |
| 181.174.122.26 | attack | Jul 20 04:18:59 animalibera sshd[30427]: Invalid user date from 181.174.122.26 port 37170 ... |
2019-07-20 12:31:49 |
| 40.77.167.69 | attackbotsspam | Automatic report - Banned IP Access |
2019-07-20 12:47:38 |
| 47.91.41.194 | attack | 20 attempts against mh-ssh on ice.magehost.pro |
2019-07-20 12:34:25 |
| 187.10.193.115 | attack | Telnetd brute force attack detected by fail2ban |
2019-07-20 13:05:28 |
| 141.98.80.61 | attackspam | Jul 16 12:45:52 rigel postfix/smtpd[7722]: connect from unknown[141.98.80.61] Jul 16 12:45:53 rigel postfix/smtpd[7722]: warning: unknown[141.98.80.61]: SASL LOGIN authentication failed: authentication failure Jul 16 12:45:54 rigel postfix/smtpd[7722]: lost connection after AUTH from unknown[141.98.80.61] Jul 16 12:45:54 rigel postfix/smtpd[7722]: disconnect from unknown[141.98.80.61] Jul 16 12:45:54 rigel postfix/smtpd[7722]: connect from unknown[141.98.80.61] Jul 16 12:45:56 rigel postfix/smtpd[7722]: warning: unknown[141.98.80.61]: SASL LOGIN authentication failed: authentication failure Jul 16 12:45:56 rigel postfix/smtpd[7722]: lost connection after AUTH from unknown[141.98.80.61] Jul 16 12:45:56 rigel postfix/smtpd[7722]: disconnect from unknown[141.98.80.61] Jul 16 12:45:58 rigel postfix/smtpd[7722]: connect from unknown[141.98.80.61] Jul 16 12:46:00 rigel postfix/smtpd[7722]: warning: unknown[141.98.80.61]: SASL LOGIN authentication failed: authentication failur........ ------------------------------- |
2019-07-20 13:13:38 |
| 208.91.111.202 | attack | Unauthorized connection attempt from IP address 208.91.111.202 on Port 445(SMB) |
2019-07-20 13:22:18 |
| 185.173.35.21 | attackbots | 1563590129 - 07/20/2019 04:35:29 Host: 185.173.35.21.netsystemsresearch.com/185.173.35.21 Port: 5632 UDP Blocked |
2019-07-20 13:02:57 |
| 93.42.117.137 | attackspambots | Jul 20 06:45:18 minden010 sshd[22176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.42.117.137 Jul 20 06:45:20 minden010 sshd[22176]: Failed password for invalid user elly from 93.42.117.137 port 37786 ssh2 Jul 20 06:50:43 minden010 sshd[24640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.42.117.137 ... |
2019-07-20 12:55:23 |
| 41.214.139.226 | attack | 2019-07-20T10:43:47.055051enmeeting.mahidol.ac.th sshd\[21752\]: User root from 41.214.139.226 not allowed because not listed in AllowUsers 2019-07-20T10:43:47.176482enmeeting.mahidol.ac.th sshd\[21752\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.214.139.226 user=root 2019-07-20T10:43:48.602616enmeeting.mahidol.ac.th sshd\[21752\]: Failed password for invalid user root from 41.214.139.226 port 52262 ssh2 ... |
2019-07-20 12:33:52 |