129.21.39.191 - IPInfo

基本信息:

城市(city): Rochester

省份(region): New York

国家(country): United States

运营商(isp): Rochester Institute of Technology

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): University/College/School

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Brute-force attempt banned	2020-06-09 00:43:36
attackbotsspam	May 28 22:02:54 minden010 sshd[6966]: Failed password for root from 129.21.39.191 port 44522 ssh2 May 28 22:06:24 minden010 sshd[9288]: Failed password for root from 129.21.39.191 port 50762 ssh2 May 28 22:09:52 minden010 sshd[10525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.21.39.191 ...	2020-05-29 04:26:44
attackbots	May 21 19:13:16 sshd\[25493\]: Invalid user wangsaishuai from 129.21.39.191May 21 19:13:17 sshd\[25493\]: Failed password for invalid user wangsaishuai from 129.21.39.191 port 34414 ssh2 ...	2020-05-22 03:33:02
attackbotsspam	SSH Invalid Login	2020-05-15 05:49:58
attackspambots	$f2bV_matches \| Triggered by Fail2Ban at Vostok web server	2020-05-13 22:43:28
attack	May 11 22:59:20 host sshd[39538]: Invalid user catherine from 129.21.39.191 port 35758 ...	2020-05-12 07:39:24

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 129.21.39.191
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2528
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;129.21.39.191.			IN	A

;; AUTHORITY SECTION:
.			470	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051101 1800 900 604800 86400

;; Query time: 86 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue May 12 07:39:14 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

191.39.21.129.in-addr.arpa domain name pointer iste501c.rit.edu.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
191.39.21.129.in-addr.arpa	name = iste501c.rit.edu.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
132.232.66.227	attack	2020-09-28T07:16:27.632793correo.[domain] sshd[24427]: Invalid user vpn from 132.232.66.227 port 55772 2020-09-28T07:16:29.521468correo.[domain] sshd[24427]: Failed password for invalid user vpn from 132.232.66.227 port 55772 ssh2 2020-09-28T07:29:16.846222correo.[domain] sshd[25585]: Invalid user daniel from 132.232.66.227 port 43450 ...	2020-09-29 18:30:55
174.219.21.74	attackbotsspam	Brute forcing email accounts	2020-09-29 18:57:40
201.131.200.90	attackbots	Sep 29 02:36:20 askasleikir sshd[38302]: Failed password for invalid user charles from 201.131.200.90 port 60472 ssh2	2020-09-29 18:21:50
103.253.42.54	attackspam	Sep 28 17:56:37 xzibhostname postfix/smtpd[29530]: warning: hostname sever54.centerandpark.net does not resolve to address 103.253.42.54: Name or service not known Sep 28 17:56:37 xzibhostname postfix/smtpd[29530]: connect from unknown[103.253.42.54] Sep 28 17:56:37 xzibhostname postfix/smtpd[30434]: warning: hostname sever54.centerandpark.net does not resolve to address 103.253.42.54: Name or service not known Sep 28 17:56:37 xzibhostname postfix/smtpd[30434]: connect from unknown[103.253.42.54] Sep 28 17:56:37 xzibhostname postfix/smtpd[30169]: warning: hostname sever54.centerandpark.net does not resolve to address 103.253.42.54: Name or service not known Sep 28 17:56:37 xzibhostname postfix/smtpd[30169]: connect from unknown[103.253.42.54] Sep 28 17:56:37 xzibhostname postfix/smtpd[29617]: warning: hostname sever54.centerandpark.net does not resolve to address 103.253.42.54: Name or service not known Sep 28 17:56:37 xzibhostname postfix/smtpd[29617]: connect from unk........ -------------------------------	2020-09-29 18:34:17
181.48.46.195	attack	$f2bV_matches	2020-09-29 18:26:35
117.7.180.26	attackspam	Sep 28 20:33:17 scw-tender-jepsen sshd[24155]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.7.180.26 Sep 28 20:33:19 scw-tender-jepsen sshd[24155]: Failed password for invalid user tit0nich from 117.7.180.26 port 50483 ssh2	2020-09-29 18:33:06
37.239.210.17	attack	Connection to SSH Honeypot - Detected by HoneypotDB	2020-09-29 18:23:57
70.37.75.157	attackspam	$f2bV_matches	2020-09-29 18:49:40
206.189.91.244	attackspam	TCP (SYN) 206.189.91.244:40862 -> port 6333, len 44	2020-09-29 18:24:27
190.151.105.182	attackspam	Invalid user xx from 190.151.105.182 port 36038	2020-09-29 18:38:37
182.61.167.24	attackspambots	$f2bV_matches	2020-09-29 18:29:15
103.45.175.247	attack	Sep 28 05:13:09 km20725 sshd[31624]: Invalid user greg from 103.45.175.247 port 54806 Sep 28 05:13:09 km20725 sshd[31624]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.175.247 Sep 28 05:13:11 km20725 sshd[31624]: Failed password for invalid user greg from 103.45.175.247 port 54806 ssh2 Sep 28 05:13:13 km20725 sshd[31624]: Received disconnect from 103.45.175.247 port 54806:11: Bye Bye [preauth] Sep 28 05:13:13 km20725 sshd[31624]: Disconnected from invalid user greg 103.45.175.247 port 54806 [preauth] Sep 28 05:17:01 km20725 sshd[31882]: Invalid user anna from 103.45.175.247 port 36858 Sep 28 05:17:01 km20725 sshd[31882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.175.247 Sep 28 05:17:03 km20725 sshd[31882]: Failed password for invalid user anna from 103.45.175.247 port 36858 ssh2 Sep 28 05:17:05 km20725 sshd[31882]: Received disconnect from 103.45.175.247 port 36858:1........ -------------------------------	2020-09-29 18:29:34
117.6.211.161	attack	Brute forcing RDP port 3389	2020-09-29 18:47:00
198.27.67.87	attackbots	198.27.67.87 - - [29/Sep/2020:07:55:19 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 198.27.67.87 - - [29/Sep/2020:08:25:02 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-29 18:24:42
37.49.230.229	attackbotsspam	TCP (SYN) 37.49.230.229:45520 -> port 22, len 44	2020-09-29 18:44:36

最近上报的IP列表

69.14.29.41	111.132.175.170	32.58.253.63	216.232.159.197
59.2.228.226	201.180.170.102	140.251.38.216	222.220.87.48
109.191.186.40	156.171.29.208	92.153.235.74	188.3.240.156
32.19.113.84	108.75.143.184	82.169.144.46	94.138.174.170
45.218.243.151	82.165.244.168	32.188.41.214	79.70.29.218