193.29.13.34 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Romania

运营商(isp): Bunea Telecom SRL

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	20 attempts against mh_ha-misbehave-ban on flare	2020-02-14 00:26:40
attackbotsspam	20 attempts against mh_ha-misbehave-ban on lb	2020-02-11 06:12:30
attackbots	21 attempts against mh-misbehave-ban on float.magehost.pro	2020-01-08 06:55:35
attackbotsspam	20 attempts against mh_ha-misbehave-ban on oak.magehost.pro	2019-12-29 23:03:32
attackbotsspam	193.29.13.34 - - \[10/Nov/2019:08:01:53 -0800\] "GET /regionaladmin HTTP/1.1" 404 18074193.29.13.34 - - \[10/Nov/2019:08:01:54 -0800\] "GET /registeradmin HTTP/1.1" 404 18074193.29.13.34 - - \[10/Nov/2019:08:01:56 -0800\] "GET /regularadmin HTTP/1.1" 404 18070 ...	2019-11-11 07:05:00

相同子网IP讨论:

IP	类型	评论内容	时间
193.29.13.31	attack	ataque tcp intento de intrusion	2020-09-29 02:02:05
193.29.13.35	attackspambots	TCP ports : 3388 / 3389 / 3390 / 3391	2020-09-25 01:57:26
193.29.13.35	attackspambots	Scanning	2020-09-24 17:37:30
193.29.13.27	attackbots	Unauthorized connection attempt detected from IP address 193.29.13.27 to port 3391 [T]	2020-08-13 04:45:51
193.29.13.89	attack	Unauthorized connection attempt from IP address 193.29.13.89 on Port 3306(MYSQL)	2020-07-27 02:57:03
193.29.13.89	attack	[mysql-auth] MySQL auth attack	2020-07-25 12:59:15
193.29.13.89	attackspambots	Jul 17 14:11:30 debian-2gb-nbg1-2 kernel: \[17246444.579554\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=193.29.13.89 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=111 ID=256 PROTO=TCP SPT=6000 DPT=3306 WINDOW=16384 RES=0x00 SYN URGP=0	2020-07-18 00:38:08
193.29.13.33	attack	Port scan: Attack repeated for 24 hours	2020-07-17 03:14:27
193.29.13.11	attackbotsspam	3389BruteforceStormFW21	2020-07-05 06:37:32
193.29.13.133	attackspam	Icarus honeypot on github	2020-06-26 20:37:47
193.29.13.125	attackspambots	May 13 14:32:19 vps691689 sshd[21673]: error: Received disconnect from 193.29.13.125 port 45740:3: com.jcraft.jsch.JSchException: Auth fail [preauth] ...	2020-05-14 03:38:38
193.29.13.92	attackbotsspam	[MySQL inject/portscan] tcp/3306 *(RWIN=16384)(04301449)	2020-04-30 23:17:48
193.29.13.119	attackspam	Unauthorised access (Apr 13) SRC=193.29.13.119 LEN=40 TTL=116 ID=256 TCP DPT=3306 WINDOW=16384 SYN	2020-04-14 03:31:58
193.29.13.54	attack	ET SCAN Potential SSH Scan - port: 22 proto: TCP cat: Attempted Information Leak	2020-03-20 23:24:46
193.29.13.54	attack	SSH login attempts.	2020-03-20 13:47:55

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 193.29.13.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29276
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;193.29.13.34.			IN	A

;; AUTHORITY SECTION:
.			460	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111001 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Nov 11 07:04:57 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 34.13.29.193.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 34.13.29.193.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
192.3.177.213	attackbots	Aug 26 13:40:50 ArkNodeAT sshd\[13960\]: Invalid user p from 192.3.177.213 Aug 26 13:40:50 ArkNodeAT sshd\[13960\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.177.213 Aug 26 13:40:52 ArkNodeAT sshd\[13960\]: Failed password for invalid user p from 192.3.177.213 port 48676 ssh2	2019-08-26 19:52:29
71.165.90.119	attackbots	Aug 26 11:20:00 v22018076622670303 sshd\[15626\]: Invalid user shubham from 71.165.90.119 port 51674 Aug 26 11:20:00 v22018076622670303 sshd\[15626\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=71.165.90.119 Aug 26 11:20:02 v22018076622670303 sshd\[15626\]: Failed password for invalid user shubham from 71.165.90.119 port 51674 ssh2 ...	2019-08-26 18:55:06
69.10.49.214	attack	Aug 26 11:35:04 pop3-login: Info: Disconnected: Inactivity \(auth failed, 1 attempts in 179 secs\): user=\, method=PLAIN, rip=69.10.49.214, lip=212.237.56.26, session=\ Aug 26 11:35:06 pop3-login: Info: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=69.10.49.214, lip=212.237.56.26, session=\ Aug 26 11:35:09 pop3-login: Info: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=69.10.49.214, lip=212.237.56.26, session=\ Aug 26 11:42:23 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=69.10.49.214, lip=212.237.56.26, session=\ Aug 26 11:42:23 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=69.10.49.214, lip=212.237.56.26, session=\	2019-08-26 19:51:18
85.98.192.202	attack	Aug 25 23:13:12 typhoon sshd[3030]: reveeclipse mapping checking getaddrinfo for 85.98.192.202.static.ttnet.com.tr [85.98.192.202] failed - POSSIBLE BREAK-IN ATTEMPT! Aug 25 23:13:12 typhoon sshd[3030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.98.192.202 user=r.r Aug 25 23:13:14 typhoon sshd[3030]: Failed password for r.r from 85.98.192.202 port 47651 ssh2 Aug 25 23:13:16 typhoon sshd[3030]: Failed password for r.r from 85.98.192.202 port 47651 ssh2 Aug 25 23:13:19 typhoon sshd[3030]: Failed password for r.r from 85.98.192.202 port 47651 ssh2 Aug 25 23:13:22 typhoon sshd[3030]: Failed password for r.r from 85.98.192.202 port 47651 ssh2 Aug 25 23:13:24 typhoon sshd[3030]: Failed password for r.r from 85.98.192.202 port 47651 ssh2 Aug 25 23:13:26 typhoon sshd[3030]: Failed password for r.r from 85.98.192.202 port 47651 ssh2 Aug 25 23:13:26 typhoon sshd[3030]: Disconnecting: Too many authentication failures for r.r from 85........ -------------------------------	2019-08-26 19:23:04
106.12.86.205	attackspambots	Aug 26 06:58:29 vps200512 sshd\[27414\]: Invalid user viorel from 106.12.86.205 Aug 26 06:58:29 vps200512 sshd\[27414\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.86.205 Aug 26 06:58:31 vps200512 sshd\[27414\]: Failed password for invalid user viorel from 106.12.86.205 port 55338 ssh2 Aug 26 07:02:20 vps200512 sshd\[27493\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.86.205 user=root Aug 26 07:02:23 vps200512 sshd\[27493\]: Failed password for root from 106.12.86.205 port 56700 ssh2	2019-08-26 19:30:39
69.194.8.237	attackbotsspam	Aug 26 09:52:50 apollo sshd\[18391\]: Failed password for root from 69.194.8.237 port 58666 ssh2Aug 26 10:25:23 apollo sshd\[18430\]: Invalid user brad from 69.194.8.237Aug 26 10:25:25 apollo sshd\[18430\]: Failed password for invalid user brad from 69.194.8.237 port 49848 ssh2 ...	2019-08-26 19:20:21
134.249.123.118	attack	2019-08-26T04:52:28.951529abusebot-2.cloudsearch.cf sshd\[11531\]: Invalid user alexandru from 134.249.123.118 port 60004	2019-08-26 19:01:06
162.144.93.159	attack	ssh failed login	2019-08-26 19:55:55
200.105.183.118	attackspam	Invalid user compsx from 200.105.183.118 port 33441	2019-08-26 19:18:34
103.131.89.53	attackbots	Unauthorised access (Aug 26) SRC=103.131.89.53 LEN=40 TTL=44 ID=19177 TCP DPT=8080 WINDOW=53623 SYN	2019-08-26 19:01:36
198.200.124.197	attackbots	Aug 26 13:08:05 plex sshd[20243]: Invalid user mlsmith from 198.200.124.197 port 48872	2019-08-26 19:14:37
159.65.54.221	attackbotsspam	Aug 26 13:13:34 DAAP sshd[27704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.54.221 user=sshd Aug 26 13:13:36 DAAP sshd[27704]: Failed password for sshd from 159.65.54.221 port 46116 ssh2 Aug 26 13:15:42 DAAP sshd[27725]: Invalid user server from 159.65.54.221 port 37882 Aug 26 13:15:42 DAAP sshd[27725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.54.221 Aug 26 13:15:42 DAAP sshd[27725]: Invalid user server from 159.65.54.221 port 37882 Aug 26 13:15:43 DAAP sshd[27725]: Failed password for invalid user server from 159.65.54.221 port 37882 ssh2 ...	2019-08-26 19:47:59
51.75.18.215	attackspambots	Aug 26 13:32:38 SilenceServices sshd[28184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.18.215 Aug 26 13:32:40 SilenceServices sshd[28184]: Failed password for invalid user adele from 51.75.18.215 port 50028 ssh2 Aug 26 13:36:29 SilenceServices sshd[29671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.18.215	2019-08-26 19:43:50
114.36.11.128	attack	Telnet Server BruteForce Attack	2019-08-26 19:42:52
118.24.219.111	attackspam	Aug 26 05:03:20 mail sshd[7007]: Invalid user randy from 118.24.219.111 Aug 26 05:03:20 mail sshd[7007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.219.111 Aug 26 05:03:20 mail sshd[7007]: Invalid user randy from 118.24.219.111 Aug 26 05:03:22 mail sshd[7007]: Failed password for invalid user randy from 118.24.219.111 port 48264 ssh2 Aug 26 05:21:42 mail sshd[3058]: Invalid user beagleindex from 118.24.219.111 ...	2019-08-26 19:07:08

最近上报的IP列表

185.57.229.206	185.122.36.2	185.236.13.89	36.71.233.37
87.110.41.59	79.8.25.1	178.63.254.156	35.168.170.206
177.75.79.82	181.129.179.50	178.156.202.64	47.53.57.143
125.160.213.196	212.152.76.33	18.212.251.175	14.162.189.140
189.231.109.64	125.160.247.28	124.193.196.104	40.65.191.139