129.213.107.93

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): Oracle Public Cloud

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Feb 16 11:50:29 lcl-usvr-02 sshd[21629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.107.93 user=root Feb 16 11:50:31 lcl-usvr-02 sshd[21629]: Failed password for root from 129.213.107.93 port 58025 ssh2 Feb 16 11:58:45 lcl-usvr-02 sshd[23364]: Invalid user admin from 129.213.107.93 port 56785 Feb 16 11:58:45 lcl-usvr-02 sshd[23364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.107.93 Feb 16 11:58:45 lcl-usvr-02 sshd[23364]: Invalid user admin from 129.213.107.93 port 56785 Feb 16 11:58:48 lcl-usvr-02 sshd[23364]: Failed password for invalid user admin from 129.213.107.93 port 56785 ssh2 ...	2020-02-16 13:47:46

类型

评论内容

时间

attackspambots

Feb 16 11:50:29 lcl-usvr-02 sshd[21629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.107.93  user=root
Feb 16 11:50:31 lcl-usvr-02 sshd[21629]: Failed password for root from 129.213.107.93 port 58025 ssh2
Feb 16 11:58:45 lcl-usvr-02 sshd[23364]: Invalid user admin from 129.213.107.93 port 56785
Feb 16 11:58:45 lcl-usvr-02 sshd[23364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.107.93
Feb 16 11:58:45 lcl-usvr-02 sshd[23364]: Invalid user admin from 129.213.107.93 port 56785
Feb 16 11:58:48 lcl-usvr-02 sshd[23364]: Failed password for invalid user admin from 129.213.107.93 port 56785 ssh2
...

2020-02-16 13:47:46

相同子网IP讨论:

IP	类型	评论内容	时间
129.213.107.56	attackbots	Aug 28 07:42:39 webhost01 sshd[21044]: Failed password for root from 129.213.107.56 port 38852 ssh2 ...	2020-08-28 08:46:23
129.213.107.56	attackbotsspam	Aug 23 09:06:29 web8 sshd\[25075\]: Invalid user jyk from 129.213.107.56 Aug 23 09:06:29 web8 sshd\[25075\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.107.56 Aug 23 09:06:32 web8 sshd\[25075\]: Failed password for invalid user jyk from 129.213.107.56 port 45212 ssh2 Aug 23 09:10:23 web8 sshd\[27263\]: Invalid user hugo from 129.213.107.56 Aug 23 09:10:23 web8 sshd\[27263\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.107.56	2020-08-23 17:12:47
129.213.107.56	attackbots	Aug 19 10:50:09 sip sshd[1354705]: Invalid user zhangshifeng from 129.213.107.56 port 53626 Aug 19 10:50:10 sip sshd[1354705]: Failed password for invalid user zhangshifeng from 129.213.107.56 port 53626 ssh2 Aug 19 10:53:59 sip sshd[1354735]: Invalid user ferdinand from 129.213.107.56 port 33038 ...	2020-08-19 19:41:02
129.213.107.56	attackbots	Aug 13 14:18:12 ip106 sshd[13128]: Failed password for root from 129.213.107.56 port 53540 ssh2 ...	2020-08-13 20:27:27
129.213.107.56	attackbots	2020-08-12 UTC: (15x) - root(15x)	2020-08-13 19:04:42
129.213.107.56	attackspambots	$f2bV_matches	2020-08-03 14:59:57
129.213.107.56	attack	Aug 1 05:57:25 buvik sshd[21778]: Failed password for root from 129.213.107.56 port 33128 ssh2 Aug 1 05:58:21 buvik sshd[21897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.107.56 user=root Aug 1 05:58:24 buvik sshd[21897]: Failed password for root from 129.213.107.56 port 46928 ssh2 ...	2020-08-01 12:10:24
129.213.107.56	attack	$f2bV_matches	2020-07-20 00:06:03
129.213.107.56	attackbots	Port Scan detected from 129.213.107.56 (US/United States/Washington/Seattle (Pike Pine Retail Core)/-). 4 hits in the last 50 seconds	2020-07-15 08:55:02
129.213.107.56	attackspam	Jul 14 15:08:14 h2779839 sshd[15570]: Invalid user jp from 129.213.107.56 port 41124 Jul 14 15:08:14 h2779839 sshd[15570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.107.56 Jul 14 15:08:14 h2779839 sshd[15570]: Invalid user jp from 129.213.107.56 port 41124 Jul 14 15:08:16 h2779839 sshd[15570]: Failed password for invalid user jp from 129.213.107.56 port 41124 ssh2 Jul 14 15:11:14 h2779839 sshd[15652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.107.56 user=mysql Jul 14 15:11:16 h2779839 sshd[15652]: Failed password for mysql from 129.213.107.56 port 37074 ssh2 Jul 14 15:14:29 h2779839 sshd[15682]: Invalid user xe from 129.213.107.56 port 33050 Jul 14 15:14:29 h2779839 sshd[15682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.107.56 Jul 14 15:14:29 h2779839 sshd[15682]: Invalid user xe from 129.213.107.56 port 33050 Jul 14 15:14:31 ...	2020-07-14 22:49:01
129.213.107.56	attackbots	2020-07-12T21:57:10.791650ns386461 sshd\[31529\]: Invalid user oracle from 129.213.107.56 port 52738 2020-07-12T21:57:10.796246ns386461 sshd\[31529\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.107.56 2020-07-12T21:57:13.315341ns386461 sshd\[31529\]: Failed password for invalid user oracle from 129.213.107.56 port 52738 ssh2 2020-07-12T22:02:18.215019ns386461 sshd\[3739\]: Invalid user xhu from 129.213.107.56 port 44064 2020-07-12T22:02:18.219587ns386461 sshd\[3739\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.213.107.56 ...	2020-07-13 05:12:48
129.213.107.56	attack	Jun 30 07:33:25 plex sshd[18213]: Invalid user fcs from 129.213.107.56 port 59024	2020-06-30 14:52:23
129.213.107.56	attackbotsspam	Jun 1 15:11:36 piServer sshd[8054]: Failed password for root from 129.213.107.56 port 54744 ssh2 Jun 1 15:15:19 piServer sshd[8301]: Failed password for root from 129.213.107.56 port 60076 ssh2 ...	2020-06-01 22:50:55
129.213.107.56	attackbots	Invalid user aaaaa from 129.213.107.56 port 57206	2020-05-28 07:27:00
129.213.107.56	attackbotsspam	SSH brute force	2020-05-22 08:10:28

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 129.213.107.93
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45074
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;129.213.107.93.			IN	A

;; AUTHORITY SECTION:
.			584	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020021600 1800 900 604800 86400

;; Query time: 318 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 16 13:47:38 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

Host 93.107.213.129.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 93.107.213.129.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
52.130.76.130	attackbotsspam	<6 unauthorized SSH connections	2020-03-31 20:21:43
41.213.141.246	attackbots	1585626512 - 03/31/2020 05:48:32 Host: 41.213.141.246/41.213.141.246 Port: 445 TCP Blocked	2020-03-31 20:04:30
106.54.128.79	attack	Jan 26 11:16:35 ms-srv sshd[31187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.128.79 Jan 26 11:16:37 ms-srv sshd[31187]: Failed password for invalid user admin from 106.54.128.79 port 51918 ssh2	2020-03-31 19:54:31
51.15.41.165	attackbots	2020-03-31T11:17:22.425191dmca.cloudsearch.cf sshd[32765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.41.165 user=root 2020-03-31T11:17:24.875425dmca.cloudsearch.cf sshd[32765]: Failed password for root from 51.15.41.165 port 36996 ssh2 2020-03-31T11:21:08.788272dmca.cloudsearch.cf sshd[554]: Invalid user mq from 51.15.41.165 port 49076 2020-03-31T11:21:08.795052dmca.cloudsearch.cf sshd[554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.41.165 2020-03-31T11:21:08.788272dmca.cloudsearch.cf sshd[554]: Invalid user mq from 51.15.41.165 port 49076 2020-03-31T11:21:10.938975dmca.cloudsearch.cf sshd[554]: Failed password for invalid user mq from 51.15.41.165 port 49076 ssh2 2020-03-31T11:25:10.261268dmca.cloudsearch.cf sshd[868]: Invalid user mq from 51.15.41.165 port 32922 ...	2020-03-31 20:20:10
142.255.52.32	attack	Mar 31 05:48:47 debian-2gb-nbg1-2 kernel: \[7885581.531934\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=142.255.52.32 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=TCP SPT=7547 DPT=62022 WINDOW=29200 RES=0x00 ACK SYN URGP=0	2020-03-31 19:51:13
167.89.115.56	attack	Apple ID Phishing Website http://sndgridclick.getbooqed.com/ls/click?upn=_____ 167.89.115.56 167.89.118.52 Return-Path: Received: from xvfrswzf.outbound-mail.sendgrid.net (xvfrswzf.outbound-mail.sendgrid.net [168.245.105.239]) From: Support Subject: Apple からの領収書です Date: Mon, 30 Mar 2020 12:05:54 +0000 (UTC) Message-ID: <_____@jaheshe> X-Mailer: Microsoft Outlook 16.0	2020-03-31 19:48:45
49.73.61.26	attackspambots	Mar 31 11:39:25 ns382633 sshd\[23442\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.73.61.26 user=root Mar 31 11:39:27 ns382633 sshd\[23442\]: Failed password for root from 49.73.61.26 port 52317 ssh2 Mar 31 11:51:20 ns382633 sshd\[25893\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.73.61.26 user=root Mar 31 11:51:22 ns382633 sshd\[25893\]: Failed password for root from 49.73.61.26 port 57807 ssh2 Mar 31 11:57:01 ns382633 sshd\[26909\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.73.61.26 user=root	2020-03-31 19:51:28
40.77.190.72	attack	/nojmensajxv.php	2020-03-31 20:05:51
195.175.16.162	attack	Unauthorized connection attempt from IP address 195.175.16.162 on Port 445(SMB)	2020-03-31 20:28:41
12.199.167.154	attackbots	Unauthorized connection attempt detected from IP address 12.199.167.154 to port 5555	2020-03-31 19:57:52
51.38.236.221	attackbotsspam	2020-03-31T11:04:03.570171rocketchat.forhosting.nl sshd[28230]: Failed password for root from 51.38.236.221 port 56618 ssh2 2020-03-31T11:11:40.856726rocketchat.forhosting.nl sshd[28410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.236.221 user=root 2020-03-31T11:11:42.922345rocketchat.forhosting.nl sshd[28410]: Failed password for root from 51.38.236.221 port 42984 ssh2 ...	2020-03-31 20:25:39
68.183.19.84	attackspam	Mar 31 09:33:34 mail sshd[25154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.19.84 user=root Mar 31 09:33:36 mail sshd[25154]: Failed password for root from 68.183.19.84 port 51908 ssh2 ...	2020-03-31 20:16:28
106.12.92.70	attackbots	Mar 31 10:43:38 powerpi2 sshd[25829]: Failed password for invalid user uq from 106.12.92.70 port 38720 ssh2 Mar 31 10:49:11 powerpi2 sshd[26122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.92.70 user=root Mar 31 10:49:13 powerpi2 sshd[26122]: Failed password for root from 106.12.92.70 port 44854 ssh2 ...	2020-03-31 20:27:41
181.84.61.32	attackbotsspam	20/3/30@23:48:00: FAIL: IoT-Telnet address from=181.84.61.32 ...	2020-03-31 20:23:48
92.63.194.105	attack	Mar 31 01:51:36 web9 sshd\[26086\]: Invalid user admin from 92.63.194.105 Mar 31 01:51:36 web9 sshd\[26086\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.105 Mar 31 01:51:37 web9 sshd\[26086\]: Failed password for invalid user admin from 92.63.194.105 port 42257 ssh2 Mar 31 01:51:54 web9 sshd\[26148\]: Invalid user Admin from 92.63.194.105 Mar 31 01:51:54 web9 sshd\[26148\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.105	2020-03-31 20:07:38

最近上报的IP列表

124.190.142.161	200.89.178.140	188.99.221.36	221.144.61.3
176.121.12.129	180.94.71.38	50.62.208.106	176.120.54.119
171.38.147.46	193.27.19.140	111.229.48.106	16.102.111.27
200.40.57.86	128.40.126.57	228.96.59.190	57.0.83.12
176.120.37.203	186.231.45.64	120.157.146.83	198.142.135.70