120.29.157.254

基本信息:

城市(city): Jakarta

省份(region): Jakarta

国家(country): Indonesia

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): PT. HIPERNET INDODATA

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
120.29.157.118	attackspam	TCP (SYN) 120.29.157.118:42063 -> port 23, len 44	2020-06-17 17:16:19
120.29.157.118	attack	DATE:2020-06-10 15:19:59, IP:120.29.157.118, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-06-11 01:11:26
120.29.157.206	attack	May 4 20:26:02 system,error,critical: login failure for user admin from 120.29.157.206 via telnet May 4 20:26:03 system,error,critical: login failure for user ubnt from 120.29.157.206 via telnet May 4 20:26:04 system,error,critical: login failure for user root from 120.29.157.206 via telnet May 4 20:26:06 system,error,critical: login failure for user root from 120.29.157.206 via telnet May 4 20:26:07 system,error,critical: login failure for user root from 120.29.157.206 via telnet May 4 20:26:08 system,error,critical: login failure for user service from 120.29.157.206 via telnet May 4 20:26:09 system,error,critical: login failure for user administrator from 120.29.157.206 via telnet May 4 20:26:10 system,error,critical: login failure for user root from 120.29.157.206 via telnet May 4 20:26:11 system,error,critical: login failure for user root from 120.29.157.206 via telnet May 4 20:26:12 system,error,critical: login failure for user admin from 120.29.157.206 via telnet	2020-05-05 05:45:39
120.29.157.206	attackspam	Apr 28 12:07:09 system,error,critical: login failure for user admin from 120.29.157.206 via telnet Apr 28 12:07:10 system,error,critical: login failure for user admin from 120.29.157.206 via telnet Apr 28 12:07:11 system,error,critical: login failure for user admin from 120.29.157.206 via telnet Apr 28 12:07:13 system,error,critical: login failure for user root from 120.29.157.206 via telnet Apr 28 12:07:14 system,error,critical: login failure for user service from 120.29.157.206 via telnet Apr 28 12:07:15 system,error,critical: login failure for user mother from 120.29.157.206 via telnet Apr 28 12:07:16 system,error,critical: login failure for user root from 120.29.157.206 via telnet Apr 28 12:07:17 system,error,critical: login failure for user root from 120.29.157.206 via telnet Apr 28 12:07:18 system,error,critical: login failure for user root from 120.29.157.206 via telnet Apr 28 12:07:19 system,error,critical: login failure for user root from 120.29.157.206 via telnet	2020-04-29 03:52:16
120.29.157.253	attackspambots	Unauthorised access (Dec 30) SRC=120.29.157.253 LEN=52 TTL=108 ID=2692 DF TCP DPT=445 WINDOW=8192 SYN	2019-12-30 15:57:29
120.29.157.253	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2019-12-26 05:14:19
120.29.157.253	attackspam	Unauthorized connection attempt from IP address 120.29.157.253 on Port 445(SMB)	2019-12-15 21:26:51
120.29.157.253	attack	Unauthorized connection attempt from IP address 120.29.157.253 on Port 445(SMB)	2019-11-28 06:16:53
120.29.157.251	attackspambots	PHI,WP GET /wp-login.php	2019-08-21 05:25:28

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 120.29.157.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46629
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;120.29.157.254.			IN	A

;; AUTHORITY SECTION:
.			233	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040700 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sun Apr 07 21:06:20 +08 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 254.157.29.120.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 254.157.29.120.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
106.12.198.232	attack	Jun 1 19:17:58 gw1 sshd[7292]: Failed password for root from 106.12.198.232 port 52324 ssh2 ...	2020-06-01 23:46:14
1.22.179.29	attackbots	2019-10-24 07:45:04 1iNVvj-00085x-VG SMTP connection from $\[1.22.179.29\]$ \[1.22.179.29\]:23390 I=\[193.107.90.29\]:25 closed by DROP in ACL 2019-10-24 07:45:30 1iNVw9-00086U-J0 SMTP connection from $\[1.22.179.29\]$ \[1.22.179.29\]:23587 I=\[193.107.90.29\]:25 closed by DROP in ACL 2019-10-24 07:45:42 1iNVwL-00086e-HO SMTP connection from $\[1.22.179.29\]$ \[1.22.179.29\]:23685 I=\[193.107.90.29\]:25 closed by DROP in ACL ...	2020-06-01 23:44:00
45.83.29.122	attackspam	06/01/2020-11:21:02.532350 45.83.29.122 Protocol: 17 ET SCAN Sipvicious Scan	2020-06-01 23:38:34
85.87.36.208	attackspambots	Lines containing failures of 85.87.36.208 (max 1000) Jun 1 13:57:59 server sshd[14957]: Connection from 85.87.36.208 port 33284 on 62.116.165.82 port 22 Jun 1 13:58:00 server sshd[14958]: Connection from 85.87.36.208 port 33300 on 62.116.165.82 port 22 Jun 1 13:58:00 server sshd[14957]: Invalid user pi from 85.87.36.208 port 33284 Jun 1 13:58:00 server sshd[14958]: Invalid user pi from 85.87.36.208 port 33300 Jun 1 13:58:00 server sshd[14958]: Connection closed by 85.87.36.208 port 33300 [preauth] Jun 1 13:58:00 server sshd[14957]: Connection closed by 85.87.36.208 port 33284 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=85.87.36.208	2020-06-01 23:20:38
103.252.168.75	attackspambots	Jun 1 00:06:41 serwer sshd\[17227\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.252.168.75 user=root Jun 1 00:06:44 serwer sshd\[17227\]: Failed password for root from 103.252.168.75 port 42004 ssh2 Jun 1 00:13:23 serwer sshd\[18043\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.252.168.75 user=root Jun 1 00:33:29 serwer sshd\[20030\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.252.168.75 user=root Jun 1 00:33:31 serwer sshd\[20030\]: Failed password for root from 103.252.168.75 port 55480 ssh2 Jun 1 00:40:08 serwer sshd\[20872\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.252.168.75 user=root Jun 1 01:00:09 serwer sshd\[22895\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.252.168.75 user=root Jun 1 01:00:12 serwer sshd ...	2020-06-01 23:17:30
198.108.66.226	attackspam	firewall-block, port(s): 12358/tcp	2020-06-01 23:19:09
134.175.17.32	attack	SSH Honeypot -> SSH Bruteforce / Login	2020-06-01 23:52:20
59.120.227.134	attackbotsspam	SSH Brute-Forcing (server1)	2020-06-01 23:18:49
222.186.30.167	attackspam	Jun 1 20:47:45 gw1 sshd[9561]: Failed password for root from 222.186.30.167 port 60967 ssh2 ...	2020-06-01 23:49:46
106.52.137.134	attack	Jun 1 12:56:46 fwservlet sshd[14913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.137.134 user=r.r Jun 1 12:56:48 fwservlet sshd[14913]: Failed password for r.r from 106.52.137.134 port 39430 ssh2 Jun 1 12:56:49 fwservlet sshd[14913]: Received disconnect from 106.52.137.134 port 39430:11: Bye Bye [preauth] Jun 1 12:56:49 fwservlet sshd[14913]: Disconnected from 106.52.137.134 port 39430 [preauth] Jun 1 13:01:57 fwservlet sshd[15033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.137.134 user=r.r Jun 1 13:02:00 fwservlet sshd[15033]: Failed password for r.r from 106.52.137.134 port 36138 ssh2 Jun 1 13:02:00 fwservlet sshd[15033]: Received disconnect from 106.52.137.134 port 36138:11: Bye Bye [preauth] Jun 1 13:02:00 fwservlet sshd[15033]: Disconnected from 106.52.137.134 port 36138 [preauth] Jun 1 13:06:36 fwservlet sshd[15125]: pam_unix(sshd:auth): authenticati........ -------------------------------	2020-06-01 23:41:00
51.75.91.203	attackspambots	(mod_security) mod_security (id:210492) triggered by 51.75.91.203 (DE/Germany/-): 5 in the last 3600 secs	2020-06-01 23:50:59
49.233.145.188	attackbotsspam	$f2bV_matches	2020-06-01 23:36:15
197.2.219.224	attackspam	Automatic report - XMLRPC Attack	2020-06-01 23:35:02
1.250.14.143	attackspambots	2020-03-13 14:33:51 H=$\[1.250.14.143\]$ \[1.250.14.143\]:41698 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2020-03-13 14:34:11 H=$\[1.250.14.143\]$ \[1.250.14.143\]:41792 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2020-03-13 14:34:29 H=$\[1.250.14.143\]$ \[1.250.14.143\]:41868 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-06-01 23:19:37
198.199.115.94	attackbotsspam	Jun 1 16:56:25 hosting sshd[1098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.199.115.94 user=root Jun 1 16:56:27 hosting sshd[1098]: Failed password for root from 198.199.115.94 port 40536 ssh2 ...	2020-06-01 23:44:55

最近上报的IP列表

180.168.76.230	113.120.142.170	37.79.41.120	149.202.75.205
190.119.217.82	116.96.163.248	79.107.89.144	116.203.100.247
58.186.201.219	115.248.198.106	115.133.11.51	5.103.120.17
192.163.224.116	201.90.79.194	175.204.125.198	72.89.243.220
80.211.61.193	159.224.220.63	202.162.196.135	198.20.99.130