23.29.9.21 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): Ponderosa Cablevision

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Honeypot attack, port: 5555, PTR: 23-29-9-21.netptc.net.	2020-03-27 03:21:13

相同子网IP讨论:

IP	类型	评论内容	时间
23.29.99.104	attackbots	Nov 14 08:32:41 tux-35-217 sshd\[24937\]: Invalid user gustafsson from 23.29.99.104 port 59594 Nov 14 08:32:41 tux-35-217 sshd\[24937\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.29.99.104 Nov 14 08:32:43 tux-35-217 sshd\[24937\]: Failed password for invalid user gustafsson from 23.29.99.104 port 59594 ssh2 Nov 14 08:37:46 tux-35-217 sshd\[24974\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.29.99.104 user=root ...	2019-11-14 16:56:47
23.29.99.104	attackbotsspam	Nov 13 06:47:49 site2 sshd\[43540\]: Invalid user tudisco from 23.29.99.104Nov 13 06:47:51 site2 sshd\[43540\]: Failed password for invalid user tudisco from 23.29.99.104 port 60772 ssh2Nov 13 06:52:43 site2 sshd\[43624\]: Invalid user calendar from 23.29.99.104Nov 13 06:52:45 site2 sshd\[43624\]: Failed password for invalid user calendar from 23.29.99.104 port 38098 ssh2Nov 13 06:57:41 site2 sshd\[43707\]: Invalid user test from 23.29.99.104 ...	2019-11-13 14:08:36

类型

评论内容

时间

23.29.99.104

attackbots

Nov 14 08:32:41 tux-35-217 sshd\[24937\]: Invalid user gustafsson from 23.29.99.104 port 59594
Nov 14 08:32:41 tux-35-217 sshd\[24937\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.29.99.104
Nov 14 08:32:43 tux-35-217 sshd\[24937\]: Failed password for invalid user gustafsson from 23.29.99.104 port 59594 ssh2
Nov 14 08:37:46 tux-35-217 sshd\[24974\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.29.99.104  user=root
...

2019-11-14 16:56:47

23.29.99.104

attackbotsspam

Nov 13 06:47:49 site2 sshd\[43540\]: Invalid user tudisco from 23.29.99.104Nov 13 06:47:51 site2 sshd\[43540\]: Failed password for invalid user tudisco from 23.29.99.104 port 60772 ssh2Nov 13 06:52:43 site2 sshd\[43624\]: Invalid user calendar from 23.29.99.104Nov 13 06:52:45 site2 sshd\[43624\]: Failed password for invalid user calendar from 23.29.99.104 port 38098 ssh2Nov 13 06:57:41 site2 sshd\[43707\]: Invalid user test from 23.29.99.104
...

2019-11-13 14:08:36

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 23.29.9.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50291
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;23.29.9.21.			IN	A

;; AUTHORITY SECTION:
.			561	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020032601 1800 900 604800 86400

;; Query time: 77 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 27 03:21:09 CST 2020
;; MSG SIZE  rcvd: 114

HOST信息:

21.9.29.23.in-addr.arpa domain name pointer 23-29-9-21.netptc.net.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
21.9.29.23.in-addr.arpa	name = 23-29-9-21.netptc.net.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
93.42.117.137	attack	Feb 21 21:31:37 eddieflores sshd\[28126\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93-42-117-137.ip86.fastwebnet.it user=mysql Feb 21 21:31:39 eddieflores sshd\[28126\]: Failed password for mysql from 93.42.117.137 port 55083 ssh2 Feb 21 21:35:32 eddieflores sshd\[28428\]: Invalid user robi from 93.42.117.137 Feb 21 21:35:32 eddieflores sshd\[28428\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93-42-117-137.ip86.fastwebnet.it Feb 21 21:35:34 eddieflores sshd\[28428\]: Failed password for invalid user robi from 93.42.117.137 port 52141 ssh2	2020-02-22 15:51:44
203.157.151.20	attackspam	Invalid user admin from 203.157.151.20 port 7876	2020-02-22 16:14:25
218.29.83.38	attackbotsspam	Total attacks: 2	2020-02-22 16:30:39
222.186.173.154	attackbotsspam	Feb 22 09:12:36 jane sshd[13619]: Failed password for root from 222.186.173.154 port 2510 ssh2 Feb 22 09:12:40 jane sshd[13619]: Failed password for root from 222.186.173.154 port 2510 ssh2 ...	2020-02-22 16:13:56
158.69.110.31	attack	Feb 22 05:50:00 nextcloud sshd\[32738\]: Invalid user tomcat from 158.69.110.31 Feb 22 05:50:00 nextcloud sshd\[32738\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.110.31 Feb 22 05:50:02 nextcloud sshd\[32738\]: Failed password for invalid user tomcat from 158.69.110.31 port 36676 ssh2	2020-02-22 16:07:09
162.243.133.168	attackspambots	firewall-block, port(s): 79/tcp	2020-02-22 16:31:15
189.34.62.36	attackbots	Feb 22 05:46:40 ns3042688 sshd\[26468\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.34.62.36 user=root Feb 22 05:46:42 ns3042688 sshd\[26468\]: Failed password for root from 189.34.62.36 port 54629 ssh2 Feb 22 05:49:49 ns3042688 sshd\[27106\]: Invalid user mcserver from 189.34.62.36 Feb 22 05:49:49 ns3042688 sshd\[27106\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.34.62.36 Feb 22 05:49:51 ns3042688 sshd\[27106\]: Failed password for invalid user mcserver from 189.34.62.36 port 33479 ssh2 ...	2020-02-22 16:14:38
113.23.4.89	attackbots	1582346961 - 02/22/2020 05:49:21 Host: 113.23.4.89/113.23.4.89 Port: 445 TCP Blocked	2020-02-22 16:34:51
213.240.121.34	attackbotsspam	Feb 22 05:50:34 zeus sshd[3957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.240.121.34 Feb 22 05:50:37 zeus sshd[3957]: Failed password for invalid user robyn from 213.240.121.34 port 51784 ssh2 Feb 22 05:59:39 zeus sshd[4079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.240.121.34 Feb 22 05:59:41 zeus sshd[4079]: Failed password for invalid user test from 213.240.121.34 port 60758 ssh2	2020-02-22 16:32:53
113.161.66.214	attackspambots	Feb 22 08:47:55 lnxded64 sshd[21585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.66.214	2020-02-22 16:20:16
54.36.106.204	attackbotsspam	[2020-02-22 02:42:59] NOTICE[1148] chan_sip.c: Registration from '' failed for '54.36.106.204:59516' - Wrong password [2020-02-22 02:42:59] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-22T02:42:59.873-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="5009",SessionID="0x7fd82cb4f218",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/54.36.106.204/59516",Challenge="3804f49b",ReceivedChallenge="3804f49b",ReceivedHash="f51ee77c72a24205cd051e47586d0789" [2020-02-22 02:44:30] NOTICE[1148] chan_sip.c: Registration from '' failed for '54.36.106.204:56178' - Wrong password [2020-02-22 02:44:30] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-22T02:44:30.230-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="5010",SessionID="0x7fd82c9bc688",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/54.36.106.204 ...	2020-02-22 16:04:47
69.94.141.84	attack	Postfix RBL failed	2020-02-22 16:21:49
223.17.48.170	attackbots	Port probing on unauthorized port 5555	2020-02-22 16:01:12
37.223.210.4	attackbotsspam	firewall-block, port(s): 81/tcp	2020-02-22 16:09:09
213.217.5.23	attack	$f2bV_matches	2020-02-22 15:56:32

最近上报的IP列表

155.33.245.43	34.97.77.206	72.222.168.125	88.210.253.254
115.125.152.23	92.51.38.227	82.165.84.66	98.124.144.156
185.31.160.227	180.253.241.111	35.168.59.90	181.99.228.253
216.98.90.168	113.134.244.131	255.149.240.20	79.18.38.168
149.149.198.171	36.199.51.53	178.254.215.26	36.68.74.159