14.232.29.93 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Oct 18 13:26:47 keyhelp sshd[32347]: Invalid user admin from 14.232.29.93 Oct 18 13:26:47 keyhelp sshd[32347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.232.29.93 Oct 18 13:26:49 keyhelp sshd[32347]: Failed password for invalid user admin from 14.232.29.93 port 34518 ssh2 Oct 18 13:26:50 keyhelp sshd[32347]: Connection closed by 14.232.29.93 port 34518 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.232.29.93	2019-10-19 01:42:49

类型

评论内容

时间

attack

Oct 18 13:26:47 keyhelp sshd[32347]: Invalid user admin from 14.232.29.93
Oct 18 13:26:47 keyhelp sshd[32347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.232.29.93
Oct 18 13:26:49 keyhelp sshd[32347]: Failed password for invalid user admin from 14.232.29.93 port 34518 ssh2
Oct 18 13:26:50 keyhelp sshd[32347]: Connection closed by 14.232.29.93 port 34518 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=14.232.29.93

2019-10-19 01:42:49

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.232.29.93
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4776
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.232.29.93.			IN	A

;; AUTHORITY SECTION:
.			427	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101800 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 19 01:42:46 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

93.29.232.14.in-addr.arpa domain name pointer static.vnpt.vn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
93.29.232.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
139.59.38.252	attack	Sep 12 21:25:59 vps200512 sshd\[25370\]: Invalid user guest from 139.59.38.252 Sep 12 21:25:59 vps200512 sshd\[25370\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.38.252 Sep 12 21:26:01 vps200512 sshd\[25370\]: Failed password for invalid user guest from 139.59.38.252 port 33544 ssh2 Sep 12 21:31:00 vps200512 sshd\[25421\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.38.252 user=root Sep 12 21:31:02 vps200512 sshd\[25421\]: Failed password for root from 139.59.38.252 port 50950 ssh2	2019-09-13 09:33:08
78.194.214.19	attackspambots	Sep 12 22:24:57 localhost sshd\[1547\]: Invalid user leah from 78.194.214.19 port 35096 Sep 12 22:24:57 localhost sshd\[1547\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.194.214.19 Sep 12 22:25:00 localhost sshd\[1547\]: Failed password for invalid user leah from 78.194.214.19 port 35096 ssh2	2019-09-13 08:45:21
77.247.110.138	attackbots	\[2019-09-12 20:37:05\] SECURITY\[20693\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-12T20:37:05.410-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="6020001148585359005",SessionID="0x7f8a6c8c4548",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.138/60906",ACLName="no_extension_match" \[2019-09-12 20:37:35\] SECURITY\[20693\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-12T20:37:35.226-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="50101148343508004",SessionID="0x7f8a6c5ed878",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.138/65211",ACLName="no_extension_match" \[2019-09-12 20:38:09\] SECURITY\[20693\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-12T20:38:09.831-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="519001148556213002",SessionID="0x7f8a6c03a738",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.138/57363",	2019-09-13 08:59:56
193.32.160.144	attackspambots	Sep 13 01:32:37 relay postfix/smtpd\[3767\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.144\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.145\]\> Sep 13 01:32:37 relay postfix/smtpd\[3767\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.144\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.145\]\> Sep 13 01:32:37 relay postfix/smtpd\[3767\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.144\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.145\]\> Sep 13 01:32:37 relay postfix/smtpd\[3767\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.144\]: 554 5.7.1 \: Relay access denied\; from=\ to=\	2019-09-13 08:52:10
14.251.173.127	attackbots	445/tcp [2019-09-12]1pkt	2019-09-13 09:09:38
95.130.10.69	attackbots	Unauthorized access detected from banned ip	2019-09-13 09:25:00
220.140.2.25	attackbotsspam	port scan and connect, tcp 23 (telnet)	2019-09-13 09:13:58
157.230.147.212	attackspambots	Sep 13 07:37:06 itv-usvr-01 sshd[1720]: Invalid user usuario from 157.230.147.212 Sep 13 07:37:06 itv-usvr-01 sshd[1720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.147.212 Sep 13 07:37:06 itv-usvr-01 sshd[1720]: Invalid user usuario from 157.230.147.212 Sep 13 07:37:08 itv-usvr-01 sshd[1720]: Failed password for invalid user usuario from 157.230.147.212 port 48806 ssh2 Sep 13 07:40:51 itv-usvr-01 sshd[1981]: Invalid user admin from 157.230.147.212	2019-09-13 09:04:23
27.17.116.170	attackbots	Sep 13 02:54:51 mxgate1 postfix/postscreen[28491]: CONNECT from [27.17.116.170]:3159 to [176.31.12.44]:25 Sep 13 02:54:51 mxgate1 postfix/dnsblog[28495]: addr 27.17.116.170 listed by domain zen.spamhaus.org as 127.0.0.11 Sep 13 02:54:51 mxgate1 postfix/dnsblog[28495]: addr 27.17.116.170 listed by domain zen.spamhaus.org as 127.0.0.3 Sep 13 02:54:51 mxgate1 postfix/dnsblog[28495]: addr 27.17.116.170 listed by domain zen.spamhaus.org as 127.0.0.4 Sep 13 02:54:51 mxgate1 postfix/dnsblog[28496]: addr 27.17.116.170 listed by domain cbl.abuseat.org as 127.0.0.2 Sep 13 02:54:57 mxgate1 postfix/postscreen[28491]: DNSBL rank 3 for [27.17.116.170]:3159 Sep x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=27.17.116.170	2019-09-13 09:34:10
123.207.145.66	attackspam	Sep 13 03:05:54 markkoudstaal sshd[22791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.145.66 Sep 13 03:05:56 markkoudstaal sshd[22791]: Failed password for invalid user test from 123.207.145.66 port 53998 ssh2 Sep 13 03:11:20 markkoudstaal sshd[23369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.145.66	2019-09-13 09:12:40
37.187.117.187	attackbots	Sep 13 03:17:38 mail sshd\[20176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.117.187 Sep 13 03:17:41 mail sshd\[20176\]: Failed password for invalid user wwwadmin from 37.187.117.187 port 45296 ssh2 Sep 13 03:22:11 mail sshd\[20629\]: Invalid user cloud from 37.187.117.187 port 36798 Sep 13 03:22:11 mail sshd\[20629\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.117.187 Sep 13 03:22:14 mail sshd\[20629\]: Failed password for invalid user cloud from 37.187.117.187 port 36798 ssh2	2019-09-13 09:32:17
186.48.166.69	attackbotsspam	Automatic report - Port Scan Attack	2019-09-13 09:03:10
58.243.182.85	attack	Sep 13 03:10:59 localhost sshd\[29945\]: Invalid user asdf from 58.243.182.85 port 46416 Sep 13 03:10:59 localhost sshd\[29945\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.243.182.85 Sep 13 03:11:01 localhost sshd\[29945\]: Failed password for invalid user asdf from 58.243.182.85 port 46416 ssh2	2019-09-13 09:26:58
111.223.81.245	attack	445/tcp [2019-09-12]1pkt	2019-09-13 09:02:09
222.221.248.242	attack	Sep 13 03:06:47 markkoudstaal sshd[22870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.221.248.242 Sep 13 03:06:49 markkoudstaal sshd[22870]: Failed password for invalid user admin1 from 222.221.248.242 port 58986 ssh2 Sep 13 03:11:08 markkoudstaal sshd[23346]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.221.248.242	2019-09-13 09:22:07

最近上报的IP列表

112.187.254.179	8.96.109.151	64.79.19.253	176.58.171.118
122.76.92.85	119.33.8.227	206.134.236.102	132.11.66.82
171.216.63.206	4.110.234.180	206.122.60.8	51.255.117.143
238.175.188.130	101.105.143.45	98.4.134.76	182.96.42.244
5.196.83.87	64.229.139.94	47.66.183.163	121.137.12.222