134.73.129.52 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): EliDC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Brute force SMTP login attempted. ...	2019-08-10 04:35:21
attackspam	Jul 18 03:19:34 [munged] sshd[2738]: Invalid user isabel from 134.73.129.52 port 35548 Jul 18 03:19:34 [munged] sshd[2738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.129.52	2019-07-18 15:06:05

类型

评论内容

时间

attackspambots

Brute force SMTP login attempted.
...

2019-08-10 04:35:21

attackspam

Jul 18 03:19:34 [munged] sshd[2738]: Invalid user isabel from 134.73.129.52 port 35548
Jul 18 03:19:34 [munged] sshd[2738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.129.52

2019-07-18 15:06:05

相同子网IP讨论:

IP	类型	评论内容	时间
134.73.129.2	attackbotsspam	Aug 16 00:26:46 MK-Soft-VM7 sshd\[5700\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.129.2 user=root Aug 16 00:26:48 MK-Soft-VM7 sshd\[5700\]: Failed password for root from 134.73.129.2 port 45102 ssh2 Aug 16 00:31:16 MK-Soft-VM7 sshd\[5746\]: Invalid user client from 134.73.129.2 port 43024 ...	2019-08-16 09:43:59
134.73.129.2	attack	Aug 13 12:47:30 plex sshd[2174]: Invalid user mc from 134.73.129.2 port 58614	2019-08-13 19:11:20
134.73.129.111	attackbotsspam	Brute force SMTP login attempted. ...	2019-08-10 05:00:58
134.73.129.125	attackspambots	Brute force SMTP login attempted. ...	2019-08-10 05:00:23
134.73.129.127	attackbots	Brute force SMTP login attempted. ...	2019-08-10 05:00:06
134.73.129.130	attackbots	Brute force SMTP login attempted. ...	2019-08-10 04:59:48
134.73.129.134	attackbotsspam	Brute force SMTP login attempted. ...	2019-08-10 04:58:31
134.73.129.143	attack	Brute force SMTP login attempted. ...	2019-08-10 04:56:39
134.73.129.154	attack	Brute force SMTP login attempted. ...	2019-08-10 04:56:15
134.73.129.156	attackbots	Brute force SMTP login attempted. ...	2019-08-10 04:55:12
134.73.129.161	attackspam	Brute force SMTP login attempted. ...	2019-08-10 04:54:40
134.73.129.162	attack	Brute force SMTP login attempted. ...	2019-08-10 04:54:03
134.73.129.170	attackbotsspam	Brute force SMTP login attempted. ...	2019-08-10 04:53:15
134.73.129.173	attackbotsspam	Brute force SMTP login attempted. ...	2019-08-10 04:52:24
134.73.129.190	attack	Brute force SMTP login attempted. ...	2019-08-10 04:51:23

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.73.129.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32017
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.73.129.52.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071800 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 18 15:05:56 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 52.129.73.134.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 52.129.73.134.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
14.49.15.61	attackbots	Sep 14 10:06:57 site3 sshd\[30295\]: Invalid user test from 14.49.15.61 Sep 14 10:06:57 site3 sshd\[30295\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.49.15.61 Sep 14 10:06:59 site3 sshd\[30295\]: Failed password for invalid user test from 14.49.15.61 port 25848 ssh2 Sep 14 10:11:30 site3 sshd\[30388\]: Invalid user aster from 14.49.15.61 Sep 14 10:11:30 site3 sshd\[30388\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.49.15.61 ...	2019-09-14 15:27:00
5.135.182.84	attackbotsspam	2019-09-14T07:50:45.284487abusebot-4.cloudsearch.cf sshd\[8844\]: Invalid user nazrul from 5.135.182.84 port 50778	2019-09-14 16:05:22
113.28.141.247	attackbots	SMB Server BruteForce Attack	2019-09-14 16:13:05
51.158.74.14	attackbots	Sep 14 07:53:48 MK-Soft-VM6 sshd\[20888\]: Invalid user sunny from 51.158.74.14 port 33552 Sep 14 07:53:48 MK-Soft-VM6 sshd\[20888\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.74.14 Sep 14 07:53:50 MK-Soft-VM6 sshd\[20888\]: Failed password for invalid user sunny from 51.158.74.14 port 33552 ssh2 ...	2019-09-14 16:12:42
189.108.10.99	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-14 05:35:34,086 INFO [amun_request_handler] PortScan Detected on Port: 445 (189.108.10.99)	2019-09-14 16:23:26
3.210.163.185	attackbotsspam	Sep 14 06:43:12 flomail postfix/smtpd[12748]: NOQUEUE: reject: RCPT from ec2-3-210-163-185.compute-1.amazonaws.com[3.210.163.185]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Sep 14 06:53:12 flomail postfix/smtpd[12748]: NOQUEUE: reject: RCPT from ec2-3-210-163-185.compute-1.amazonaws.com[3.210.163.185]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=	2019-09-14 15:41:22
222.186.31.136	attack	14.09.2019 08:26:43 SSH access blocked by firewall	2019-09-14 16:28:56
59.56.89.95	attackbots	Sep 13 23:18:22 xb3 sshd[4007]: reveeclipse mapping checking getaddrinfo for 95.89.56.59.broad.fz.fj.dynamic.163data.com.cn [59.56.89.95] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 13 23:18:24 xb3 sshd[4007]: Failed password for invalid user marketing from 59.56.89.95 port 44677 ssh2 Sep 13 23:18:25 xb3 sshd[4007]: Received disconnect from 59.56.89.95: 11: Bye Bye [preauth] Sep 13 23:47:25 xb3 sshd[31244]: Connection closed by 59.56.89.95 [preauth] Sep 13 23:50:30 xb3 sshd[27157]: reveeclipse mapping checking getaddrinfo for 95.89.56.59.broad.fz.fj.dynamic.163data.com.cn [59.56.89.95] failed - POSSIBLE BREAK-IN ATTEMPT! Sep 13 23:50:32 xb3 sshd[27157]: Failed password for invalid user ts3 from 59.56.89.95 port 43256 ssh2 Sep 13 23:50:32 xb3 sshd[27157]: Received disconnect from 59.56.89.95: 11: Bye Bye [preauth] Sep 13 23:53:42 xb3 sshd[1558]: reveeclipse mapping checking getaddrinfo for 95.89.56.59.broad.fz.fj.dynamic.163data.com.cn [59.56.89.95] failed - POSSIBLE BREAK-I........ -------------------------------	2019-09-14 15:35:24
36.99.246.69	attackbotsspam	2019-09-14 03:09:53 H=(kfll) [36.99.246.69]:50054 I=[192.147.25.65]:25 F= rejected RCPT <985902225@qq.com>: RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3, 127.0.0.11) (https://www.spamhaus.org/sbl/query/SBLCSS) 2019-09-14 03:10:07 dovecot_login authenticator failed for (wstsfr) [36.99.246.69]:50499 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=ler@lerctr.org) 2019-09-14 03:10:27 dovecot_login authenticator failed for (qctuh) [36.99.246.69]:50988 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=ler@lerctr.org) ...	2019-09-14 16:30:18
91.42.155.117	attackbotsspam	Sep 13 20:52:39 web9 sshd\[29204\]: Invalid user admin from 91.42.155.117 Sep 13 20:52:39 web9 sshd\[29204\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.42.155.117 Sep 13 20:52:42 web9 sshd\[29204\]: Failed password for invalid user admin from 91.42.155.117 port 35127 ssh2 Sep 13 20:52:44 web9 sshd\[29204\]: Failed password for invalid user admin from 91.42.155.117 port 35127 ssh2 Sep 13 20:52:46 web9 sshd\[29204\]: Failed password for invalid user admin from 91.42.155.117 port 35127 ssh2	2019-09-14 16:10:57
91.204.188.50	attack	Sep 14 10:12:23 server sshd\[14199\]: Invalid user cmuir from 91.204.188.50 port 49542 Sep 14 10:12:23 server sshd\[14199\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.204.188.50 Sep 14 10:12:25 server sshd\[14199\]: Failed password for invalid user cmuir from 91.204.188.50 port 49542 ssh2 Sep 14 10:17:06 server sshd\[26317\]: Invalid user web from 91.204.188.50 port 39030 Sep 14 10:17:06 server sshd\[26317\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.204.188.50	2019-09-14 15:36:12
188.166.150.79	attack	2019-09-14T14:54:05.957139enmeeting.mahidol.ac.th sshd\[14994\]: Invalid user test from 188.166.150.79 port 58576 2019-09-14T14:54:05.971565enmeeting.mahidol.ac.th sshd\[14994\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.150.79 2019-09-14T14:54:08.162485enmeeting.mahidol.ac.th sshd\[14994\]: Failed password for invalid user test from 188.166.150.79 port 58576 ssh2 ...	2019-09-14 16:08:13
81.22.45.219	attack	09/14/2019-03:16:19.027872 81.22.45.219 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-09-14 15:50:10
125.167.237.204	attackbotsspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-14 05:39:07,720 INFO [amun_request_handler] PortScan Detected on Port: 445 (125.167.237.204)	2019-09-14 15:33:11
178.62.237.38	attackspam	Sep 14 09:09:59 SilenceServices sshd[31400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.237.38 Sep 14 09:10:01 SilenceServices sshd[31400]: Failed password for invalid user jojo from 178.62.237.38 port 46867 ssh2 Sep 14 09:14:25 SilenceServices sshd[629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.237.38	2019-09-14 16:20:10

最近上报的IP列表

235.110.68.25	129.218.211.184	19.9.145.189	221.227.166.157
9.108.193.157	188.134.91.230	150.133.106.255	236.72.212.214
89.4.2.31	200.196.181.162	116.105.225.120	209.99.132.5
134.73.129.48	117.86.117.73	88.225.234.227	81.32.127.191
41.222.227.98	2.95.93.251	212.229.172.197	76.216.143.161