110.13.14.16 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Korea, Republic of

运营商(isp): SK Broadband Co Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Invalid user usuario from 110.13.14.16 port 50885	2019-09-13 12:50:47

相同子网IP讨论:

IP	类型	评论内容	时间
110.13.149.139	attackspambots	Nov 24 21:01:24 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:0d:8f:41:08:00 SRC=110.13.149.139 DST=109.74.200.221 LEN=32 TOS=0x00 PREC=0x00 TTL=56 ID=0 DF PROTO=UDP SPT=123 DPT=123 LEN=12 ...	2020-03-03 21:33:47
110.13.149.116	attack	Jul 1 15:39:19 web2 sshd[20175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.13.149.116 Jul 1 15:39:21 web2 sshd[20175]: Failed password for invalid user nagios from 110.13.149.116 port 52552 ssh2	2019-07-01 23:56:45

类型

评论内容

时间

110.13.149.139

attackspambots

Nov 24 21:01:24 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:0d:8f:41:08:00 SRC=110.13.149.139 DST=109.74.200.221 LEN=32 TOS=0x00 PREC=0x00 TTL=56 ID=0 DF PROTO=UDP SPT=123 DPT=123 LEN=12 
...

2020-03-03 21:33:47

110.13.149.116

attack

Jul  1 15:39:19 web2 sshd[20175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.13.149.116
Jul  1 15:39:21 web2 sshd[20175]: Failed password for invalid user nagios from 110.13.149.116 port 52552 ssh2

2019-07-01 23:56:45

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 110.13.14.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51140
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;110.13.14.16.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091202 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Sep 13 12:50:39 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 16.14.13.110.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 16.14.13.110.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
5.89.57.142	attackbotsspam	Jul 12 12:04:28 v22018053744266470 sshd[15984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=net-5-89-57-142.cust.vodafonedsl.it Jul 12 12:04:30 v22018053744266470 sshd[15984]: Failed password for invalid user nexus from 5.89.57.142 port 53933 ssh2 Jul 12 12:13:12 v22018053744266470 sshd[16572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=net-5-89-57-142.cust.vodafonedsl.it ...	2019-07-12 18:27:29
61.133.229.38	attackspam	port scan and connect, tcp 22 (ssh)	2019-07-12 17:40:58
37.6.105.203	attackspam	" "	2019-07-12 17:40:30
190.217.71.15	attackspam	Jul 12 09:58:36 mail sshd\[28490\]: Invalid user temporal from 190.217.71.15 port 44769 Jul 12 09:58:36 mail sshd\[28490\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.217.71.15 Jul 12 09:58:37 mail sshd\[28490\]: Failed password for invalid user temporal from 190.217.71.15 port 44769 ssh2 Jul 12 10:04:27 mail sshd\[28633\]: Invalid user ftpuser from 190.217.71.15 port 46015 Jul 12 10:04:27 mail sshd\[28633\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.217.71.15 ...	2019-07-12 18:14:14
49.207.5.158	attackspambots	Jul 12 12:23:58 tux-35-217 sshd\[2276\]: Invalid user pi from 49.207.5.158 port 38388 Jul 12 12:23:58 tux-35-217 sshd\[2276\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.5.158 Jul 12 12:23:58 tux-35-217 sshd\[2278\]: Invalid user pi from 49.207.5.158 port 38394 Jul 12 12:23:59 tux-35-217 sshd\[2278\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.207.5.158 ...	2019-07-12 18:35:45
185.234.216.105	attackspam	Jul 12 05:47:33 web1 postfix/smtpd[19665]: warning: unknown[185.234.216.105]: SASL LOGIN authentication failed: authentication failure ...	2019-07-12 18:09:30
110.185.103.79	attack	Jul 12 11:40:21 meumeu sshd[32027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.185.103.79 Jul 12 11:40:23 meumeu sshd[32027]: Failed password for invalid user art from 110.185.103.79 port 42941 ssh2 Jul 12 11:47:26 meumeu sshd[827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.185.103.79 ...	2019-07-12 18:06:47
37.120.135.221	attackspambots	\[2019-07-12 06:32:19\] NOTICE\[22786\] chan_sip.c: Registration from '\' failed for '37.120.135.221:1340' - Wrong password \[2019-07-12 06:32:19\] SECURITY\[22794\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-12T06:32:19.920-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="19393",SessionID="0x7f754411dec8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.120.135.221/54775",Challenge="28707983",ReceivedChallenge="28707983",ReceivedHash="d24a8411e40c06fd816dff5a3318284d" \[2019-07-12 06:33:26\] NOTICE\[22786\] chan_sip.c: Registration from '\' failed for '37.120.135.221:1325' - Wrong password \[2019-07-12 06:33:26\] SECURITY\[22794\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-12T06:33:26.093-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3205",SessionID="0x7f754413ee98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37	2019-07-12 18:36:02
62.83.76.221	attack	Sniffing for wp-login	2019-07-12 18:25:10
168.90.12.3	attackbotsspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-11 22:29:59,643 INFO [amun_request_handler] PortScan Detected on Port: 445 (168.90.12.3)	2019-07-12 17:40:06
207.46.13.130	attackbotsspam	Automatic report - Web App Attack	2019-07-12 18:12:10
118.69.128.22	attackspam	web-1 [ssh] SSH Attack	2019-07-12 18:21:59
103.110.89.148	attack	Jul 12 04:40:43 aat-srv002 sshd[9184]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.110.89.148 Jul 12 04:40:46 aat-srv002 sshd[9184]: Failed password for invalid user cacti from 103.110.89.148 port 51876 ssh2 Jul 12 04:46:50 aat-srv002 sshd[9376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.110.89.148 Jul 12 04:46:52 aat-srv002 sshd[9376]: Failed password for invalid user mitchell from 103.110.89.148 port 54086 ssh2 ...	2019-07-12 18:10:35
128.199.69.86	attackspam	$f2bV_matches	2019-07-12 17:29:04
36.233.91.84	attackspam	23/tcp 37215/tcp [2019-07-09/10]2pkt	2019-07-12 17:44:22

最近上报的IP列表

180.148.4.244	180.126.76.176	59.46.67.38	45.95.3.152
172.143.207.151	132.145.167.73	125.41.29.54	120.87.40.241
48.193.37.23	169.239.92.126	124.196.178.150	14.241.231.21
198.219.0.230	119.109.72.209	106.194.170.255	82.165.29.94
49.81.92.93	46.177.201.47	17.93.31.107	17.99.101.168