45.13.29.119 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Jamaica

运营商(isp): Primestar Enterprise Group LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Mon, 22 Jul 2019 23:28:33 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-23 08:26:47

相同子网IP讨论:

IP	类型	评论内容	时间
45.13.29.238	attack	Chat Spam	2020-03-19 06:11:08

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.13.29.119
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43905
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.13.29.119.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072201 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jul 23 08:26:42 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 119.29.13.45.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 119.29.13.45.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
93.7.142.11	attackbotsspam	Multiport scan 2 ports : 80(x2) 8080	2020-03-08 07:44:55
1.203.115.141	attackspambots	(sshd) Failed SSH login from 1.203.115.141 (CN/China/-): 5 in the last 3600 secs	2020-03-08 07:19:12
177.158.99.86	attackbots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/177.158.99.86/ BR - 1H : (9) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : BR NAME ASN : ASN18881 IP : 177.158.99.86 CIDR : 177.158.96.0/19 PREFIX COUNT : 938 UNIQUE IP COUNT : 4233472 ATTACKS DETECTED ASN18881 : 1H - 1 3H - 1 6H - 1 12H - 3 24H - 3 DateTime : 2020-03-07 23:09:22 INFO : DNS DENIED Scan Detected and Blocked by ADMIN - data recovery	2020-03-08 07:06:56
222.186.173.215	attackbotsspam	Mar 7 20:03:30 firewall sshd[11136]: Failed password for root from 222.186.173.215 port 31284 ssh2 Mar 7 20:03:30 firewall sshd[11136]: error: maximum authentication attempts exceeded for root from 222.186.173.215 port 31284 ssh2 [preauth] Mar 7 20:03:30 firewall sshd[11136]: Disconnecting: Too many authentication failures [preauth] ...	2020-03-08 07:12:06
148.70.178.70	attackspam	2020-03-07T23:08:14.420260shield sshd\[5795\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.178.70 user=root 2020-03-07T23:08:16.080856shield sshd\[5795\]: Failed password for root from 148.70.178.70 port 55942 ssh2 2020-03-07T23:09:28.852658shield sshd\[5892\]: Invalid user user from 148.70.178.70 port 41990 2020-03-07T23:09:28.858590shield sshd\[5892\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.178.70 2020-03-07T23:09:31.346868shield sshd\[5892\]: Failed password for invalid user user from 148.70.178.70 port 41990 ssh2	2020-03-08 07:18:49
69.94.155.176	attackbots	US_Lanset_<177>1583618913 [1:2403414:55806] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 58 [Classification: Misc Attack] [Priority: 2] {TCP} 69.94.155.176:58466	2020-03-08 07:35:15
45.143.220.164	attack	[2020-03-07 17:56:26] NOTICE[1148] chan_sip.c: Registration from '"1601" ' failed for '45.143.220.164:5126' - Wrong password [2020-03-07 17:56:26] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-03-07T17:56:26.267-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1601",SessionID="0x7fd82c40d3d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.164/5126",Challenge="10db4086",ReceivedChallenge="10db4086",ReceivedHash="5b7c70e7f26436e200aca76caf55c1db" [2020-03-07 17:56:26] NOTICE[1148] chan_sip.c: Registration from '"1601" ' failed for '45.143.220.164:5126' - Wrong password [2020-03-07 17:56:26] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-03-07T17:56:26.418-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1601",SessionID="0x7fd82ca9d388",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-03-08 07:20:39
78.172.115.163	attackspam	DATE:2020-03-07 23:05:51, IP:78.172.115.163, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-03-08 07:31:16
5.189.151.188	attackspambots	...	2020-03-08 07:21:07
210.14.77.102	attackbots	2020-03-07T22:06:36.708054upcloud.m0sh1x2.com sshd[32271]: Invalid user libuuid from 210.14.77.102 port 23520	2020-03-08 07:41:54
187.162.121.93	attackspambots	Automatic report - Port Scan Attack	2020-03-08 07:26:40
69.229.6.49	attack	Mar 8 00:18:45 ns381471 sshd[16176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.229.6.49 Mar 8 00:18:47 ns381471 sshd[16176]: Failed password for invalid user www from 69.229.6.49 port 58666 ssh2	2020-03-08 07:33:43
60.254.62.102	attackbotsspam	Automatic report - Port Scan Attack	2020-03-08 07:13:15
222.186.175.216	attackbotsspam	SSH-BruteForce	2020-03-08 07:43:31
61.166.155.45	attackspambots	Mar 7 23:58:40 lnxded63 sshd[6720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.166.155.45 Mar 7 23:58:40 lnxded63 sshd[6720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.166.155.45	2020-03-08 07:16:27

最近上报的IP列表

191.101.107.45	191.96.33.201	185.201.129.8	104.227.178.16
212.80.203.178	178.171.0.126	185.248.185.197	179.61.183.89
178.173.228.170	186.30.235.106	178.171.108.86	72.178.40.30
201.242.135.54	193.160.78.202	241.191.160.54	158.46.157.87
179.191.191.212	198.241.240.91	154.16.52.154	41.216.94.240