14.164.29.106 - IPInfo

基本信息:

城市(city): Ca Mau

省份(region): Tinh Ca Mau

国家(country): Vietnam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	DATE:2020-06-20 22:13:59, IP:14.164.29.106, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-06-21 08:34:49

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.164.29.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45693
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.164.29.106.			IN	A

;; AUTHORITY SECTION:
.			382	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020062001 1800 900 604800 86400

;; Query time: 286 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 21 08:34:46 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

106.29.164.14.in-addr.arpa domain name pointer static.vnpt.vn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
106.29.164.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
216.170.114.208	attackbots	\[2019-09-08 13:48:02\] NOTICE\[1827\] chan_sip.c: Registration from '\' failed for '216.170.114.208:58550' - Wrong password \[2019-09-08 13:48:02\] SECURITY\[1849\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-08T13:48:02.574-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="30002",SessionID="0x7fd9a8123cd8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/216.170.114.208/58550",Challenge="0423d26a",ReceivedChallenge="0423d26a",ReceivedHash="b2c9cebf84e60263aedbe92f737fd667" \[2019-09-08 13:51:50\] NOTICE\[1827\] chan_sip.c: Registration from '\' failed for '216.170.114.208:57558' - Wrong password \[2019-09-08 13:51:50\] SECURITY\[1849\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-08T13:51:50.306-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2017",SessionID="0x7fd9a88fa448",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/2	2019-09-09 01:52:15
107.170.246.89	attack	$f2bV_matches_ltvn	2019-09-09 01:57:40
54.37.158.40	attackbots	Sep 8 19:10:36 microserver sshd[15694]: Invalid user Password1 from 54.37.158.40 port 57200 Sep 8 19:10:36 microserver sshd[15694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.158.40 Sep 8 19:10:38 microserver sshd[15694]: Failed password for invalid user Password1 from 54.37.158.40 port 57200 ssh2 Sep 8 19:14:55 microserver sshd[15892]: Invalid user 1qaz2wsx from 54.37.158.40 port 50883 Sep 8 19:14:55 microserver sshd[15892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.158.40 Sep 8 19:27:34 microserver sshd[17735]: Invalid user nagios@123 from 54.37.158.40 port 60170 Sep 8 19:27:34 microserver sshd[17735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.158.40 Sep 8 19:27:36 microserver sshd[17735]: Failed password for invalid user nagios@123 from 54.37.158.40 port 60170 ssh2 Sep 8 19:31:50 microserver sshd[18327]: Invalid user 123123 from 54.37.158.40 por	2019-09-09 01:47:29
177.185.136.231	attackbotsspam	6379/tcp 6379/tcp [2019-09-08]2pkt	2019-09-09 01:46:47
185.53.229.10	attackbotsspam	Sep 8 10:22:40 eventyay sshd[26049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.53.229.10 Sep 8 10:22:41 eventyay sshd[26049]: Failed password for invalid user support from 185.53.229.10 port 4526 ssh2 Sep 8 10:27:21 eventyay sshd[26102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.53.229.10 ...	2019-09-09 01:32:56
175.6.32.128	attack	Sep 8 19:36:05 OPSO sshd\[5660\]: Invalid user git from 175.6.32.128 port 50168 Sep 8 19:36:05 OPSO sshd\[5660\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.32.128 Sep 8 19:36:07 OPSO sshd\[5660\]: Failed password for invalid user git from 175.6.32.128 port 50168 ssh2 Sep 8 19:40:57 OPSO sshd\[6088\]: Invalid user gitolite3 from 175.6.32.128 port 39796 Sep 8 19:40:57 OPSO sshd\[6088\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.32.128	2019-09-09 02:25:32
124.236.22.54	attack	Sep 8 15:20:55 microserver sshd[51190]: Invalid user sinusbot from 124.236.22.54 port 56952 Sep 8 15:20:55 microserver sshd[51190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.236.22.54 Sep 8 15:20:57 microserver sshd[51190]: Failed password for invalid user sinusbot from 124.236.22.54 port 56952 ssh2 Sep 8 15:23:46 microserver sshd[51324]: Invalid user postgres from 124.236.22.54 port 50914 Sep 8 15:23:46 microserver sshd[51324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.236.22.54 Sep 8 15:35:02 microserver sshd[52681]: Invalid user kfserver from 124.236.22.54 port 55000 Sep 8 15:35:02 microserver sshd[52681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.236.22.54 Sep 8 15:35:04 microserver sshd[52681]: Failed password for invalid user kfserver from 124.236.22.54 port 55000 ssh2 Sep 8 15:37:55 microserver sshd[53223]: pam_unix(sshd:auth): authentication fai	2019-09-09 02:09:09
104.219.232.114	attack	Sep810:08:04server2pure-ftpd:$\?@104.219.232.114$[WARNING]Authenticationfailedforuser[morgenstern-swiss]Sep810:08:09server2pure-ftpd:$\?@104.219.232.114$[WARNING]Authenticationfailedforuser[morgenstern-swiss]Sep810:08:15server2pure-ftpd:$\?@104.219.232.114$[WARNING]Authenticationfailedforuser[morgenstern-swiss]Sep810:08:19server2pure-ftpd:$\?@104.219.232.114$[WARNING]Authenticationfailedforuser[morgenstern-swiss]Sep810:08:25server2pure-ftpd:$\?@104.219.232.114$[WARNING]Authenticationfailedforuser[morgenstern-swiss]	2019-09-09 02:06:37
149.28.235.222	attackspam	2019-09-08T16:14:23Z - RDP login failed multiple times. (149.28.235.222)	2019-09-09 01:49:57
123.206.81.59	attack	Sep 8 19:39:15 vps01 sshd[17289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.81.59 Sep 8 19:39:17 vps01 sshd[17289]: Failed password for invalid user Passw0rd from 123.206.81.59 port 57138 ssh2	2019-09-09 01:45:24
149.56.44.101	attackspam	Sep 8 20:22:05 localhost sshd[14514]: Invalid user chris from 149.56.44.101 port 47564 ...	2019-09-09 01:41:30
61.160.25.118	attackbots	$f2bV_matches	2019-09-09 01:26:31
115.64.25.2	attackbotsspam	445/tcp 445/tcp [2019-09-08]2pkt	2019-09-09 01:42:03
62.83.1.223	attackspam	Automatic report - Port Scan Attack	2019-09-09 02:08:02
211.64.67.48	attack	Sep 8 12:57:46 lnxded63 sshd[28623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.64.67.48	2019-09-09 01:29:41

最近上报的IP列表

176.233.198.21	172.9.133.97	37.4.191.58	203.130.231.226
27.69.221.153	91.61.8.250	220.50.147.220	5.53.231.133
69.73.3.87	137.56.91.199	108.54.156.58	109.112.15.8
177.87.11.210	59.156.122.98	147.225.14.190	191.53.238.56
82.163.42.79	114.93.98.94	91.184.55.180	93.47.53.73