121.229.1.13 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Jiangsu Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Jan 1 08:44:04 host postfix/smtpd[51545]: warning: unknown[121.229.1.13]: SASL LOGIN authentication failed: authentication failure Jan 1 08:44:07 host postfix/smtpd[51545]: warning: unknown[121.229.1.13]: SASL LOGIN authentication failed: authentication failure ...	2020-01-01 16:09:07
attackbots	Time: Fri Dec 27 04:45:29 2019 -0300 IP: 121.229.1.13 (CN/China/13.1.229.121.broad.nj.js.dynamic.163data.com.cn) Failures: 5 (smtpauth) Interval: 3600 seconds Blocked: Permanent Block	2019-12-27 16:03:53

类型

评论内容

时间

attack

Jan  1 08:44:04 host postfix/smtpd[51545]: warning: unknown[121.229.1.13]: SASL LOGIN authentication failed: authentication failure
Jan  1 08:44:07 host postfix/smtpd[51545]: warning: unknown[121.229.1.13]: SASL LOGIN authentication failed: authentication failure
...

2020-01-01 16:09:07

attackbots

Time:     Fri Dec 27 04:45:29 2019 -0300
IP:       121.229.1.13 (CN/China/13.1.229.121.broad.nj.js.dynamic.163data.com.cn)
Failures: 5 (smtpauth)
Interval: 3600 seconds
Blocked:  Permanent Block

2019-12-27 16:03:53

相同子网IP讨论:

IP	类型	评论内容	时间
121.229.10.130	attackspambots	Oct 12 13:01:57 our-server-hostname sshd[3055]: Invalid user eq from 121.229.10.130 Oct 12 13:01:57 our-server-hostname sshd[3055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.10.130 Oct 12 13:01:59 our-server-hostname sshd[3055]: Failed password for invalid user eq from 121.229.10.130 port 50182 ssh2 Oct 12 13:17:53 our-server-hostname sshd[5584]: Invalid user daniel from 121.229.10.130 Oct 12 13:17:53 our-server-hostname sshd[5584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.10.130 Oct 12 13:17:55 our-server-hostname sshd[5584]: Failed password for invalid user daniel from 121.229.10.130 port 40750 ssh2 Oct 12 13:21:20 our-server-hostname sshd[6327]: Invalid user myra from 121.229.10.130 Oct 12 13:21:20 our-server-hostname sshd[6327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.10.130 ........ ----------------------------------------------- https:/	2020-10-14 08:18:29
121.229.198.112	attackbotsspam	Unauthorized connection attempt detected from IP address 121.229.198.112 to port 80 [T]	2020-08-29 21:16:45
121.229.15.146	attack	Aug 28 10:01:17 * sshd[4461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.15.146 Aug 28 10:01:19 * sshd[4461]: Failed password for invalid user tyler from 121.229.15.146 port 51266 ssh2	2020-08-28 16:30:51
121.229.19.200	attackbots	Aug 4 11:18:09 mockhub sshd[17174]: Failed password for root from 121.229.19.200 port 49438 ssh2 ...	2020-08-05 02:31:11
121.229.13.181	attackbotsspam	Jul 30 05:50:08 home sshd[743256]: Invalid user zhengyongfa from 121.229.13.181 port 41608 Jul 30 05:50:08 home sshd[743256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.13.181 Jul 30 05:50:08 home sshd[743256]: Invalid user zhengyongfa from 121.229.13.181 port 41608 Jul 30 05:50:09 home sshd[743256]: Failed password for invalid user zhengyongfa from 121.229.13.181 port 41608 ssh2 Jul 30 05:53:28 home sshd[744361]: Invalid user rhino from 121.229.13.181 port 37592 ...	2020-07-30 14:50:39
121.229.19.200	attackspam	2020-07-30T03:54:29.291679randservbullet-proofcloud-66.localdomain sshd[604]: Invalid user wangpei from 121.229.19.200 port 41170 2020-07-30T03:54:29.295746randservbullet-proofcloud-66.localdomain sshd[604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.19.200 2020-07-30T03:54:29.291679randservbullet-proofcloud-66.localdomain sshd[604]: Invalid user wangpei from 121.229.19.200 port 41170 2020-07-30T03:54:30.774069randservbullet-proofcloud-66.localdomain sshd[604]: Failed password for invalid user wangpei from 121.229.19.200 port 41170 ssh2 ...	2020-07-30 13:48:46
121.229.15.146	attackspam	prod11 ...	2020-07-28 05:23:25
121.229.133.52	attackspambots	TCP (SYN) 121.229.133.52:64610 -> port 23, len 40	2020-07-22 21:08:47
121.229.14.66	attack	Jul 19 02:02:52 ny01 sshd[20145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.14.66 Jul 19 02:02:54 ny01 sshd[20145]: Failed password for invalid user kafka from 121.229.14.66 port 51254 ssh2 Jul 19 02:05:56 ny01 sshd[20584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.14.66	2020-07-19 14:15:23
121.229.13.181	attackspambots	(sshd) Failed SSH login from 121.229.13.181 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 18 22:43:33 s1 sshd[24074]: Invalid user fleet from 121.229.13.181 port 57738 Jul 18 22:43:36 s1 sshd[24074]: Failed password for invalid user fleet from 121.229.13.181 port 57738 ssh2 Jul 18 22:49:50 s1 sshd[24201]: Invalid user hvy from 121.229.13.181 port 60862 Jul 18 22:49:52 s1 sshd[24201]: Failed password for invalid user hvy from 121.229.13.181 port 60862 ssh2 Jul 18 22:52:15 s1 sshd[24269]: Invalid user btt from 121.229.13.181 port 52266	2020-07-19 03:58:28
121.229.14.66	attackspam	sshd: Failed password for invalid user .... from 121.229.14.66 port 38360 ssh2 (4 attempts)	2020-07-16 19:51:53
121.229.13.181	attack	Jul 14 00:59:29 george sshd[29794]: Failed password for invalid user check from 121.229.13.181 port 49880 ssh2 Jul 14 01:02:36 george sshd[29861]: Invalid user www from 121.229.13.181 port 42830 Jul 14 01:02:36 george sshd[29861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.13.181 Jul 14 01:02:38 george sshd[29861]: Failed password for invalid user www from 121.229.13.181 port 42830 ssh2 Jul 14 01:05:47 george sshd[29918]: Invalid user system from 121.229.13.181 port 35778 ...	2020-07-14 19:03:15
121.229.14.66	attack	Automatic report BANNED IP	2020-07-13 07:37:15
121.229.13.181	attackspambots	Jul 12 06:34:20 scw-6657dc sshd[12335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.13.181 Jul 12 06:34:20 scw-6657dc sshd[12335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.229.13.181 Jul 12 06:34:22 scw-6657dc sshd[12335]: Failed password for invalid user ch from 121.229.13.181 port 44916 ssh2 ...	2020-07-12 15:20:28
121.229.15.146	attack	Repeated brute force against a port	2020-07-11 07:08:37

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.229.1.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49619
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;121.229.1.13.			IN	A

;; AUTHORITY SECTION:
.			309	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122700 1800 900 604800 86400

;; Query time: 337 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Dec 27 16:03:49 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

13.1.229.121.in-addr.arpa domain name pointer 13.1.229.121.broad.nj.js.dynamic.163data.com.cn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
13.1.229.121.in-addr.arpa	name = 13.1.229.121.broad.nj.js.dynamic.163data.com.cn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
190.122.159.2	attack	[01/May/2020:01:02:01 -0400] "GET / HTTP/1.1" Chrome 52.0 UA	2020-05-03 04:11:34
83.59.36.230	attack	May 2 14:06:42 prox sshd[17010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.59.36.230 May 2 14:06:42 prox sshd[17013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.59.36.230	2020-05-03 04:03:44
197.44.37.239	attack	Honeypot attack, port: 445, PTR: host-197.44.37.239-static.tedata.net.	2020-05-03 04:00:37
78.203.125.150	attackbotsspam	Port scan	2020-05-03 03:53:31
185.220.48.181	attackspambots	Honeypot attack, port: 81, PTR: PTR record not found	2020-05-03 03:49:03
40.79.19.205	attackbots	SSH brute-force: detected 9 distinct usernames within a 24-hour window.	2020-05-03 04:01:42
67.207.88.180	attack	20 attempts against mh-ssh on echoip	2020-05-03 04:01:03
192.3.204.164	attack	Suspicious access to SMTP/POP/IMAP services.	2020-05-03 04:15:30
212.156.219.164	attack	Unauthorized connection attempt detected from IP address 212.156.219.164 to port 23	2020-05-03 04:13:58
49.88.112.55	attack	May 2 21:47:00 ArkNodeAT sshd\[26869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.55 user=root May 2 21:47:02 ArkNodeAT sshd\[26869\]: Failed password for root from 49.88.112.55 port 3311 ssh2 May 2 21:47:39 ArkNodeAT sshd\[26878\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.55 user=root	2020-05-03 04:15:59
180.153.49.72	attack	frenzy	2020-05-03 04:09:07
186.47.86.5	attackbots	Icarus honeypot on github	2020-05-03 04:12:54
111.229.205.95	attackbots	2020-05-02T19:15:55.723756randservbullet-proofcloud-66.localdomain sshd[17143]: Invalid user hack from 111.229.205.95 port 46514 2020-05-02T19:15:55.728278randservbullet-proofcloud-66.localdomain sshd[17143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.205.95 2020-05-02T19:15:55.723756randservbullet-proofcloud-66.localdomain sshd[17143]: Invalid user hack from 111.229.205.95 port 46514 2020-05-02T19:15:58.192367randservbullet-proofcloud-66.localdomain sshd[17143]: Failed password for invalid user hack from 111.229.205.95 port 46514 ssh2 ...	2020-05-03 04:15:14
176.36.89.231	attackspam	CMS (WordPress or Joomla) login attempt.	2020-05-03 03:45:20
112.21.191.10	attack	May 2 20:23:33 tuxlinux sshd[17283]: Invalid user chaowei from 112.21.191.10 port 55854 May 2 20:23:33 tuxlinux sshd[17283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.21.191.10 May 2 20:23:33 tuxlinux sshd[17283]: Invalid user chaowei from 112.21.191.10 port 55854 May 2 20:23:33 tuxlinux sshd[17283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.21.191.10 May 2 20:23:33 tuxlinux sshd[17283]: Invalid user chaowei from 112.21.191.10 port 55854 May 2 20:23:33 tuxlinux sshd[17283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.21.191.10 May 2 20:23:35 tuxlinux sshd[17283]: Failed password for invalid user chaowei from 112.21.191.10 port 55854 ssh2 ...	2020-05-03 04:20:28

最近上报的IP列表

89.103.144.140	182.53.85.25	119.54.115.221	14.226.43.181
14.169.173.175	176.205.156.143	113.22.36.217	16.42.195.145
69.229.6.9	124.152.57.64	14.181.48.181	14.162.144.50
42.115.214.79	31.223.89.190	59.99.232.180	218.241.155.218
171.235.67.77	221.226.18.222	114.33.251.195	49.235.52.126