193.56.29.124 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United Kingdom

运营商(isp): Web Hosted Group Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Port Scan detected from 193.56.29.124 (GB/United Kingdom/-). 4 hits in the last 75 seconds	2019-09-05 15:21:06

相同子网IP讨论:

IP	类型	评论内容	时间
193.56.29.186	spamattack	Brute-Force	2021-11-09 22:39:39
193.56.29.19	attack	Port scanning, attack	2020-12-26 14:21:12
193.56.29.10	attack	2020-03-02 22:41:56 dovecot_login authenticator failed for (User) [193.56.29.10]:62849 I=[192.147.25.65]:587: 535 Incorrect authentication data (set_id=cindy@lerctr.org) 2020-03-02 22:47:24 dovecot_login authenticator failed for (User) [193.56.29.10]:54154 I=[192.147.25.65]:587: 535 Incorrect authentication data (set_id=laura@lerctr.org) 2020-03-02 22:51:43 dovecot_login authenticator failed for (User) [193.56.29.10]:58653 I=[192.147.25.65]:587: 535 Incorrect authentication data (set_id=simon@lerctr.org) ...	2020-03-03 18:47:40
193.56.29.10	attackbotsspam	Scanning random ports - tries to find possible vulnerable services	2019-10-08 15:51:53
193.56.29.130	attackbots	Port scan: Attack repeated for 24 hours	2019-09-15 16:06:21
193.56.29.126	attack	Port Scan detected from 193.56.29.126 (GB/United Kingdom/-). 4 hits in the last 85 seconds	2019-09-09 08:43:38
193.56.29.128	attackbots	Port scan: Attack repeated for 24 hours	2019-09-08 06:11:52
193.56.29.120	attackspambots	firewall-block, port(s): 445/tcp	2019-07-10 21:40:34
193.56.29.93	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-08 07:31:16,027 INFO [amun_request_handler] PortScan Detected on Port: 445 (193.56.29.93)	2019-07-09 02:06:04
193.56.29.110	attack	[SMB remote code execution attempt: port tcp/445] [scan/connect: 2 time(s)] *(RWIN=1024)(07081017)	2019-07-08 15:36:44
193.56.29.86	attackspambots	[SMB remote code execution attempt: port tcp/445] [scan/connect: 2 time(s)] *(RWIN=1024)(07081017)	2019-07-08 15:33:45
193.56.29.107	attackspambots	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-08 04:52:26,437 INFO [amun_request_handler] PortScan Detected on Port: 445 (193.56.29.107)	2019-07-08 15:23:11
193.56.29.90	attackspambots	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-08 04:03:17,785 INFO [amun_request_handler] PortScan Detected on Port: 445 (193.56.29.90)	2019-07-08 14:16:20
193.56.29.73	attackspambots	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-07 22:29:25,363 INFO [amun_request_handler] PortScan Detected on Port: 445 (193.56.29.73)	2019-07-08 11:49:16
193.56.29.89	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-07 22:31:46,337 INFO [amun_request_handler] PortScan Detected on Port: 445 (193.56.29.89)	2019-07-08 11:31:40

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 193.56.29.124
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31025
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;193.56.29.124.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019090500 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Sep 05 15:21:00 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 124.29.56.193.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 124.29.56.193.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
172.98.92.194	attack	OpenVAS, SQL Injection, XSS, many more	2020-09-11 13:13:01
125.142.75.54	attackbots	Scanned 3 times in the last 24 hours on port 22	2020-09-11 13:10:40
185.220.101.203	attackspam	2020-09-11T03:49:53.216753abusebot-6.cloudsearch.cf sshd[10412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.203 user=root 2020-09-11T03:49:54.726558abusebot-6.cloudsearch.cf sshd[10412]: Failed password for root from 185.220.101.203 port 19138 ssh2 2020-09-11T03:49:56.561020abusebot-6.cloudsearch.cf sshd[10412]: Failed password for root from 185.220.101.203 port 19138 ssh2 2020-09-11T03:49:53.216753abusebot-6.cloudsearch.cf sshd[10412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.101.203 user=root 2020-09-11T03:49:54.726558abusebot-6.cloudsearch.cf sshd[10412]: Failed password for root from 185.220.101.203 port 19138 ssh2 2020-09-11T03:49:56.561020abusebot-6.cloudsearch.cf sshd[10412]: Failed password for root from 185.220.101.203 port 19138 ssh2 2020-09-11T03:49:53.216753abusebot-6.cloudsearch.cf sshd[10412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ...	2020-09-11 12:51:54
92.63.197.53	attack	TCP (SYN) 92.63.197.53:49499 -> port 5502, len 44	2020-09-11 12:58:23
46.243.71.225	attackspam	port scan and connect, tcp 23 (telnet)	2020-09-11 13:01:56
118.70.128.28	attackbots	Unauthorized connection attempt from IP address 118.70.128.28 on Port 445(SMB)	2020-09-11 12:44:57
106.13.99.107	attackspam	Sep 11 05:24:29 ovpn sshd\[23699\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.99.107 user=root Sep 11 05:24:30 ovpn sshd\[23699\]: Failed password for root from 106.13.99.107 port 47644 ssh2 Sep 11 05:33:51 ovpn sshd\[26025\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.99.107 user=root Sep 11 05:33:54 ovpn sshd\[26025\]: Failed password for root from 106.13.99.107 port 33540 ssh2 Sep 11 05:38:40 ovpn sshd\[27190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.99.107 user=root	2020-09-11 12:51:28
185.108.106.251	attack	[2020-09-11 01:00:41] NOTICE[1239] chan_sip.c: Registration from '' failed for '185.108.106.251:64229' - Wrong password [2020-09-11 01:00:41] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-11T01:00:41.108-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8094",SessionID="0x7f4d482e4338",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.108.106.251/64229",Challenge="7c2e421c",ReceivedChallenge="7c2e421c",ReceivedHash="6c3229f1863833892578a21e90dfdce7" [2020-09-11 01:01:12] NOTICE[1239] chan_sip.c: Registration from '' failed for '185.108.106.251:63423' - Wrong password [2020-09-11 01:01:12] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-11T01:01:12.565-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5850",SessionID="0x7f4d4827ad68",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.108 ...	2020-09-11 13:03:59
84.52.131.229	attack	Sep 10 18:58:32 * sshd[15179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.52.131.229 Sep 10 18:58:34 * sshd[15179]: Failed password for invalid user admin from 84.52.131.229 port 52966 ssh2	2020-09-11 12:52:44
46.166.198.75	attackspambots	Sep 10 18:57:59 andromeda sshd\[7103\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.166.198.75 user=root Sep 10 18:57:59 andromeda sshd\[7102\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.166.198.75 user=root Sep 10 18:58:01 andromeda sshd\[7103\]: Failed password for root from 46.166.198.75 port 39600 ssh2	2020-09-11 13:23:40
5.105.234.254	attackspambots	Sep 10 18:58:32 * sshd[15177]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.105.234.254 Sep 10 18:58:34 * sshd[15177]: Failed password for invalid user admin from 5.105.234.254 port 50694 ssh2	2020-09-11 12:55:16
223.215.160.131	attackspam	TCP (SYN) 223.215.160.131:34930 -> port 23, len 40	2020-09-11 12:46:09
115.84.91.136	attackbotsspam	Attempted Brute Force (dovecot)	2020-09-11 13:26:29
112.85.42.89	attackspambots	Sep 11 04:50:19 plex-server sshd[629795]: Failed password for root from 112.85.42.89 port 29848 ssh2 Sep 11 04:50:21 plex-server sshd[629795]: Failed password for root from 112.85.42.89 port 29848 ssh2 Sep 11 04:50:24 plex-server sshd[629795]: Failed password for root from 112.85.42.89 port 29848 ssh2 Sep 11 04:51:00 plex-server sshd[629892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.89 user=root Sep 11 04:51:02 plex-server sshd[629892]: Failed password for root from 112.85.42.89 port 10498 ssh2 ...	2020-09-11 13:04:15
220.132.123.13	attackbotsspam	Port Scan detected! ...	2020-09-11 13:07:33

最近上报的IP列表

60.170.189.7	41.140.102.253	71.30.5.72	138.68.212.185
24.87.158.204	16.214.242.183	188.158.126.198	91.143.171.185
13.56.228.202	111.3.185.162	49.234.180.159	92.136.138.131
61.191.50.171	117.153.83.29	188.158.193.205	233.173.62.202
97.89.161.133	172.68.189.109	122.162.127.73	157.10.2.210