121.229.1.13 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Jiangsu Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Jan 1 08:44:04 host postfix/smtpd[51545]: warning: unknown[121.229.1.13]: SASL LOGIN authentication failed: authentication failure Jan 1 08:44:07 host postfix/smtpd[51545]: warning: unknown[121.229.1.13]: SASL LOGIN authentication failed: authentication failure ...	2020-01-01 16:09:07
attackbots	Time: Fri Dec 27 04:45:29 2019 -0300 IP: 121.229.1.13 (CN/China/13.1.229.121.broad.nj.js.dynamic.163data.com.cn) Failures: 5 (smtpauth) Interval: 3600 seconds Blocked: Permanent Block	2019-12-27 16:03:53

类型

评论内容

时间

attack

Jan  1 08:44:04 host postfix/smtpd[51545]: warning: unknown[121.229.1.13]: SASL LOGIN authentication failed: authentication failure
Jan  1 08:44:07 host postfix/smtpd[51545]: warning: unknown[121.229.1.13]: SASL LOGIN authentication failed: authentication failure
...

2020-01-01 16:09:07

attackbots

Time:     Fri Dec 27 04:45:29 2019 -0300
IP:       121.229.1.13 (CN/China/13.1.229.121.broad.nj.js.dynamic.163data.com.cn)
Failures: 5 (smtpauth)
Interval: 3600 seconds
Blocked:  Permanent Block

2019-12-27 16:03:53

相同子网IP讨论:

IP	类型	评论内容	时间
121.229.10.130	attackspambots	Oct 12 13:01:57 our-server-hostname sshd[3055]: Invalid user eq from 121.229.10.130 Oct 12 13:01:57 our-server-hostname sshd[3055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.10.130 Oct 12 13:01:59 our-server-hostname sshd[3055]: Failed password for invalid user eq from 121.229.10.130 port 50182 ssh2 Oct 12 13:17:53 our-server-hostname sshd[5584]: Invalid user daniel from 121.229.10.130 Oct 12 13:17:53 our-server-hostname sshd[5584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.10.130 Oct 12 13:17:55 our-server-hostname sshd[5584]: Failed password for invalid user daniel from 121.229.10.130 port 40750 ssh2 Oct 12 13:21:20 our-server-hostname sshd[6327]: Invalid user myra from 121.229.10.130 Oct 12 13:21:20 our-server-hostname sshd[6327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.10.130 ........ ----------------------------------------------- https:/	2020-10-14 08:18:29
121.229.198.112	attackbotsspam	Unauthorized connection attempt detected from IP address 121.229.198.112 to port 80 [T]	2020-08-29 21:16:45
121.229.15.146	attack	Aug 28 10:01:17 * sshd[4461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.15.146 Aug 28 10:01:19 * sshd[4461]: Failed password for invalid user tyler from 121.229.15.146 port 51266 ssh2	2020-08-28 16:30:51
121.229.19.200	attackbots	Aug 4 11:18:09 mockhub sshd[17174]: Failed password for root from 121.229.19.200 port 49438 ssh2 ...	2020-08-05 02:31:11
121.229.13.181	attackbotsspam	Jul 30 05:50:08 home sshd[743256]: Invalid user zhengyongfa from 121.229.13.181 port 41608 Jul 30 05:50:08 home sshd[743256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.13.181 Jul 30 05:50:08 home sshd[743256]: Invalid user zhengyongfa from 121.229.13.181 port 41608 Jul 30 05:50:09 home sshd[743256]: Failed password for invalid user zhengyongfa from 121.229.13.181 port 41608 ssh2 Jul 30 05:53:28 home sshd[744361]: Invalid user rhino from 121.229.13.181 port 37592 ...	2020-07-30 14:50:39
121.229.19.200	attackspam	2020-07-30T03:54:29.291679randservbullet-proofcloud-66.localdomain sshd[604]: Invalid user wangpei from 121.229.19.200 port 41170 2020-07-30T03:54:29.295746randservbullet-proofcloud-66.localdomain sshd[604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.19.200 2020-07-30T03:54:29.291679randservbullet-proofcloud-66.localdomain sshd[604]: Invalid user wangpei from 121.229.19.200 port 41170 2020-07-30T03:54:30.774069randservbullet-proofcloud-66.localdomain sshd[604]: Failed password for invalid user wangpei from 121.229.19.200 port 41170 ssh2 ...	2020-07-30 13:48:46
121.229.15.146	attackspam	prod11 ...	2020-07-28 05:23:25
121.229.133.52	attackspambots	TCP (SYN) 121.229.133.52:64610 -> port 23, len 40	2020-07-22 21:08:47
121.229.14.66	attack	Jul 19 02:02:52 ny01 sshd[20145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.14.66 Jul 19 02:02:54 ny01 sshd[20145]: Failed password for invalid user kafka from 121.229.14.66 port 51254 ssh2 Jul 19 02:05:56 ny01 sshd[20584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.14.66	2020-07-19 14:15:23
121.229.13.181	attackspambots	(sshd) Failed SSH login from 121.229.13.181 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 18 22:43:33 s1 sshd[24074]: Invalid user fleet from 121.229.13.181 port 57738 Jul 18 22:43:36 s1 sshd[24074]: Failed password for invalid user fleet from 121.229.13.181 port 57738 ssh2 Jul 18 22:49:50 s1 sshd[24201]: Invalid user hvy from 121.229.13.181 port 60862 Jul 18 22:49:52 s1 sshd[24201]: Failed password for invalid user hvy from 121.229.13.181 port 60862 ssh2 Jul 18 22:52:15 s1 sshd[24269]: Invalid user btt from 121.229.13.181 port 52266	2020-07-19 03:58:28
121.229.14.66	attackspam	sshd: Failed password for invalid user .... from 121.229.14.66 port 38360 ssh2 (4 attempts)	2020-07-16 19:51:53
121.229.13.181	attack	Jul 14 00:59:29 george sshd[29794]: Failed password for invalid user check from 121.229.13.181 port 49880 ssh2 Jul 14 01:02:36 george sshd[29861]: Invalid user www from 121.229.13.181 port 42830 Jul 14 01:02:36 george sshd[29861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.13.181 Jul 14 01:02:38 george sshd[29861]: Failed password for invalid user www from 121.229.13.181 port 42830 ssh2 Jul 14 01:05:47 george sshd[29918]: Invalid user system from 121.229.13.181 port 35778 ...	2020-07-14 19:03:15
121.229.14.66	attack	Automatic report BANNED IP	2020-07-13 07:37:15
121.229.13.181	attackspambots	Jul 12 06:34:20 scw-6657dc sshd[12335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.13.181 Jul 12 06:34:20 scw-6657dc sshd[12335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.13.181 Jul 12 06:34:22 scw-6657dc sshd[12335]: Failed password for invalid user ch from 121.229.13.181 port 44916 ssh2 ...	2020-07-12 15:20:28
121.229.15.146	attack	Repeated brute force against a port	2020-07-11 07:08:37

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.229.1.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49619
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;121.229.1.13.			IN	A

;; AUTHORITY SECTION:
.			309	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122700 1800 900 604800 86400

;; Query time: 337 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Dec 27 16:03:49 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

13.1.229.121.in-addr.arpa domain name pointer 13.1.229.121.broad.nj.js.dynamic.163data.com.cn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
13.1.229.121.in-addr.arpa	name = 13.1.229.121.broad.nj.js.dynamic.163data.com.cn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
189.17.186.102	attackbotsspam	Unauthorized connection attempt from IP address 189.17.186.102 on Port 445(SMB)	2020-06-07 00:21:46
49.36.142.81	attackbots	Unauthorized connection attempt from IP address 49.36.142.81 on Port 445(SMB)	2020-06-07 00:43:42
104.248.92.124	attackbotsspam	Jun 6 10:36:37 firewall sshd[18760]: Failed password for root from 104.248.92.124 port 34124 ssh2 Jun 6 10:40:10 firewall sshd[18806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.92.124 user=root Jun 6 10:40:12 firewall sshd[18806]: Failed password for root from 104.248.92.124 port 37692 ssh2 ...	2020-06-07 00:26:05
147.30.163.187	attackbotsspam	Unauthorized connection attempt from IP address 147.30.163.187 on Port 445(SMB)	2020-06-07 00:31:39
182.150.44.41	attack	Jun 6 04:24:48 php1 sshd\[15793\]: Invalid user Passw0rdp321\\r from 182.150.44.41 Jun 6 04:24:48 php1 sshd\[15793\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.150.44.41 Jun 6 04:24:50 php1 sshd\[15793\]: Failed password for invalid user Passw0rdp321\\r from 182.150.44.41 port 46564 ssh2 Jun 6 04:26:11 php1 sshd\[15883\]: Invalid user nihao123\\r from 182.150.44.41 Jun 6 04:26:11 php1 sshd\[15883\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.150.44.41	2020-06-07 00:21:18
175.24.107.68	attackspam	Jun 6 18:18:39 ovpn sshd\[557\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.107.68 user=root Jun 6 18:18:41 ovpn sshd\[557\]: Failed password for root from 175.24.107.68 port 35202 ssh2 Jun 6 18:26:25 ovpn sshd\[2517\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.107.68 user=root Jun 6 18:26:27 ovpn sshd\[2517\]: Failed password for root from 175.24.107.68 port 49652 ssh2 Jun 6 18:29:13 ovpn sshd\[3196\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.107.68 user=root	2020-06-07 00:30:44
37.187.113.144	attackbotsspam	(sshd) Failed SSH login from 37.187.113.144 (FR/France/dedi-max.ovh): 5 in the last 3600 secs	2020-06-07 00:50:44
92.114.38.46	attack	20/6/6@08:30:23: FAIL: Alarm-Network address from=92.114.38.46 20/6/6@08:30:23: FAIL: Alarm-Network address from=92.114.38.46 ...	2020-06-07 00:43:21
112.85.42.181	attackspambots	Automatic report BANNED IP	2020-06-07 00:55:11
49.228.184.19	attackbots	Unauthorized connection attempt from IP address 49.228.184.19 on Port 445(SMB)	2020-06-07 00:39:16
222.186.180.8	attack	Jun 6 18:41:34 pve1 sshd[3231]: Failed password for root from 222.186.180.8 port 52114 ssh2 Jun 6 18:41:39 pve1 sshd[3231]: Failed password for root from 222.186.180.8 port 52114 ssh2 ...	2020-06-07 00:46:25
109.106.143.85	attack	20/6/6@08:30:47: FAIL: Alarm-Network address from=109.106.143.85 20/6/6@08:30:47: FAIL: Alarm-Network address from=109.106.143.85 ...	2020-06-07 00:17:57
51.83.44.111	attack	Jun 6 14:56:06 vps687878 sshd\[25120\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.44.111 user=root Jun 6 14:56:07 vps687878 sshd\[25120\]: Failed password for root from 51.83.44.111 port 55020 ssh2 Jun 6 14:59:28 vps687878 sshd\[25281\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.44.111 user=root Jun 6 14:59:30 vps687878 sshd\[25281\]: Failed password for root from 51.83.44.111 port 58484 ssh2 Jun 6 15:02:39 vps687878 sshd\[25643\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.44.111 user=root ...	2020-06-07 00:33:47
49.233.202.62	attack	Jun 6 06:42:29 server1 sshd\[13166\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.202.62 user=root Jun 6 06:42:31 server1 sshd\[13166\]: Failed password for root from 49.233.202.62 port 35886 ssh2 Jun 6 06:46:37 server1 sshd\[16295\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.202.62 user=root Jun 6 06:46:39 server1 sshd\[16295\]: Failed password for root from 49.233.202.62 port 53496 ssh2 Jun 6 06:50:41 server1 sshd\[6980\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.202.62 user=root ...	2020-06-07 00:50:07
180.101.248.148	attackspambots	$f2bV_matches	2020-06-07 00:42:36

最近上报的IP列表

89.103.144.140	182.53.85.25	119.54.115.221	14.226.43.181
14.169.173.175	176.205.156.143	113.22.36.217	16.42.195.145
69.229.6.9	124.152.57.64	14.181.48.181	14.162.144.50
42.115.214.79	31.223.89.190	59.99.232.180	218.241.155.218
171.235.67.77	221.226.18.222	114.33.251.195	49.235.52.126