城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 137.104.137.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43715
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;137.104.137.134. IN A
;; AUTHORITY SECTION:
. 450 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022000 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 20 21:24:02 CST 2022
;; MSG SIZE rcvd: 108134.137.104.137.in-addr.arpa domain name pointer websp.uwplatt.edu.
134.137.104.137.in-addr.arpa domain name pointer webapi.uwplatt.edu.
134.137.104.137.in-addr.arpa domain name pointer sentry.uwplatt.edu.
134.137.104.137.in-addr.arpa domain name pointer dashboard.uwplatt.edu.
134.137.104.137.in-addr.arpa domain name pointer portalapi.uwplatt.edu.
134.137.104.137.in-addr.arpa domain name pointer duo.uwplatt.edu.
134.137.104.137.in-addr.arpa domain name pointer go.uwplatt.edu.
134.137.104.137.in-addr.arpa domain name pointer portal.uwplatt.edu.
134.137.104.137.in-addr.arpa domain name pointer prod-webadc0.oit.uwplatt.edu.
134.137.104.137.in-addr.arpa domain name pointer mscj.uwplatt.edu.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
134.137.104.137.in-addr.arpa name = portalapi.uwplatt.edu.
134.137.104.137.in-addr.arpa name = duo.uwplatt.edu.
134.137.104.137.in-addr.arpa name = go.uwplatt.edu.
134.137.104.137.in-addr.arpa name = portal.uwplatt.edu.
134.137.104.137.in-addr.arpa name = prod-webadc0.oit.uwplatt.edu.
134.137.104.137.in-addr.arpa name = mscj.uwplatt.edu.
134.137.104.137.in-addr.arpa name = websp.uwplatt.edu.
134.137.104.137.in-addr.arpa name = webapi.uwplatt.edu.
134.137.104.137.in-addr.arpa name = sentry.uwplatt.edu.
134.137.104.137.in-addr.arpa name = dashboard.uwplatt.edu.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 66.61.194.148 | attackspambots | Unauthorized connection attempt from IP address 66.61.194.148 on Port 445(SMB) |
2020-08-24 09:33:32 |
| 183.224.38.56 | attackbots | Aug 24 00:22:31 * sshd[26152]: Failed password for root from 183.224.38.56 port 48328 ssh2 Aug 24 00:26:08 * sshd[26500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.224.38.56 |
2020-08-24 09:34:42 |
| 178.33.12.237 | attackbotsspam | Aug 23 23:03:31 s158375 sshd[7111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.12.237 |
2020-08-24 12:11:39 |
| 45.14.224.215 | attack | [H1.VM4] Blocked by UFW |
2020-08-24 09:25:09 |
| 123.185.169.5 | attack | Port scan: Attack repeated for 24 hours |
2020-08-24 12:02:06 |
| 51.178.29.191 | attackspam | Aug 23 21:15:57 ny01 sshd[19449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.29.191 Aug 23 21:15:59 ny01 sshd[19449]: Failed password for invalid user landi from 51.178.29.191 port 39072 ssh2 Aug 23 21:17:52 ny01 sshd[19704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.29.191 |
2020-08-24 09:34:01 |
| 202.6.237.22 | attackspam | IP 202.6.237.22 attacked honeypot on port: 1433 at 8/23/2020 8:56:53 PM |
2020-08-24 12:20:20 |
| 198.89.92.162 | attack | Aug 24 01:31:32 ovpn sshd\[461\]: Invalid user mssql from 198.89.92.162 Aug 24 01:31:32 ovpn sshd\[461\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.89.92.162 Aug 24 01:31:34 ovpn sshd\[461\]: Failed password for invalid user mssql from 198.89.92.162 port 60048 ssh2 Aug 24 01:46:30 ovpn sshd\[4102\]: Invalid user dj from 198.89.92.162 Aug 24 01:46:30 ovpn sshd\[4102\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.89.92.162 |
2020-08-24 09:28:37 |
| 222.186.173.154 | attackspambots | $f2bV_matches |
2020-08-24 12:02:40 |
| 121.175.223.199 | attack | Telnet Honeypot -> Telnet Bruteforce / Login |
2020-08-24 12:05:08 |
| 31.154.9.174 | attackspambots | Aug 24 01:17:24 mellenthin sshd[25214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.154.9.174 Aug 24 01:17:24 mellenthin sshd[25214]: Failed password for invalid user admin from 31.154.9.174 port 54693 ssh2 |
2020-08-24 09:29:09 |
| 49.48.66.152 | attack | 20/8/23@23:56:55: FAIL: Alarm-Network address from=49.48.66.152 ... |
2020-08-24 12:19:44 |
| 170.210.203.201 | attackbotsspam | 2020-08-24T00:25:15.701613paragon sshd[30591]: Invalid user derrick from 170.210.203.201 port 59930 2020-08-24T00:25:15.704240paragon sshd[30591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.210.203.201 2020-08-24T00:25:15.701613paragon sshd[30591]: Invalid user derrick from 170.210.203.201 port 59930 2020-08-24T00:25:17.584304paragon sshd[30591]: Failed password for invalid user derrick from 170.210.203.201 port 59930 ssh2 2020-08-24T00:30:08.714758paragon sshd[31034]: Invalid user deploy from 170.210.203.201 port 36116 ... |
2020-08-24 09:41:03 |
| 113.88.208.147 | attackbotsspam | Unauthorized connection attempt from IP address 113.88.208.147 on Port 445(SMB) |
2020-08-24 09:30:23 |
| 159.89.1.19 | attackbotsspam | xmlrpc attack |
2020-08-24 12:20:45 |