114.227.14.138

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Jiangsu Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Oct 13 23:58:29 esmtp postfix/smtpd[25202]: lost connection after AUTH from unknown[114.227.14.138] Oct 13 23:58:30 esmtp postfix/smtpd[25213]: lost connection after AUTH from unknown[114.227.14.138] Oct 13 23:58:32 esmtp postfix/smtpd[24995]: lost connection after AUTH from unknown[114.227.14.138] Oct 13 23:58:32 esmtp postfix/smtpd[25200]: lost connection after AUTH from unknown[114.227.14.138] Oct 13 23:58:33 esmtp postfix/smtpd[25202]: lost connection after AUTH from unknown[114.227.14.138] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=114.227.14.138	2019-10-14 12:14:34

类型

评论内容

时间

attackspambots

Oct 13 23:58:29 esmtp postfix/smtpd[25202]: lost connection after AUTH from unknown[114.227.14.138]
Oct 13 23:58:30 esmtp postfix/smtpd[25213]: lost connection after AUTH from unknown[114.227.14.138]
Oct 13 23:58:32 esmtp postfix/smtpd[24995]: lost connection after AUTH from unknown[114.227.14.138]
Oct 13 23:58:32 esmtp postfix/smtpd[25200]: lost connection after AUTH from unknown[114.227.14.138]
Oct 13 23:58:33 esmtp postfix/smtpd[25202]: lost connection after AUTH from unknown[114.227.14.138]

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=114.227.14.138

2019-10-14 12:14:34

相同子网IP讨论:

IP	类型	评论内容	时间
114.227.142.91	attackspam	Icarus honeypot on github	2020-05-06 18:25:25
114.227.145.235	attack	Oct 26 23:34:34 esmtp postfix/smtpd[10234]: lost connection after AUTH from unknown[114.227.145.235] Oct 26 23:34:35 esmtp postfix/smtpd[10234]: lost connection after AUTH from unknown[114.227.145.235] Oct 26 23:34:38 esmtp postfix/smtpd[10234]: lost connection after AUTH from unknown[114.227.145.235] Oct 26 23:34:40 esmtp postfix/smtpd[10234]: lost connection after AUTH from unknown[114.227.145.235] Oct 26 23:34:43 esmtp postfix/smtpd[10234]: lost connection after AUTH from unknown[114.227.145.235] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=114.227.145.235	2019-10-27 20:07:11

类型

评论内容

时间

114.227.142.91

attackspam

Icarus honeypot on github

2020-05-06 18:25:25

114.227.145.235

attack

Oct 26 23:34:34 esmtp postfix/smtpd[10234]: lost connection after AUTH from unknown[114.227.145.235]
Oct 26 23:34:35 esmtp postfix/smtpd[10234]: lost connection after AUTH from unknown[114.227.145.235]
Oct 26 23:34:38 esmtp postfix/smtpd[10234]: lost connection after AUTH from unknown[114.227.145.235]
Oct 26 23:34:40 esmtp postfix/smtpd[10234]: lost connection after AUTH from unknown[114.227.145.235]
Oct 26 23:34:43 esmtp postfix/smtpd[10234]: lost connection after AUTH from unknown[114.227.145.235]

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=114.227.145.235

2019-10-27 20:07:11

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.227.14.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34586
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.227.14.138.			IN	A

;; AUTHORITY SECTION:
.			299	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101301 1800 900 604800 86400

;; Query time: 634 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 14 12:14:31 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

138.14.227.114.in-addr.arpa domain name pointer 138.14.227.114.broad.cz.js.dynamic.163data.com.cn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
138.14.227.114.in-addr.arpa	name = 138.14.227.114.broad.cz.js.dynamic.163data.com.cn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
66.249.64.135	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5cd1f90fd8a409b0 \| WAF_Rule_ID: 1bd9f7863d3d4d8faf68c16295216fb5 \| WAF_Kind: firewall \| CF_Action: allow \| Country: US \| CF_IPClass: searchEngine \| Protocol: HTTP/1.1 \| Method: GET \| Host: www.wevg.org \| User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) \| CF_DC: IAD. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2020-09-05 07:27:06
167.71.96.148	attackspam	firewall-block, port(s): 14087/tcp	2020-09-05 07:19:12
186.147.160.189	attackspambots	Sep 4 18:42:04 minden010 sshd[28377]: Failed password for root from 186.147.160.189 port 48770 ssh2 Sep 4 18:46:16 minden010 sshd[29800]: Failed password for root from 186.147.160.189 port 53238 ssh2 ...	2020-09-05 07:25:15
129.28.165.213	attackbots	Sep 4 17:21:50 plex-server sshd[827548]: Invalid user xpq from 129.28.165.213 port 55784 Sep 4 17:21:50 plex-server sshd[827548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.165.213 Sep 4 17:21:50 plex-server sshd[827548]: Invalid user xpq from 129.28.165.213 port 55784 Sep 4 17:21:52 plex-server sshd[827548]: Failed password for invalid user xpq from 129.28.165.213 port 55784 ssh2 Sep 4 17:24:29 plex-server sshd[829156]: Invalid user testlab from 129.28.165.213 port 54766 ...	2020-09-05 07:22:04
193.29.15.169	attackbotsspam	193.29.15.169 was recorded 8 times by 4 hosts attempting to connect to the following ports: 389,1900,123. Incident counter (4h, 24h, all-time): 8, 17, 4401	2020-09-05 07:27:33
190.51.255.12	attackbots	20/9/4@12:50:18: FAIL: Alarm-Network address from=190.51.255.12 ...	2020-09-05 07:36:39
212.129.25.123	attackbots	GET /wp-login.php HTTP/1.1	2020-09-05 07:26:22
122.155.164.118	attackspambots	TCP (SYN) 122.155.164.118:42814 -> port 445, len 44	2020-09-05 07:34:20
72.218.42.62	attackbotsspam	2020-09-04T18:50:36.615687vps773228.ovh.net sshd[11725]: Invalid user admin from 72.218.42.62 port 34420 2020-09-04T18:50:36.721950vps773228.ovh.net sshd[11725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip72-218-42-62.hr.hr.cox.net 2020-09-04T18:50:36.615687vps773228.ovh.net sshd[11725]: Invalid user admin from 72.218.42.62 port 34420 2020-09-04T18:50:39.132509vps773228.ovh.net sshd[11725]: Failed password for invalid user admin from 72.218.42.62 port 34420 ssh2 2020-09-04T18:50:40.115644vps773228.ovh.net sshd[11727]: Invalid user admin from 72.218.42.62 port 34538 ...	2020-09-05 07:16:28
91.134.248.230	attack	WEB server attack.	2020-09-05 07:02:36
62.210.140.84	attackbots	Automatic report - Banned IP Access	2020-09-05 07:31:06
198.199.77.16	attackspam	bruteforce detected	2020-09-05 07:08:28
78.28.233.52	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-05 07:07:15
54.38.139.210	attack	Brute-force attempt banned	2020-09-05 07:17:42
194.99.105.206	attackbots	[2020-09-04 18:57:42] NOTICE[1194] chan_sip.c: Registration from '"66"' failed for '194.99.105.206:8377' - Wrong password [2020-09-04 18:57:42] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-04T18:57:42.881-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="66",SessionID="0x7f2ddc1178e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/194.99.105.206/8377",Challenge="7012bfda",ReceivedChallenge="7012bfda",ReceivedHash="34494b2d18f93e40c7ada278df7d96e2" [2020-09-04 18:59:33] NOTICE[1194] chan_sip.c: Registration from '"67"' failed for '194.99.105.206:50111' - Wrong password [2020-09-04 18:59:33] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-04T18:59:33.656-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="67",SessionID="0x7f2ddc04e988",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/194.99.105.2 ...	2020-09-05 07:02:04

最近上报的IP列表

91.179.1.131	93.178.37.36	146.213.55.193	83.7.39.183
120.238.43.214	79.141.122.18	203.38.136.130	157.180.190.27
66.249.64.241	81.56.157.160	198.158.89.85	103.124.173.72
187.32.29.114	51.68.62.17	198.15.130.18	120.6.104.219
185.8.49.145	112.213.89.130	94.254.85.231	191.27.53.193