139.129.29.57 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): Aliyun Computing Co. Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	2020-10-07 22:47:36,156 fail2ban.actions: WARNING [ssh] Ban 139.129.29.57	2020-10-09 04:08:22
attackspam	2020-10-07 22:47:36,156 fail2ban.actions: WARNING [ssh] Ban 139.129.29.57	2020-10-08 20:16:59
attackbotsspam	2020-10-07 22:47:36,156 fail2ban.actions: WARNING [ssh] Ban 139.129.29.57	2020-10-08 12:13:10
attack	2020-10-07 22:47:36,156 fail2ban.actions: WARNING [ssh] Ban 139.129.29.57	2020-10-08 07:33:22

相同子网IP讨论:

IP	类型	评论内容	时间
139.129.29.4	attack	Honeypot hit.	2019-10-10 22:01:45

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 139.129.29.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56881
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;139.129.29.57.			IN	A

;; AUTHORITY SECTION:
.			446	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020100702 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 08 07:33:19 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 57.29.129.139.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 57.29.129.139.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
122.51.50.210	attackbots	$f2bV_matches	2020-04-05 14:55:29
60.29.123.202	attackbots	(sshd) Failed SSH login from 60.29.123.202 (CN/China/no-data): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 5 08:02:10 ubnt-55d23 sshd[18261]: Invalid user postgres from 60.29.123.202 port 52620 Apr 5 08:02:12 ubnt-55d23 sshd[18261]: Failed password for invalid user postgres from 60.29.123.202 port 52620 ssh2	2020-04-05 15:12:49
129.211.27.10	attack	Apr 5 06:27:37 mout sshd[20168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.27.10 user=root Apr 5 06:27:40 mout sshd[20168]: Failed password for root from 129.211.27.10 port 35737 ssh2	2020-04-05 15:01:16
205.209.186.91	attackbotsspam	SSH brutforce	2020-04-05 14:52:18
52.130.76.130	attackbots	Apr 5 07:37:16 ms-srv sshd[16421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.130.76.130 user=root Apr 5 07:37:18 ms-srv sshd[16421]: Failed password for invalid user root from 52.130.76.130 port 39820 ssh2	2020-04-05 14:40:41
195.231.3.208	attackbots	Apr 5 06:48:47 web01.agentur-b-2.de postfix/smtpd[80666]: warning: unknown[195.231.3.208]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 5 06:48:47 web01.agentur-b-2.de postfix/smtpd[80666]: lost connection after AUTH from unknown[195.231.3.208] Apr 5 06:57:21 web01.agentur-b-2.de postfix/smtpd[83978]: warning: unknown[195.231.3.208]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 5 06:57:21 web01.agentur-b-2.de postfix/smtpd[83886]: warning: unknown[195.231.3.208]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 5 06:57:21 web01.agentur-b-2.de postfix/smtpd[83980]: warning: unknown[195.231.3.208]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 5 06:57:21 web01.agentur-b-2.de postfix/smtpd[83979]: warning: unknown[195.231.3.208]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 5 06:57:21 web01.agentur-b-2.de postfix/smtpd[80325]: warning: unknown[195.231.3.208]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 5 06:57:21 web01.agentur-b-2.de postfix/smtpd[83981]: warning: unknown	2020-04-05 14:44:24
2400:6180:100:d0::80c:a001	attack	WordPress wp-login brute force :: 2400:6180:100:d0::80c:a001 0.076 BYPASS [05/Apr/2020:05:26:24 0000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 2287 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-04-05 14:38:04
167.99.48.123	attackbotsspam	$f2bV_matches	2020-04-05 14:57:48
222.186.42.137	attack	04/05/2020-03:01:12.253614 222.186.42.137 Protocol: 6 ET SCAN Potential SSH Scan	2020-04-05 15:07:38
118.26.64.58	attackspambots	invalid login attempt (user)	2020-04-05 15:18:22
185.147.215.14	attackspambots	[2020-04-05 02:55:47] NOTICE[12114] chan_sip.c: Registration from '' failed for '185.147.215.14:52705' - Wrong password [2020-04-05 02:55:47] SECURITY[12128] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-05T02:55:47.545-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="52830",SessionID="0x7f020c105a58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.14/52705",Challenge="3abe9562",ReceivedChallenge="3abe9562",ReceivedHash="f9e6b41bd10bae9084b6f43572c5981f" [2020-04-05 02:56:55] NOTICE[12114] chan_sip.c: Registration from '' failed for '185.147.215.14:61907' - Wrong password [2020-04-05 02:56:55] SECURITY[12128] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-05T02:56:55.555-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="92392",SessionID="0x7f020c088288",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/18 ...	2020-04-05 15:00:53
106.12.9.10	attackspambots	SSH Brute Force	2020-04-05 15:21:21
182.75.216.190	attackbotsspam	Invalid user zlo from 182.75.216.190 port 11177	2020-04-05 15:03:48
111.230.210.78	attackspam	Apr 5 03:03:08 ws22vmsma01 sshd[108201]: Failed password for root from 111.230.210.78 port 33278 ssh2 ...	2020-04-05 15:03:26
125.99.46.47	attack	Apr 5 05:36:49 icinga sshd[42047]: Failed password for root from 125.99.46.47 port 59310 ssh2 Apr 5 05:50:44 icinga sshd[65090]: Failed password for root from 125.99.46.47 port 44146 ssh2 ...	2020-04-05 15:08:39

最近上报的IP列表

45.12.13.138	123.237.152.143	246.183.85.243	10.97.189.150
27.66.72.56	30.146.235.214	179.115.50.220	129.226.170.141
118.173.63.64	95.79.91.76	195.154.105.228	152.136.133.145
120.85.61.98	14.205.201.231	171.224.191.120	14.215.113.59
5.183.255.44	202.77.105.50	123.120.24.69	181.48.172.66