114.141.52.91 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Indonesia

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
114.141.52.94	attackspam	Lines containing failures of 114.141.52.94 Jun 5 22:45:32 neweola sshd[21674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.141.52.94 user=r.r Jun 5 22:45:35 neweola sshd[21674]: Failed password for r.r from 114.141.52.94 port 35968 ssh2 Jun 5 22:45:36 neweola sshd[21674]: Received disconnect from 114.141.52.94 port 35968:11: Bye Bye [preauth] Jun 5 22:45:36 neweola sshd[21674]: Disconnected from authenticating user r.r 114.141.52.94 port 35968 [preauth] Jun 5 23:02:40 neweola sshd[22202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.141.52.94 user=r.r Jun 5 23:02:41 neweola sshd[22202]: Failed password for r.r from 114.141.52.94 port 36554 ssh2 Jun 5 23:02:42 neweola sshd[22202]: Received disconnect from 114.141.52.94 port 36554:11: Bye Bye [preauth] Jun 5 23:02:42 neweola sshd[22202]: Disconnected from authenticating user r.r 114.141.52.94 port 36554 [preauth] Jun 5........ ------------------------------	2020-06-07 07:55:23

类型

评论内容

时间

114.141.52.94

attackspam

Lines containing failures of 114.141.52.94
Jun  5 22:45:32 neweola sshd[21674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.141.52.94  user=r.r
Jun  5 22:45:35 neweola sshd[21674]: Failed password for r.r from 114.141.52.94 port 35968 ssh2
Jun  5 22:45:36 neweola sshd[21674]: Received disconnect from 114.141.52.94 port 35968:11: Bye Bye [preauth]
Jun  5 22:45:36 neweola sshd[21674]: Disconnected from authenticating user r.r 114.141.52.94 port 35968 [preauth]
Jun  5 23:02:40 neweola sshd[22202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.141.52.94  user=r.r
Jun  5 23:02:41 neweola sshd[22202]: Failed password for r.r from 114.141.52.94 port 36554 ssh2
Jun  5 23:02:42 neweola sshd[22202]: Received disconnect from 114.141.52.94 port 36554:11: Bye Bye [preauth]
Jun  5 23:02:42 neweola sshd[22202]: Disconnected from authenticating user r.r 114.141.52.94 port 36554 [preauth]
Jun  5........
------------------------------

2020-06-07 07:55:23

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.141.52.91
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44500
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;114.141.52.91.			IN	A

;; AUTHORITY SECTION:
.			366	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030501 1800 900 604800 86400

;; Query time: 25 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 06 11:04:10 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

b';; connection timed out; no servers could be reached
'

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
91.52.141.114.in-addr.arpa	name = host52-91.cyberplus.net.id.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
114.33.75.206	attack	Input Traffic from this IP, but critial abuseconfidencescore	2020-03-04 14:23:03
213.178.155.20	attackbotsspam	2020-03-04T05:34:19.889414shield sshd\[15843\]: Invalid user em from 213.178.155.20 port 44116 2020-03-04T05:34:19.896985shield sshd\[15843\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.178.155.20 2020-03-04T05:34:21.516552shield sshd\[15843\]: Failed password for invalid user em from 213.178.155.20 port 44116 ssh2 2020-03-04T05:42:56.229815shield sshd\[17091\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.178.155.20 user=root 2020-03-04T05:42:58.155709shield sshd\[17091\]: Failed password for root from 213.178.155.20 port 50346 ssh2	2020-03-04 13:53:02
148.70.178.70	attackspambots	Mar 4 06:46:22 silence02 sshd[10775]: Failed password for gnats from 148.70.178.70 port 55692 ssh2 Mar 4 06:52:15 silence02 sshd[11212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.178.70 Mar 4 06:52:17 silence02 sshd[11212]: Failed password for invalid user ts from 148.70.178.70 port 36640 ssh2	2020-03-04 13:54:02
213.219.215.59	attackspam	Lines containing failures of 213.219.215.59 Mar 4 05:58:29 srv sshd[103476]: Connection closed by 213.219.215.59 port 49890 [preauth] Mar 4 05:58:49 srv sshd[103482]: Invalid user admin1 from 213.219.215.59 port 55168 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=213.219.215.59	2020-03-04 14:18:13
191.35.167.69	attackbots	" "	2020-03-04 14:09:41
60.190.129.6	attackspambots	Mar 4 04:01:28 XXX sshd[31617]: Invalid user admin from 60.190.129.6 port 35204	2020-03-04 13:44:59
14.215.47.223	attackbots	Mar 4 10:57:20 gw1 sshd[27391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.215.47.223 Mar 4 10:57:21 gw1 sshd[27391]: Failed password for invalid user testnet from 14.215.47.223 port 57624 ssh2 ...	2020-03-04 14:02:19
51.81.30.252	attackbotsspam	Brute force attack against VPN service	2020-03-04 14:05:07
114.67.66.199	attack	Mar 4 05:59:50 jane sshd[32188]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.66.199 Mar 4 05:59:52 jane sshd[32188]: Failed password for invalid user xgridagent from 114.67.66.199 port 58021 ssh2 ...	2020-03-04 13:49:32
144.172.92.12	attack	2020-03-03 22:58:37 H=mail-a.webstudiosixtysix.com (mail.allaboutrepairing.com) [144.172.92.12]:42095 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in sip-sip24.73t3wsbtnrhe.invaluement.com (127.0.0.2) (Blocked by ivmSIP and/or ivmSIP/24 - see https://www.invaluement.com/lookup/?item=144.172.92.12) 2020-03-03 22:59:16 H=mail-a.webstudiosixtysix.com (mail.allaboutrepairing.com) [144.172.92.12]:45855 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in sip-sip24.73t3wsbtnrhe.invaluement.com (127.0.0.2) (Blocked by ivmSIP and/or ivmSIP/24 - see https://www.invaluement.com/lookup/?item=144.172.92.12) 2020-03-03 22:59:16 H=mail-a.webstudiosixtysix.com (mail.allaboutrepairing.com) [144.172.92.12]:45855 I=[192.147.25.65]:25 F= rejected RCPT	2020-03-04 14:19:08
49.88.112.67	attack	Mar 4 07:11:41 eventyay sshd[24968]: Failed password for root from 49.88.112.67 port 34876 ssh2 Mar 4 07:12:29 eventyay sshd[24972]: Failed password for root from 49.88.112.67 port 48672 ssh2 Mar 4 07:12:31 eventyay sshd[24972]: Failed password for root from 49.88.112.67 port 48672 ssh2 ...	2020-03-04 14:24:07
94.237.69.169	attackspam	Tue Mar 3 22:00:38 2020 - Child process 128236 handling connection Tue Mar 3 22:00:38 2020 - New connection from: 94.237.69.169:33340 Tue Mar 3 22:00:38 2020 - Sending data to client: [Login: ] Tue Mar 3 22:00:38 2020 - Got data: root Tue Mar 3 22:00:39 2020 - Sending data to client: [Password: ] Tue Mar 3 22:00:40 2020 - Got data: root Tue Mar 3 22:00:42 2020 - Child 128243 granting shell Tue Mar 3 22:00:42 2020 - Child 128236 exiting Tue Mar 3 22:00:42 2020 - Sending data to client: [Logged in] Tue Mar 3 22:00:42 2020 - Sending data to client: [Welcome to MX990 Embedded Linux] Tue Mar 3 22:00:42 2020 - Sending data to client: [[root@dvrdvs /]# ] Tue Mar 3 22:00:42 2020 - Reporting IP address: 94.237.69.169 - mflag: 0	2020-03-04 13:51:36
128.199.211.110	attackbots	DATE:2020-03-04 05:59:19, IP:128.199.211.110, PORT:ssh SSH brute force auth (docker-dc)	2020-03-04 14:16:46
36.61.222.3	attack	1583297968 - 03/04/2020 05:59:28 Host: 36.61.222.3/36.61.222.3 Port: 445 TCP Blocked	2020-03-04 14:09:08
167.99.99.10	attackspambots	Mar 4 00:45:13 NPSTNNYC01T sshd[28353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.99.10 Mar 4 00:45:14 NPSTNNYC01T sshd[28353]: Failed password for invalid user remote from 167.99.99.10 port 54494 ssh2 Mar 4 00:46:42 NPSTNNYC01T sshd[28397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.99.10 ...	2020-03-04 13:48:20

最近上报的IP列表

114.247.121.146	114.141.54.180	114.141.54.220	114.141.54.67
114.141.54.70	114.249.119.131	114.249.119.108	114.25.168.218
114.249.119.149	114.249.119.12	114.249.119.16	114.25.167.100
114.249.119.111	114.249.119.138	114.25.169.22	114.249.119.165
114.249.119.140	114.25.172.229	114.25.172.24	114.25.182.186