104.129.5.143 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): QuadraNet Enterprises LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	May 21 23:58:48 server1 sshd\[19050\]: Invalid user fuy from 104.129.5.143 May 21 23:58:48 server1 sshd\[19050\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.129.5.143 May 21 23:58:50 server1 sshd\[19050\]: Failed password for invalid user fuy from 104.129.5.143 port 57486 ssh2 May 22 00:04:38 server1 sshd\[20863\]: Invalid user ncs from 104.129.5.143 May 22 00:04:38 server1 sshd\[20863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.129.5.143 ...	2020-05-22 19:29:57
attackbots	Apr 30 18:16:08 gw1 sshd[12331]: Failed password for root from 104.129.5.143 port 49538 ssh2 ...	2020-04-30 22:09:32

类型

评论内容

时间

attack

May 21 23:58:48 server1 sshd\[19050\]: Invalid user fuy from 104.129.5.143
May 21 23:58:48 server1 sshd\[19050\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.129.5.143 
May 21 23:58:50 server1 sshd\[19050\]: Failed password for invalid user fuy from 104.129.5.143 port 57486 ssh2
May 22 00:04:38 server1 sshd\[20863\]: Invalid user ncs from 104.129.5.143
May 22 00:04:38 server1 sshd\[20863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.129.5.143 
...

2020-05-22 19:29:57

attackbots

Apr 30 18:16:08 gw1 sshd[12331]: Failed password for root from 104.129.5.143 port 49538 ssh2
...

2020-04-30 22:09:32

相同子网IP讨论:

IP	类型	评论内容	时间
104.129.5.49	attackspambots	SSH login attempts.	2020-06-21 15:14:41
104.129.5.49	attackbots	Jun 18 10:07:44 our-server-hostname sshd[22531]: Address 104.129.5.49 maps to 104.129.5.49.static.quadranet.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jun 18 10:07:44 our-server-hostname sshd[22531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.129.5.49 user=r.r Jun 18 10:07:46 our-server-hostname sshd[22531]: Failed password for r.r from 104.129.5.49 port 56645 ssh2 Jun 18 10:24:08 our-server-hostname sshd[26662]: Address 104.129.5.49 maps to 104.129.5.49.static.quadranet.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jun 18 10:24:08 our-server-hostname sshd[26662]: Invalid user hy from 104.129.5.49 Jun 18 10:24:08 our-server-hostname sshd[26662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.129.5.49 Jun 18 10:24:11 our-server-hostname sshd[26662]: Failed password for invalid user hy from 104.129.5.49 port 46546 s........ -------------------------------	2020-06-21 00:38:43
104.129.5.49	attackbots	prod8 ...	2020-06-19 14:13:56
104.129.53.195	attackbotsspam	WordPress XMLRPC scan :: 104.129.53.195 0.136 BYPASS [15/Oct/2019:14:45:48 1100] www.[censored_1] "POST /xmlrpc.php HTTP/1.1" 200 382 "https://www.[censored_1]/" "PHP/7.2.14"	2019-10-15 18:06:24
104.129.58.240	attackspam	NAME : QUADRANET-ATLANTA CIDR : 104.129.24.0/23 \| STATUS : 200 ROBOT {Looking for resource vulnerabilities} DDoS Attack USA - Georgia - block certain countries :) IP: 104.129.58.240 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl	2019-06-22 21:01:48
104.129.58.202	attackbots	NAME : QUADRANET-ATLANTA CIDR : 104.129.24.0/23 \| STATUS : 200 ROBOT {Looking for resource vulnerabilities} DDoS Attack USA - Georgia - block certain countries :) IP: 104.129.58.202 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl	2019-06-22 06:34:28

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.129.5.143
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57546
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.129.5.143.			IN	A

;; AUTHORITY SECTION:
.			565	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020043000 1800 900 604800 86400

;; Query time: 303 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Apr 30 22:09:26 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

143.5.129.104.in-addr.arpa domain name pointer 104.129.5.143.static.quadranet.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
143.5.129.104.in-addr.arpa	name = 104.129.5.143.static.quadranet.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
46.38.144.32	attackspam	Sep 21 17:39:51 relay postfix/smtpd\[27687\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 21 17:40:17 relay postfix/smtpd\[22654\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 21 17:42:15 relay postfix/smtpd\[27687\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 21 17:42:42 relay postfix/smtpd\[824\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 21 17:44:41 relay postfix/smtpd\[23396\]: warning: unknown\[46.38.144.32\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-09-21 23:48:37
179.214.192.141	attackspambots	Sep 21 05:21:07 hcbb sshd\[2051\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.214.192.141 user=root Sep 21 05:21:10 hcbb sshd\[2051\]: Failed password for root from 179.214.192.141 port 24393 ssh2 Sep 21 05:27:28 hcbb sshd\[2593\]: Invalid user col from 179.214.192.141 Sep 21 05:27:28 hcbb sshd\[2593\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.214.192.141 Sep 21 05:27:30 hcbb sshd\[2593\]: Failed password for invalid user col from 179.214.192.141 port 55193 ssh2	2019-09-21 23:28:17
115.78.8.83	attackspam	Sep 21 17:05:30 markkoudstaal sshd[29050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.78.8.83 Sep 21 17:05:32 markkoudstaal sshd[29050]: Failed password for invalid user rm from 115.78.8.83 port 58565 ssh2 Sep 21 17:11:05 markkoudstaal sshd[29667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.78.8.83	2019-09-21 23:24:51
80.82.65.60	attackbots	Sep 21 16:46:25 relay dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=80.82.65.60, lip=176.9.177.164, session=\ Sep 21 16:47:23 relay dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=80.82.65.60, lip=176.9.177.164, session=\ Sep 21 16:50:20 relay dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=80.82.65.60, lip=176.9.177.164, session=\<4vkmThGTnHpQUkE8\> Sep 21 16:51:38 relay dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=80.82.65.60, lip=176.9.177.164, session=\<89jRUhGT3K9QUkE8\> Sep 21 16:52:43 relay dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=80.82.65.60, lip=176.9.177.164, sessio ...	2019-09-21 23:17:48
157.230.103.135	attackbotsspam	2019-09-21T12:56:05.053065abusebot-4.cloudsearch.cf sshd\[16376\]: Invalid user us from 157.230.103.135 port 51644	2019-09-21 23:50:02
81.130.234.235	attackspam	Sep 21 03:43:08 php1 sshd\[11659\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.130.234.235 user=root Sep 21 03:43:09 php1 sshd\[11659\]: Failed password for root from 81.130.234.235 port 42924 ssh2 Sep 21 03:52:39 php1 sshd\[12605\]: Invalid user nathalie from 81.130.234.235 Sep 21 03:52:39 php1 sshd\[12605\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.130.234.235 Sep 21 03:52:40 php1 sshd\[12605\]: Failed password for invalid user nathalie from 81.130.234.235 port 46950 ssh2	2019-09-21 23:26:46
198.50.131.21	attack	MultiHost/MultiPort Probe, Scan, Hack -	2019-09-21 23:37:57
104.248.121.67	attackspambots	Sep 21 05:08:56 lcprod sshd\[1403\]: Invalid user lle from 104.248.121.67 Sep 21 05:08:56 lcprod sshd\[1403\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.121.67 Sep 21 05:08:58 lcprod sshd\[1403\]: Failed password for invalid user lle from 104.248.121.67 port 32841 ssh2 Sep 21 05:13:21 lcprod sshd\[1912\]: Invalid user out from 104.248.121.67 Sep 21 05:13:21 lcprod sshd\[1912\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.121.67	2019-09-21 23:14:29
114.118.91.32	attackbots	Sep 21 15:57:17 tux-35-217 sshd\[25900\]: Invalid user adm1n from 114.118.91.32 port 38176 Sep 21 15:57:17 tux-35-217 sshd\[25900\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.118.91.32 Sep 21 15:57:19 tux-35-217 sshd\[25900\]: Failed password for invalid user adm1n from 114.118.91.32 port 38176 ssh2 Sep 21 16:03:48 tux-35-217 sshd\[25962\]: Invalid user mona from 114.118.91.32 port 50990 Sep 21 16:03:48 tux-35-217 sshd\[25962\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.118.91.32 ...	2019-09-21 23:46:51
49.68.9.86	attackbotsspam	Time: Sat Sep 21 10:12:30 2019 -0400 IP: 49.68.9.86 (CN/China/-) Failures: 10 (ftpd) Interval: 3600 seconds Blocked: Permanent Block	2019-09-21 23:14:14
167.71.3.163	attack	Repeated brute force against a port	2019-09-21 23:38:50
217.32.246.90	attack	Sep 21 09:25:33 ny01 sshd[32706]: Failed password for root from 217.32.246.90 port 44972 ssh2 Sep 21 09:29:36 ny01 sshd[1156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.32.246.90 Sep 21 09:29:38 ny01 sshd[1156]: Failed password for invalid user gunter from 217.32.246.90 port 58094 ssh2	2019-09-21 23:11:57
111.230.53.144	attackbotsspam	Sep 21 15:44:32 legacy sshd[20496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.53.144 Sep 21 15:44:34 legacy sshd[20496]: Failed password for invalid user appowner from 111.230.53.144 port 32886 ssh2 Sep 21 15:48:39 legacy sshd[20574]: Failed password for root from 111.230.53.144 port 60354 ssh2 ...	2019-09-21 23:26:07
134.175.28.156	attackbotsspam	Sep 21 17:00:39 meumeu sshd[32381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.28.156 Sep 21 17:00:41 meumeu sshd[32381]: Failed password for invalid user adminadmin from 134.175.28.156 port 51114 ssh2 Sep 21 17:07:57 meumeu sshd[857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.28.156 ...	2019-09-21 23:16:21
106.15.39.229	attack	Flask-IPban - exploit URL requested:/TP/public/index.php	2019-09-21 23:45:55

最近上报的IP列表

198.211.123.150	178.128.106.128	122.51.42.182	188.170.125.124
134.175.127.136	94.143.108.198	5.217.138.72	247.179.92.120
184.22.229.214	182.84.87.97	123.18.76.146	27.66.194.134
123.21.93.28	148.233.37.50	122.51.141.194	61.255.9.13
37.238.37.10	64.225.61.86	172.217.10.101	52.66.216.4