101.52.140.34 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): GDS Changan Services Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Mar 3 15:20:38 mail sshd\[4273\]: Invalid user hduser from 101.52.140.34 Mar 3 15:20:38 mail sshd\[4273\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.52.140.34 Mar 3 15:20:40 mail sshd\[4273\]: Failed password for invalid user hduser from 101.52.140.34 port 29409 ssh2 ...	2020-03-04 02:33:49
attackspam	Mar 1 19:15:57 server sshd[101906]: Failed password for invalid user sirius from 101.52.140.34 port 25165 ssh2 Mar 1 19:19:11 server sshd[102731]: Failed password for root from 101.52.140.34 port 56429 ssh2 Mar 1 19:24:19 server sshd[104182]: Failed password for invalid user zjcl from 101.52.140.34 port 31506 ssh2	2020-03-02 02:28:07

类型

评论内容

时间

attackspambots

Mar  3 15:20:38 mail sshd\[4273\]: Invalid user hduser from 101.52.140.34
Mar  3 15:20:38 mail sshd\[4273\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.52.140.34
Mar  3 15:20:40 mail sshd\[4273\]: Failed password for invalid user hduser from 101.52.140.34 port 29409 ssh2
...

2020-03-04 02:33:49

attackspam

Mar  1 19:15:57 server sshd[101906]: Failed password for invalid user sirius from 101.52.140.34 port 25165 ssh2
Mar  1 19:19:11 server sshd[102731]: Failed password for root from 101.52.140.34 port 56429 ssh2
Mar  1 19:24:19 server sshd[104182]: Failed password for invalid user zjcl from 101.52.140.34 port 31506 ssh2

2020-03-02 02:28:07

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 101.52.140.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13442
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;101.52.140.34.			IN	A

;; AUTHORITY SECTION:
.			375	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020030101 1800 900 604800 86400

;; Query time: 50 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 02 02:28:02 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 34.140.52.101.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 34.140.52.101.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
128.199.177.224	attackbotsspam	(sshd) Failed SSH login from 128.199.177.224 (SG/Singapore/-): 12 in the last 3600 secs	2020-08-21 00:28:40
85.209.0.101	attackbots	Unauthorized connection attempt detected from IP address 85.209.0.101 to port 22 [T]	2020-08-21 00:41:29
124.239.168.74	attack	Aug 20 06:51:33 dignus sshd[11044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.239.168.74 Aug 20 06:51:35 dignus sshd[11044]: Failed password for invalid user gama from 124.239.168.74 port 56162 ssh2 Aug 20 06:55:41 dignus sshd[11688]: Invalid user csgoserver from 124.239.168.74 port 39310 Aug 20 06:55:41 dignus sshd[11688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.239.168.74 Aug 20 06:55:43 dignus sshd[11688]: Failed password for invalid user csgoserver from 124.239.168.74 port 39310 ssh2 ...	2020-08-21 01:10:09
125.21.18.2	attackbots	Unauthorized connection attempt from IP address 125.21.18.2 on Port 445(SMB)	2020-08-21 00:58:47
31.28.109.154	attackspam	Unauthorized connection attempt from IP address 31.28.109.154 on Port 445(SMB)	2020-08-21 00:51:15
45.129.33.14	attackbotsspam	SmallBizIT.US 6 packets to tcp(3380,3381,3382,3383,3386,3387)	2020-08-21 00:32:02
170.130.213.112	attack	Aug 20 21:43:26 our-server-hostname postfix/smtpd[28147]: connect from unknown[170.130.213.112] Aug x@x Aug 20 21:43:28 our-server-hostname postfix/smtpd[28147]: 6CA09A40105: client=unknown[170.130.213.112] Aug 20 21:43:29 our-server-hostname postfix/smtpd[21142]: 074E1A40123: client=unknown[127.0.0.1], orig_client=unknown[170.130.213.112] Aug x@x Aug x@x Aug 20 21:43:29 our-server-hostname postfix/smtpd[28147]: 280B9A40105: client=unknown[170.130.213.112] Aug 20 21:43:29 our-server-hostname postfix/smtpd[26816]: 7E132A40123: client=unknown[127.0.0.1], orig_client=unknown[170.130.213.112] Aug x@x Aug x@x Aug 20 21:43:29 our-server-hostname postfix/smtpd[28147]: A01A8A40105: client=unknown[170.130.213.112] Aug 20 21:43:30 our-server-hostname postfix/smtpd[21227]: 02470A40120: client=unknown[127.0.0.1], orig_client=unknown[170.130.213.112] Aug x@x Aug x@x Aug 20 21:43:30 our-server-hostname postfix/smtpd[28147]: 239F6A40105: client=unknown[170.130.213.112] Aug 20 21:43:30........ -------------------------------	2020-08-21 00:30:19
71.246.211.18	attack	SSH Brute Force	2020-08-21 00:52:06
186.150.202.227	attackspambots	Unauthorized connection attempt from IP address 186.150.202.227 on Port 445(SMB)	2020-08-21 00:47:49
198.98.50.112	attack	2020-08-20T15:51[Censored Hostname] sshd[12783]: Failed password for root from 198.98.50.112 port 25832 ssh2 2020-08-20T15:51[Censored Hostname] sshd[12783]: Failed password for root from 198.98.50.112 port 25832 ssh2 2020-08-20T15:51[Censored Hostname] sshd[12783]: Failed password for root from 198.98.50.112 port 25832 ssh2[...]	2020-08-21 00:32:26
167.114.29.165	attackspam	2020-08-20T17:38:56.723544mail.standpoint.com.ua sshd[21348]: Invalid user dubrovin from 167.114.29.165 port 46567 2020-08-20T17:39:14.138493mail.standpoint.com.ua sshd[21407]: Invalid user shaxova from 167.114.29.165 port 46108 2020-08-20T17:40:14.155120mail.standpoint.com.ua sshd[21552]: Invalid user kajrat from 167.114.29.165 port 34257 2020-08-20T17:43:38.609496mail.standpoint.com.ua sshd[22044]: Invalid user kotelnikov from 167.114.29.165 port 35318 2020-08-20T17:48:06.679453mail.standpoint.com.ua sshd[22740]: Invalid user xan from 167.114.29.165 port 51932 ...	2020-08-21 00:32:54
187.16.255.102	attackbots	TCP (SYN) 187.16.255.102:60796 -> port 22, len 48	2020-08-21 01:09:44
103.96.40.81	attackbotsspam	Unauthorized connection attempt from IP address 103.96.40.81 on Port 445(SMB)	2020-08-21 00:58:21
113.189.39.53	attack	Unauthorized connection attempt from IP address 113.189.39.53 on Port 445(SMB)	2020-08-21 00:44:43
52.47.187.125	attack	52.47.187.125 - - [20/Aug/2020:14:03:41 +0200] "GET /wp-login.php HTTP/1.1" 200 8775 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 52.47.187.125 - - [20/Aug/2020:14:03:41 +0200] "POST /wp-login.php HTTP/1.1" 200 9026 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 52.47.187.125 - - [20/Aug/2020:14:03:42 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-21 00:31:11

最近上报的IP列表

105.177.247.148	219.196.83.248	119.99.164.248	105.204.73.205
42.155.183.237	94.12.198.110	105.91.227.160	4.17.101.140
61.150.36.13	182.64.228.126	116.76.244.133	136.246.17.137
156.96.148.54	2.93.174.132	51.86.218.150	65.125.25.128
194.132.70.169	5.84.186.167	17.6.252.129	212.130.84.48