城市(city): unknown
省份(region): unknown
国家(country): United States of America
运营商(isp): QuadraNet Enterprises LLC
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): Data Center/Web Hosting/Transit
| 类型 | 评论内容 | 时间 |
|---|---|---|
| attack | Feb 25 19:59:26 WHD8 postfix/smtpd\[27531\]: warning: unknown\[104.129.2.67\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 25 19:59:33 WHD8 postfix/smtpd\[27538\]: warning: unknown\[104.129.2.67\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Feb 25 19:59:49 WHD8 postfix/smtpd\[27375\]: warning: unknown\[104.129.2.67\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-05-06 04:44:17 |
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 104.129.29.92 | attack | Unauthorized IMAP connection attempt |
2020-08-08 15:59:58 |
| 104.129.25.27 | attackbotsspam | Brute forcing email accounts |
2020-07-27 00:50:00 |
| 104.129.2.174 | attack | Jun 24 03:39:10 mail postfix/postscreen[10005]: DNSBL rank 4 for [104.129.2.174]:37414 ... |
2020-07-14 13:51:10 |
| 104.129.2.174 | attack | 3 failed Login Attempts - (Email Service) |
2020-06-21 21:23:32 |
| 104.129.2.80 | attack | $f2bV_matches |
2020-05-16 18:36:57 |
| 104.129.2.168 | attackbotsspam | Brute forcing email accounts |
2020-03-03 09:12:47 |
| 104.129.204.80 | attackproxy | appears to ipv6 to ipv4 redirect ssl with dns cache poisoning |
2020-02-11 02:35:32 |
| 104.129.204.79 | attackbots | 20/1/11@23:57:20: FAIL: Alarm-Network address from=104.129.204.79 ... |
2020-01-12 14:04:23 |
| 104.129.29.26 | attackspambots | fire |
2019-11-17 02:35:58 |
| 104.129.200.69 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-11 23:50:59,525 INFO [amun_request_handler] PortScan Detected on Port: 445 (104.129.200.69) |
2019-07-12 16:09:05 |
| 104.129.202.132 | attack | NAME : ZSCALER-QLA1 CIDR : 104.129.198.0/24 DDoS attack USA - California - block certain countries :) IP: 104.129.202.132 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl |
2019-07-01 05:47:39 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.129.2.67
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59482
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.129.2.67. IN A
;; AUTHORITY SECTION:
. 582 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020050501 1800 900 604800 86400
;; Query time: 91 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 06 04:44:13 CST 2020
;; MSG SIZE rcvd: 116
67.2.129.104.in-addr.arpa domain name pointer 104.129.2.67.static.quadranet.com.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
67.2.129.104.in-addr.arpa name = 104.129.2.67.static.quadranet.com.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 190.202.150.130 | attackspam | Unauthorized connection attempt from IP address 190.202.150.130 on Port 445(SMB) |
2020-01-15 02:02:01 |
| 176.57.79.145 | attack | Unauthorized connection attempt detected from IP address 176.57.79.145 to port 23 [J] |
2020-01-15 01:59:12 |
| 59.92.179.197 | attack | Unauthorized connection attempt from IP address 59.92.179.197 on Port 445(SMB) |
2020-01-15 02:24:36 |
| 47.99.117.128 | attack | Wordpress login scanning |
2020-01-15 02:00:25 |
| 167.71.197.10 | attackbots | Jan 14 08:27:58 newdogma sshd[29160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.197.10 user=r.r Jan 14 08:28:00 newdogma sshd[29160]: Failed password for r.r from 167.71.197.10 port 53426 ssh2 Jan 14 08:28:00 newdogma sshd[29160]: Received disconnect from 167.71.197.10 port 53426:11: Bye Bye [preauth] Jan 14 08:28:00 newdogma sshd[29160]: Disconnected from 167.71.197.10 port 53426 [preauth] Jan 14 08:31:51 newdogma sshd[29246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.197.10 user=r.r Jan 14 08:31:53 newdogma sshd[29246]: Failed password for r.r from 167.71.197.10 port 43584 ssh2 Jan 14 08:31:53 newdogma sshd[29246]: Received disconnect from 167.71.197.10 port 43584:11: Bye Bye [preauth] Jan 14 08:31:53 newdogma sshd[29246]: Disconnected from 167.71.197.10 port 43584 [preauth] Jan 14 08:41:02 newdogma sshd[29459]: Invalid user test from 167.71.197.10 port 55320 Ja........ ------------------------------- |
2020-01-15 01:55:46 |
| 180.76.242.171 | attack | Unauthorized connection attempt detected from IP address 180.76.242.171 to port 2220 [J] |
2020-01-15 02:23:55 |
| 184.105.139.121 | attack | RDP Scan |
2020-01-15 02:07:18 |
| 158.181.133.156 | attack | Unauthorized connection attempt from IP address 158.181.133.156 on Port 445(SMB) |
2020-01-15 02:16:32 |
| 182.253.205.29 | attackspambots | Unauthorised access (Jan 14) SRC=182.253.205.29 LEN=44 TTL=240 ID=54098 TCP DPT=139 WINDOW=1024 SYN Unauthorised access (Jan 13) SRC=182.253.205.29 LEN=44 TTL=240 ID=52282 TCP DPT=139 WINDOW=1024 SYN |
2020-01-15 02:07:00 |
| 60.169.95.146 | attackbots | Brute force attempt |
2020-01-15 02:08:40 |
| 222.239.78.88 | attackbots | Jan 14 17:54:46 minden010 sshd[10234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.239.78.88 Jan 14 17:54:48 minden010 sshd[10234]: Failed password for invalid user ftp_user from 222.239.78.88 port 39569 ssh2 Jan 14 17:56:01 minden010 sshd[10637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.239.78.88 ... |
2020-01-15 01:51:45 |
| 182.71.221.78 | attackspam | Jan 14 10:00:04 vps46666688 sshd[5559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.71.221.78 Jan 14 10:00:05 vps46666688 sshd[5559]: Failed password for invalid user angelina from 182.71.221.78 port 48566 ssh2 ... |
2020-01-15 02:15:49 |
| 106.12.55.131 | attackbots | Jan 14 13:51:34 Invalid user spider from 106.12.55.131 port 55142 |
2020-01-15 02:25:44 |
| 187.95.128.138 | attack | Unauthorized connection attempt detected from IP address 187.95.128.138 to port 445 |
2020-01-15 02:09:05 |
| 129.211.128.20 | attack | Jan 11 14:32:16 git-ovh sshd[2664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.128.20 Jan 11 14:32:18 git-ovh sshd[2664]: Failed password for invalid user ftpuser from 129.211.128.20 port 58994 ssh2 ... |
2020-01-15 02:06:36 |