104.140.99.56 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America (the)

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
104.140.99.59	attack	Jul 8 05:53:04 our-server-hostname postfix/smtpd[12481]: connect from unknown[104.140.99.59] Jul 8 05:53:06 our-server-hostname sqlgrey: grey: new: 104.140.99.59(104.140.99.59), x@x -> x@x Jul x@x Jul x@x Jul x@x Jul 8 05:53:21 our-server-hostname postfix/smtpd[12481]: disconnect from unknown[104.140.99.59] Jul 8 05:53:46 our-server-hostname postfix/smtpd[12769]: connect from unknown[104.140.99.59] Jul 8 05:55:27 our-server-hostname postfix/smtpd[12770]: connect from unknown[104.140.99.59] Jul x@x Jul x@x Jul 8 05:55:38 our-server-hostname postfix/smtpd[12770]: 34226A40005: client=unknown[104.140.99.59] Jul 8 05:55:55 our-server-hostname postfix/smtpd[11549]: 8DBCAA40008: client=unknown[127.0.0.1], orig_client=unknown[104.140.99.59] Jul 8 05:55:55 our-server-hostname amavis[28214]: (28214-18) Passed CLEAN, [104.140.99.59] [104.140.99.59] , mail_id: UCOs0W1Dnu5S, Hhostnames: -, size: 17309, queued_as: 8DBCAA40008, 139 ms Jul x@x Jul x@x Jul 8 05:55:55 our-s........ -------------------------------	2020-07-08 23:24:07
104.140.99.59	attackbotsspam	Spam	2020-07-08 07:56:00

类型

评论内容

时间

104.140.99.59

attack

Jul  8 05:53:04 our-server-hostname postfix/smtpd[12481]: connect from unknown[104.140.99.59]
Jul  8 05:53:06 our-server-hostname sqlgrey: grey: new: 104.140.99.59(104.140.99.59), x@x -> x@x
Jul x@x
Jul x@x
Jul x@x
Jul  8 05:53:21 our-server-hostname postfix/smtpd[12481]: disconnect from unknown[104.140.99.59]
Jul  8 05:53:46 our-server-hostname postfix/smtpd[12769]: connect from unknown[104.140.99.59]
Jul  8 05:55:27 our-server-hostname postfix/smtpd[12770]: connect from unknown[104.140.99.59]
Jul x@x
Jul x@x
Jul  8 05:55:38 our-server-hostname postfix/smtpd[12770]: 34226A40005: client=unknown[104.140.99.59]
Jul  8 05:55:55 our-server-hostname postfix/smtpd[11549]: 8DBCAA40008: client=unknown[127.0.0.1], orig_client=unknown[104.140.99.59]
Jul  8 05:55:55 our-server-hostname amavis[28214]: (28214-18) Passed CLEAN, [104.140.99.59] [104.140.99.59] , mail_id: UCOs0W1Dnu5S, Hhostnames: -, size: 17309, queued_as: 8DBCAA40008, 139 ms
Jul x@x
Jul x@x
Jul  8 05:55:55 our-s........
-------------------------------

2020-07-08 23:24:07

104.140.99.59

attackbotsspam

Spam

2020-07-08 07:56:00

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.140.99.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40580
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.140.99.56.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025022400 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 24 18:17:10 CST 2025
;; MSG SIZE  rcvd: 106

HOST信息:

56.99.140.104.in-addr.arpa domain name pointer cheappump.live.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
56.99.140.104.in-addr.arpa	name = cheappump.live.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
163.172.167.225	attack	SSH / Telnet Brute Force Attempts on Honeypot	2020-05-03 08:15:23
103.16.223.243	attackspambots	May 3 06:48:49 pkdns2 sshd\[7776\]: Invalid user alfred from 103.16.223.243May 3 06:48:52 pkdns2 sshd\[7776\]: Failed password for invalid user alfred from 103.16.223.243 port 44785 ssh2May 3 06:53:04 pkdns2 sshd\[8009\]: Invalid user xbmc from 103.16.223.243May 3 06:53:06 pkdns2 sshd\[8009\]: Failed password for invalid user xbmc from 103.16.223.243 port 49748 ssh2May 3 06:57:24 pkdns2 sshd\[8179\]: Invalid user donatas from 103.16.223.243May 3 06:57:26 pkdns2 sshd\[8179\]: Failed password for invalid user donatas from 103.16.223.243 port 54683 ssh2 ...	2020-05-03 12:01:55
185.36.81.153	attackspam	[Sun May 03 00:29:53.642644 2020] [access_compat:error] [pid 15756] [client 185.36.81.153:63650] AH01797: client denied by server configuration: /var/www/html/luke/wp-admin/ ...	2020-05-03 08:21:09
106.13.32.165	attack	May 3 01:41:22 ns382633 sshd\[4998\]: Invalid user yc from 106.13.32.165 port 49414 May 3 01:41:22 ns382633 sshd\[4998\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.32.165 May 3 01:41:24 ns382633 sshd\[4998\]: Failed password for invalid user yc from 106.13.32.165 port 49414 ssh2 May 3 01:52:13 ns382633 sshd\[6987\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.32.165 user=root May 3 01:52:15 ns382633 sshd\[6987\]: Failed password for root from 106.13.32.165 port 50088 ssh2	2020-05-03 08:39:47
51.178.52.185	attack	2020-05-02T23:04:16.927484abusebot-3.cloudsearch.cf sshd[21990]: Invalid user jt from 51.178.52.185 port 53288 2020-05-02T23:04:16.933086abusebot-3.cloudsearch.cf sshd[21990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.ip-51-178-52.eu 2020-05-02T23:04:16.927484abusebot-3.cloudsearch.cf sshd[21990]: Invalid user jt from 51.178.52.185 port 53288 2020-05-02T23:04:18.976251abusebot-3.cloudsearch.cf sshd[21990]: Failed password for invalid user jt from 51.178.52.185 port 53288 ssh2 2020-05-02T23:10:04.708999abusebot-3.cloudsearch.cf sshd[22373]: Invalid user taguchi from 51.178.52.185 port 38636 2020-05-02T23:10:04.715757abusebot-3.cloudsearch.cf sshd[22373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.ip-51-178-52.eu 2020-05-02T23:10:04.708999abusebot-3.cloudsearch.cf sshd[22373]: Invalid user taguchi from 51.178.52.185 port 38636 2020-05-02T23:10:06.547207abusebot-3.cloudsearch.cf sshd[22373]: ...	2020-05-03 08:18:19
106.12.210.115	attackspambots	2020-05-02T18:18:16.211405linuxbox-skyline sshd[128319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.210.115 user=root 2020-05-02T18:18:18.452495linuxbox-skyline sshd[128319]: Failed password for root from 106.12.210.115 port 60488 ssh2 ...	2020-05-03 08:29:49
54.38.185.226	attackbotsspam	May 3 01:27:04 sshd\[1783\]: Invalid user oracle from 54.38.185.226May 3 01:27:06 sshd\[1783\]: Failed password for invalid user oracle from 54.38.185.226 port 47780 ssh2 ...	2020-05-03 08:30:11
195.12.135.38	attackbotsspam	May 3 02:21:41 markkoudstaal sshd[8960]: Failed password for root from 195.12.135.38 port 45580 ssh2 May 3 02:24:59 markkoudstaal sshd[9511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.12.135.38 May 3 02:25:01 markkoudstaal sshd[9511]: Failed password for invalid user tpuser from 195.12.135.38 port 45544 ssh2	2020-05-03 08:36:15
106.246.250.202	attackspambots	2020-05-03T03:52:11.326767abusebot-6.cloudsearch.cf sshd[10168]: Invalid user syed from 106.246.250.202 port 49594 2020-05-03T03:52:11.335620abusebot-6.cloudsearch.cf sshd[10168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.246.250.202 2020-05-03T03:52:11.326767abusebot-6.cloudsearch.cf sshd[10168]: Invalid user syed from 106.246.250.202 port 49594 2020-05-03T03:52:13.264204abusebot-6.cloudsearch.cf sshd[10168]: Failed password for invalid user syed from 106.246.250.202 port 49594 ssh2 2020-05-03T03:57:29.316260abusebot-6.cloudsearch.cf sshd[10750]: Invalid user test from 106.246.250.202 port 10262 2020-05-03T03:57:29.322892abusebot-6.cloudsearch.cf sshd[10750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.246.250.202 2020-05-03T03:57:29.316260abusebot-6.cloudsearch.cf sshd[10750]: Invalid user test from 106.246.250.202 port 10262 2020-05-03T03:57:31.241313abusebot-6.cloudsearch.cf sshd[10750 ...	2020-05-03 12:01:21
81.15.237.44	attackbots	May 3 01:23:47 xeon sshd[21561]: Failed password for invalid user tir from 81.15.237.44 port 38326 ssh2	2020-05-03 08:20:16
190.94.18.2	attack	Automatic report BANNED IP	2020-05-03 12:02:40
173.249.39.196	attackspam	May 3 05:57:28 vps647732 sshd[26916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.39.196 May 3 05:57:29 vps647732 sshd[26916]: Failed password for invalid user server from 173.249.39.196 port 52072 ssh2 ...	2020-05-03 12:01:43
51.15.108.244	attackspambots	SSH / Telnet Brute Force Attempts on Honeypot	2020-05-03 08:26:10
138.68.26.48	attackbots	May 3 00:20:20 game-panel sshd[4406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.26.48 May 3 00:20:21 game-panel sshd[4406]: Failed password for invalid user jinhua from 138.68.26.48 port 56034 ssh2 May 3 00:24:23 game-panel sshd[4593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.26.48	2020-05-03 08:31:11
212.64.3.137	attack	May 2 23:50:39 localhost sshd[77900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.3.137 user=root May 2 23:50:41 localhost sshd[77900]: Failed password for root from 212.64.3.137 port 57204 ssh2 May 2 23:55:49 localhost sshd[78435]: Invalid user med from 212.64.3.137 port 60182 May 2 23:55:49 localhost sshd[78435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.3.137 May 2 23:55:49 localhost sshd[78435]: Invalid user med from 212.64.3.137 port 60182 May 2 23:55:51 localhost sshd[78435]: Failed password for invalid user med from 212.64.3.137 port 60182 ssh2 ...	2020-05-03 08:34:21

最近上报的IP列表

46.4.74.39	101.13.7.53	134.251.179.103	101.60.38.56
246.235.14.27	32.208.212.254	249.41.79.93	178.127.142.187
2.248.205.151	134.212.144.48	130.84.14.137	173.94.143.112
235.250.174.87	178.175.218.109	185.150.24.43	92.191.37.214
103.155.132.104	55.45.187.200	249.172.230.227	68.51.75.184