城市(city): unknown
省份(region): unknown
国家(country): United States of America (the)
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 56.140.104.37
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33031
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;56.140.104.37. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2025020300 1800 900 604800 86400
;; Query time: 11 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 03 23:48:59 CST 2025
;; MSG SIZE rcvd: 106b'Host 37.104.140.56.in-addr.arpa not found: 2(SERVFAIL)
'server can't find 56.140.104.37.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 116.90.165.26 | attackbotsspam | 2020-08-17T20:22:01.596779abusebot-6.cloudsearch.cf sshd[31921]: Invalid user deploy from 116.90.165.26 port 35378 2020-08-17T20:22:01.602759abusebot-6.cloudsearch.cf sshd[31921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.90.165.26 2020-08-17T20:22:01.596779abusebot-6.cloudsearch.cf sshd[31921]: Invalid user deploy from 116.90.165.26 port 35378 2020-08-17T20:22:04.223080abusebot-6.cloudsearch.cf sshd[31921]: Failed password for invalid user deploy from 116.90.165.26 port 35378 ssh2 2020-08-17T20:27:16.680831abusebot-6.cloudsearch.cf sshd[31933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.90.165.26 user=root 2020-08-17T20:27:18.879421abusebot-6.cloudsearch.cf sshd[31933]: Failed password for root from 116.90.165.26 port 36610 ssh2 2020-08-17T20:30:19.190741abusebot-6.cloudsearch.cf sshd[31943]: Invalid user usuario from 116.90.165.26 port 47100 ... |
2020-08-18 05:23:21 |
| 65.31.127.80 | attackbotsspam | Aug 17 22:36:21 haigwepa sshd[22046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.31.127.80 Aug 17 22:36:23 haigwepa sshd[22046]: Failed password for invalid user mauro from 65.31.127.80 port 47534 ssh2 ... |
2020-08-18 05:20:33 |
| 106.54.40.151 | attackbots | Aug 17 17:25:59 ny01 sshd[27836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.40.151 Aug 17 17:26:01 ny01 sshd[27836]: Failed password for invalid user kyh from 106.54.40.151 port 34399 ssh2 Aug 17 17:31:19 ny01 sshd[28650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.40.151 |
2020-08-18 05:33:49 |
| 37.192.51.8 | attackspam | Port probing on unauthorized port 23 |
2020-08-18 05:19:03 |
| 106.55.170.47 | attackspam | 2020-08-17T20:56:32.277804shield sshd\[7121\]: Invalid user zhengang from 106.55.170.47 port 52840 2020-08-17T20:56:32.284608shield sshd\[7121\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.170.47 2020-08-17T20:56:33.881440shield sshd\[7121\]: Failed password for invalid user zhengang from 106.55.170.47 port 52840 ssh2 2020-08-17T20:59:42.459973shield sshd\[7761\]: Invalid user gfw from 106.55.170.47 port 33964 2020-08-17T20:59:42.468300shield sshd\[7761\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.55.170.47 |
2020-08-18 05:13:42 |
| 63.83.76.47 | attackbotsspam | Aug 17 21:48:35 online-web-1 postfix/smtpd[1736521]: connect from fetal.bicharter.com[63.83.76.47] Aug x@x Aug 17 21:48:41 online-web-1 postfix/smtpd[1736521]: disconnect from fetal.bicharter.com[63.83.76.47] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 Aug 17 21:49:00 online-web-1 postfix/smtpd[1739765]: connect from fetal.bicharter.com[63.83.76.47] Aug x@x Aug 17 21:49:06 online-web-1 postfix/smtpd[1739765]: disconnect from fetal.bicharter.com[63.83.76.47] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 Aug 17 21:52:07 online-web-1 postfix/smtpd[1736521]: connect from fetal.bicharter.com[63.83.76.47] Aug 17 21:52:12 online-web-1 postfix/smtpd[1737087]: connect from fetal.bicharter.com[63.83.76.47] Aug x@x Aug 17 21:52:13 online-web-1 postfix/smtpd[1736521]: disconnect from fetal.bicharter.com[63.83.76.47] ehlo=1 mail=1 rcpt=0/1 data=0/1 quhostname=1 commands=3/5 Aug x@x Aug 17 21:52:18 online-web-1 postfix/smtpd[1737087]: disconnect from fetal.b........ ------------------------------- |
2020-08-18 05:26:14 |
| 128.14.209.242 | attackspambots | REQUESTED PAGE: /webfig/ |
2020-08-18 04:57:08 |
| 86.63.66.230 | attackbots | Tried our host z. |
2020-08-18 05:32:48 |
| 167.99.170.91 | attackspam | 2020-08-17T21:11:40.595469shield sshd\[10278\]: Invalid user simone from 167.99.170.91 port 58730 2020-08-17T21:11:40.607932shield sshd\[10278\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.170.91 2020-08-17T21:11:42.525793shield sshd\[10278\]: Failed password for invalid user simone from 167.99.170.91 port 58730 ssh2 2020-08-17T21:15:46.215910shield sshd\[10820\]: Invalid user david from 167.99.170.91 port 39696 2020-08-17T21:15:46.225008shield sshd\[10820\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.170.91 |
2020-08-18 05:27:16 |
| 221.139.207.238 | attackbots | Aug 17 21:40:52 vm7 sshd[6437]: Bad protocol version identification '' from 221.139.207.238 port 32888 Aug 17 21:40:53 vm7 sshd[6438]: Invalid user NetLinx from 221.139.207.238 port 32931 Aug 17 21:40:54 vm7 sshd[6438]: Connection closed by 221.139.207.238 port 32931 [preauth] Aug 17 21:40:55 vm7 sshd[6440]: Connection closed by 221.139.207.238 port 33008 [preauth] Aug 17 21:40:57 vm7 sshd[6442]: Connection closed by 221.139.207.238 port 33115 [preauth] Aug 17 21:40:58 vm7 sshd[6444]: Connection closed by 221.139.207.238 port 33222 [preauth] Aug 17 21:41:00 vm7 sshd[6446]: Connection closed by 221.139.207.238 port 33308 [preauth] Aug 17 21:41:01 vm7 sshd[6448]: Connection closed by 221.139.207.238 port 33403 [preauth] Aug 17 21:41:03 vm7 sshd[6450]: Connection closed by 221.139.207.238 port 33494 [preauth] Aug 17 21:41:04 vm7 sshd[6457]: Connection closed by 221.139.207.238 port 33585 [preauth] Aug 17 21:41:06 vm7 sshd[6459]: Connection closed by 221.139.207.238 port 33........ ------------------------------- |
2020-08-18 05:22:00 |
| 3.0.183.183 | attackspam | C1,WP GET /comic/test/wp-login.php |
2020-08-18 05:23:50 |
| 34.68.127.147 | attack | Aug 17 23:01:37 home sshd[661988]: Invalid user tt from 34.68.127.147 port 47571 Aug 17 23:01:37 home sshd[661988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.68.127.147 Aug 17 23:01:37 home sshd[661988]: Invalid user tt from 34.68.127.147 port 47571 Aug 17 23:01:39 home sshd[661988]: Failed password for invalid user tt from 34.68.127.147 port 47571 ssh2 Aug 17 23:04:38 home sshd[663051]: Invalid user odoo from 34.68.127.147 port 45079 ... |
2020-08-18 05:34:06 |
| 24.220.51.123 | attackbots | Brute forcing email accounts |
2020-08-18 05:12:00 |
| 112.33.112.170 | attackspambots | (smtpauth) Failed SMTP AUTH login from 112.33.112.170 (CN/China/-): 5 in the last 3600 secs |
2020-08-18 05:30:57 |
| 206.189.155.76 | attackbotsspam | Attempting to access Wordpress login on a honeypot or private system. |
2020-08-18 05:13:27 |