221.155.108.29

基本信息:

城市(city): Guri-si

省份(region): Gyeonggi-do

国家(country): South Korea

运营商(isp): KT Corporation

主机名(hostname): unknown

机构(organization): Korea Telecom

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Brute force RDP, port 3389	2019-08-18 05:24:43

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 221.155.108.29
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11252
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;221.155.108.29.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081700 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Aug 18 05:24:38 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 29.108.155.221.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 29.108.155.221.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
90.146.196.115	attackspambots	TCP (SYN) 90.146.196.115:32934 -> port 23, len 44	2020-10-05 22:30:27
122.51.150.134	attackspam	Oct 5 10:29:31 nopemail auth.info sshd[17307]: Disconnected from authenticating user root 122.51.150.134 port 39652 [preauth] ...	2020-10-05 22:29:14
175.215.108.203	attack	Found on CINS badguys / proto=6 . srcport=14499 . dstport=23 Telnet . (2056)	2020-10-05 22:31:24
122.51.10.222	attackbotsspam	Oct 5 10:03:33 lanister sshd[3967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.10.222 user=root Oct 5 10:03:35 lanister sshd[3967]: Failed password for root from 122.51.10.222 port 40990 ssh2 Oct 5 10:06:18 lanister sshd[4012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.10.222 user=root Oct 5 10:06:20 lanister sshd[4012]: Failed password for root from 122.51.10.222 port 40936 ssh2	2020-10-05 22:21:55
139.59.20.176	attackspam	Automatic report - Banned IP Access	2020-10-05 21:54:43
58.87.78.80	attackspambots	prod11 ...	2020-10-05 22:03:48
5.165.91.67	attackbots	TCP (SYN) 5.165.91.67:22295 -> port 23, len 40	2020-10-05 22:24:47
83.110.206.84	attackbots	TCP (SYN) 83.110.206.84:57705 -> port 22, len 44	2020-10-05 22:19:00
171.231.17.136	attackbots	445/tcp [2020-10-04]1pkt	2020-10-05 22:33:26
212.70.149.83	attackbots	Rude login attack (2396 tries in 1d)	2020-10-05 22:10:56
165.227.169.7	attackspam	Oct 5 13:49:57 localhost sshd\[21135\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.169.7 user=root Oct 5 13:49:59 localhost sshd\[21135\]: Failed password for root from 165.227.169.7 port 37094 ssh2 Oct 5 13:53:47 localhost sshd\[21588\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.169.7 user=root Oct 5 13:53:49 localhost sshd\[21588\]: Failed password for root from 165.227.169.7 port 44224 ssh2 Oct 5 13:57:37 localhost sshd\[21908\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.169.7 user=root ...	2020-10-05 21:54:24
118.40.189.117	attackspam	[N3.H3.VM3] Port Scanner Detected Blocked by UFW	2020-10-05 22:30:06
125.45.76.152	attackspambots	Oct 4 22:40:22 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=125.45.76.152 DST=79.143.186.54 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=43634 DF PROTO=TCP SPT=57002 DPT=80 WINDOW=29040 RES=0x00 SYN URGP=0 Oct 4 22:40:23 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=125.45.76.152 DST=79.143.186.54 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=43635 DF PROTO=TCP SPT=57002 DPT=80 WINDOW=29040 RES=0x00 SYN URGP=0 Oct 4 22:40:25 hidden kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:3f:fd:58:00:08:e3:ff:fd:90:08:00 SRC=125.45.76.152 DST=79.143.186.54 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=43636 DF PROTO=TCP SPT=57002 DPT=80 WINDOW=29040 RES=0x00 SYN URGP=0	2020-10-05 21:56:54
159.65.224.137	attackbotsspam	TCP (SYN) 159.65.224.137:51572 -> port 18808, len 44	2020-10-05 22:15:29
187.106.81.102	attackspambots	Oct 5 15:24:45 srv-ubuntu-dev3 sshd[82100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.106.81.102 user=root Oct 5 15:24:47 srv-ubuntu-dev3 sshd[82100]: Failed password for root from 187.106.81.102 port 37478 ssh2 Oct 5 15:25:50 srv-ubuntu-dev3 sshd[82217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.106.81.102 user=root Oct 5 15:25:52 srv-ubuntu-dev3 sshd[82217]: Failed password for root from 187.106.81.102 port 49962 ssh2 Oct 5 15:26:59 srv-ubuntu-dev3 sshd[82332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.106.81.102 user=root Oct 5 15:27:01 srv-ubuntu-dev3 sshd[82332]: Failed password for root from 187.106.81.102 port 34214 ssh2 Oct 5 15:28:06 srv-ubuntu-dev3 sshd[82455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.106.81.102 user=root Oct 5 15:28:08 srv-ubuntu-dev3 sshd[82455]: F ...	2020-10-05 22:19:32

最近上报的IP列表

200.196.90.200	178.217.71.10	182.36.3.130	145.63.196.105
90.75.137.66	102.141.72.50	204.212.251.179	39.12.54.208
183.170.68.5	223.246.200.217	97.243.231.36	165.61.192.167
36.14.187.65	171.9.74.214	216.75.206.86	80.88.122.203
36.87.105.15	131.189.197.32	190.217.22.119	34.107.69.230