59.125.56.68 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Republic of China (ROC)

运营商(isp): Chunghwa Telecom Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Mar 17 05:25:18 * sshd[3098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.125.56.68 Mar 17 05:25:20 * sshd[3098]: Failed password for invalid user debian-spamd from 59.125.56.68 port 36489 ssh2	2020-03-17 15:30:33

类型

评论内容

时间

attack

Mar 17 05:25:18 * sshd[3098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.125.56.68
Mar 17 05:25:20 * sshd[3098]: Failed password for invalid user debian-spamd from 59.125.56.68 port 36489 ssh2

2020-03-17 15:30:33

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 59.125.56.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1129
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;59.125.56.68.			IN	A

;; AUTHORITY SECTION:
.			543	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012800 1800 900 604800 86400

;; Query time: 118 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 28 23:25:58 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

68.56.125.59.in-addr.arpa domain name pointer mail.superfm99-1.com.tw.
68.56.125.59.in-addr.arpa domain name pointer superfm99-1.com.tw.
68.56.125.59.in-addr.arpa domain name pointer superfm90-5.com.tw.
68.56.125.59.in-addr.arpa domain name pointer mail.superfm98-5.com.tw.
68.56.125.59.in-addr.arpa domain name pointer superfm98-5.com.tw.
68.56.125.59.in-addr.arpa domain name pointer mail.superfm90-5.com.tw.
68.56.125.59.in-addr.arpa domain name pointer mail.superfm96-9.com.tw.
68.56.125.59.in-addr.arpa domain name pointer superfm96-9.com.tw.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
68.56.125.59.in-addr.arpa	name = mail.superfm90-5.com.tw.
68.56.125.59.in-addr.arpa	name = mail.superfm96-9.com.tw.
68.56.125.59.in-addr.arpa	name = superfm96-9.com.tw.
68.56.125.59.in-addr.arpa	name = mail.superfm99-1.com.tw.
68.56.125.59.in-addr.arpa	name = superfm99-1.com.tw.
68.56.125.59.in-addr.arpa	name = superfm90-5.com.tw.
68.56.125.59.in-addr.arpa	name = mail.superfm98-5.com.tw.
68.56.125.59.in-addr.arpa	name = superfm98-5.com.tw.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
66.70.142.220	attackbots	Mar 1 20:39:33 game-panel sshd[27116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.70.142.220 Mar 1 20:39:35 game-panel sshd[27116]: Failed password for invalid user ertu from 66.70.142.220 port 35466 ssh2 Mar 1 20:48:37 game-panel sshd[27396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.70.142.220	2020-03-02 05:03:22
138.122.202.200	attackspam	Mar 1 14:16:45 MK-Soft-VM7 sshd[4915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200 Mar 1 14:16:47 MK-Soft-VM7 sshd[4915]: Failed password for invalid user andoria from 138.122.202.200 port 48186 ssh2 ...	2020-03-02 05:09:52
54.37.23.16	attackbotsspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/54.37.23.16/ FR - 1H : (28) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : FR NAME ASN : ASN16276 IP : 54.37.23.16 CIDR : 54.37.0.0/16 PREFIX COUNT : 132 UNIQUE IP COUNT : 3052544 ATTACKS DETECTED ASN16276 : 1H - 3 3H - 5 6H - 6 12H - 7 24H - 7 DateTime : 2020-03-01 14:16:57 INFO : Looking for resource vulnerabilities 403 Detected and Blocked by ADMIN - data recovery	2020-03-02 05:05:16
103.24.20.82	attackspambots	Unauthorized connection attempt from IP address 103.24.20.82 on Port 445(SMB)	2020-03-02 05:31:50
106.12.197.232	attackspam	Mar 1 20:24:30 localhost sshd[60750]: Invalid user testftp from 106.12.197.232 port 57398 Mar 1 20:24:30 localhost sshd[60750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.197.232 Mar 1 20:24:30 localhost sshd[60750]: Invalid user testftp from 106.12.197.232 port 57398 Mar 1 20:24:32 localhost sshd[60750]: Failed password for invalid user testftp from 106.12.197.232 port 57398 ssh2 Mar 1 20:31:12 localhost sshd[61529]: Invalid user rakesh from 106.12.197.232 port 41250 ...	2020-03-02 04:56:37
168.235.109.89	attackspambots	Chat Spam	2020-03-02 04:57:54
122.51.142.251	attackspambots	$f2bV_matches	2020-03-02 05:00:49
213.154.80.21	attackbotsspam	Mar 1 14:15:03 srv01 sshd[17957]: Did not receive identification string from 213.154.80.21 port 47225 Mar 1 14:16:11 srv01 sshd[18018]: Did not receive identification string from 213.154.80.21 port 60560 Mar 1 14:16:54 srv01 sshd[18037]: Did not receive identification string from 213.154.80.21 port 37007 ...	2020-03-02 05:07:37
183.83.172.113	attack	Unauthorized connection attempt from IP address 183.83.172.113 on Port 445(SMB)	2020-03-02 05:27:06
46.123.254.89	attackbotsspam	$f2bV_matches	2020-03-02 04:56:12
80.182.141.92	attackspam	Mar 1 14:16:06 grey postfix/smtpd\[23581\]: NOQUEUE: reject: RCPT from host92-141-dynamic.182-80-r.retail.telecomitalia.it\[80.182.141.92\]: 554 5.7.1 Service unavailable\; Client host \[80.182.141.92\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?80.182.141.92\; from=\ to=\ proto=ESMTP helo=\ ...	2020-03-02 05:26:43
122.202.48.251	attackbots	SSH Brute-Force Attack	2020-03-02 05:14:00
149.56.228.253	attackbotsspam	Portscan or hack attempt detected by psad/fwsnort	2020-03-02 04:58:11
74.194.208.106	attackbotsspam	Unauthorized connection attempt detected from IP address 74.194.208.106 to port 23 [J]	2020-03-02 05:08:47
188.166.236.211	attack	Mar 1 21:21:14 ns381471 sshd[634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.236.211 Mar 1 21:21:16 ns381471 sshd[634]: Failed password for invalid user linuxacademy from 188.166.236.211 port 55135 ssh2	2020-03-02 04:55:18

最近上报的IP列表

177.130.247.12	177.84.155.193	177.25.215.70	172.105.92.229
117.146.173.98	116.48.140.186	111.200.54.170	103.203.210.129
103.119.254.134	99.82.198.180	95.239.13.96	86.57.82.173
77.42.94.214	58.220.1.134	45.239.232.126	45.42.107.235
42.234.112.236	41.218.115.26	218.255.229.109	203.218.64.83