129.213.104.245

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: Oracle Public Cloud

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	[Tue Apr 28 13:07:38.237294 2020] [authz_core:error] [pid 4360] [client 129.213.104.245:59124] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/ [Tue Apr 28 13:07:38.472466 2020] [authz_core:error] [pid 6796] [client 129.213.104.245:59232] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/home.asp [Tue Apr 28 13:07:38.700033 2020] [authz_core:error] [pid 6803] [client 129.213.104.245:59344] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/login.cgi ...	2020-04-29 03:42:17

Type

Details

Datetime

attackbotsspam

[Tue Apr 28 13:07:38.237294 2020] [authz_core:error] [pid 4360] [client 129.213.104.245:59124] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/
[Tue Apr 28 13:07:38.472466 2020] [authz_core:error] [pid 6796] [client 129.213.104.245:59232] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/home.asp
[Tue Apr 28 13:07:38.700033 2020] [authz_core:error] [pid 6803] [client 129.213.104.245:59344] AH01630: client denied by server configuration: /srv/www/vhosts/rncbc/login.cgi
...

2020-04-29 03:42:17

Comments on same subnet:

IP	Type	Details	Datetime
129.213.104.151	attackspam	Invalid user tomcat from 129.213.104.151 port 39432	2020-04-21 23:32:50
129.213.104.90	attackbots	SSHD unauthorised connection attempt (b)	2020-04-21 03:18:43

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 129.213.104.245
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11326
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;129.213.104.245.		IN	A

;; AUTHORITY SECTION:
.			448	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020042801 1800 900 604800 86400

;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 29 03:42:14 CST 2020
;; MSG SIZE  rcvd: 119

Host info

Host 245.104.213.129.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 245.104.213.129.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
150.109.115.158	attackspam	Automatic report - SSH Brute-Force Attack	2020-02-28 17:01:11
112.78.178.178	attackspambots	1582865575 - 02/28/2020 05:52:55 Host: 112.78.178.178/112.78.178.178 Port: 445 TCP Blocked	2020-02-28 17:09:38
94.46.213.30	attack	unauthorized connection attempt	2020-02-28 17:12:10
83.31.30.48	attack	unauthorized connection attempt	2020-02-28 17:19:08
182.61.31.79	attack	Feb 28 05:52:34 ns381471 sshd[26499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.31.79 Feb 28 05:52:36 ns381471 sshd[26499]: Failed password for invalid user uftp from 182.61.31.79 port 34418 ssh2	2020-02-28 17:22:12
121.165.150.156	attackspam	Honeypot attack, port: 81, PTR: PTR record not found	2020-02-28 16:47:34
51.38.238.87	attack	Feb 28 06:08:25 MK-Soft-VM4 sshd[28346]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.238.87 Feb 28 06:08:27 MK-Soft-VM4 sshd[28346]: Failed password for invalid user pi from 51.38.238.87 port 51228 ssh2 ...	2020-02-28 17:21:31
51.77.231.238	attackbots	Feb 28 05:53:07 icecube postfix/smtpd[56865]: NOQUEUE: reject: RCPT from account.bizpropelled.com[51.77.231.238]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=	2020-02-28 16:58:35
123.206.174.21	attackspambots	2020-02-28T09:30:11.868099vps773228.ovh.net sshd[12758]: Invalid user frappe from 123.206.174.21 port 40926 2020-02-28T09:30:11.884117vps773228.ovh.net sshd[12758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.174.21 2020-02-28T09:30:11.868099vps773228.ovh.net sshd[12758]: Invalid user frappe from 123.206.174.21 port 40926 2020-02-28T09:30:14.031186vps773228.ovh.net sshd[12758]: Failed password for invalid user frappe from 123.206.174.21 port 40926 ssh2 2020-02-28T09:38:47.280227vps773228.ovh.net sshd[12856]: Invalid user hblee from 123.206.174.21 port 35914 2020-02-28T09:38:47.287987vps773228.ovh.net sshd[12856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.174.21 2020-02-28T09:38:47.280227vps773228.ovh.net sshd[12856]: Invalid user hblee from 123.206.174.21 port 35914 2020-02-28T09:38:49.606697vps773228.ovh.net sshd[12856]: Failed password for invalid user hblee from 123.206.174.21 p ...	2020-02-28 17:20:15
220.83.159.23	attackspam	Honeypot attack, port: 81, PTR: PTR record not found	2020-02-28 17:13:02
95.181.3.233	attack	Unauthorized connection attempt from IP address 95.181.3.233 on Port 445(SMB)	2020-02-28 17:31:17
222.186.180.142	attack	Fail2Ban - SSH Bruteforce Attempt	2020-02-28 17:26:25
197.50.230.156	attackbotsspam	Honeypot attack, port: 81, PTR: host-197.50.230.156.tedata.net.	2020-02-28 16:55:54
222.186.175.140	attackbotsspam	Feb 28 09:50:43 legacy sshd[21515]: Failed password for root from 222.186.175.140 port 2316 ssh2 Feb 28 09:50:56 legacy sshd[21515]: error: maximum authentication attempts exceeded for root from 222.186.175.140 port 2316 ssh2 [preauth] Feb 28 09:51:02 legacy sshd[21519]: Failed password for root from 222.186.175.140 port 3546 ssh2 ...	2020-02-28 16:54:21
180.242.55.79	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-28 17:18:35

Recently Reported IPs

202.137.142.229	116.118.104.168	159.89.194.88	14.231.151.20
45.230.38.190	156.96.62.86	112.186.160.229	178.242.57.241
212.129.54.224	17.167.171.166	42.116.218.125	37.76.185.120
14.166.20.42	49.234.234.124	188.235.199.134	209.133.156.6
189.144.31.13	78.71.234.246	52.234.6.201	152.32.254.193