114.40.20.94 - IPInfo

基本信息:

城市(city): Kaohsiung City

省份(region): Kaohsiung

国家(country): Taiwan, China

运营商(isp): Chunghwa Telecom Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Unauthorized connection attempt from IP address 114.40.20.94 on Port 445(SMB)	2019-11-04 04:29:13

相同子网IP讨论:

IP	类型	评论内容	时间
114.40.20.153	attack	1581620844 - 02/13/2020 20:07:24 Host: 114.40.20.153/114.40.20.153 Port: 445 TCP Blocked	2020-02-14 09:47:56

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.40.20.94
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4703
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.40.20.94.			IN	A

;; AUTHORITY SECTION:
.			384	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110301 1800 900 604800 86400

;; Query time: 110 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Nov 04 04:29:11 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

94.20.40.114.in-addr.arpa domain name pointer 114-40-20-94.dynamic-ip.hinet.net.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
94.20.40.114.in-addr.arpa	name = 114-40-20-94.dynamic-ip.hinet.net.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
211.151.95.139	attack	Oct 4 06:48:59 www5 sshd\[34255\]: Invalid user 123Photo from 211.151.95.139 Oct 4 06:48:59 www5 sshd\[34255\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.151.95.139 Oct 4 06:49:01 www5 sshd\[34255\]: Failed password for invalid user 123Photo from 211.151.95.139 port 60740 ssh2 ...	2019-10-04 19:29:29
213.185.163.124	attackspambots	Invalid user odroid from 213.185.163.124 port 55154	2019-10-04 19:51:45
162.247.74.217	attackspambots	Oct 4 12:31:41 rotator sshd\[28186\]: Invalid user acid from 162.247.74.217Oct 4 12:31:44 rotator sshd\[28186\]: Failed password for invalid user acid from 162.247.74.217 port 57862 ssh2Oct 4 12:31:46 rotator sshd\[28186\]: Failed password for invalid user acid from 162.247.74.217 port 57862 ssh2Oct 4 12:31:48 rotator sshd\[28186\]: Failed password for invalid user acid from 162.247.74.217 port 57862 ssh2Oct 4 12:31:51 rotator sshd\[28186\]: Failed password for invalid user acid from 162.247.74.217 port 57862 ssh2Oct 4 12:31:54 rotator sshd\[28186\]: Failed password for invalid user acid from 162.247.74.217 port 57862 ssh2 ...	2019-10-04 19:11:57
175.45.180.38	attackspam	[ssh] SSH attack	2019-10-04 19:55:49
104.206.128.78	attackbotsspam	port scan and connect, tcp 88 (kerberos-sec)	2019-10-04 19:22:55
84.243.8.156	attackbotsspam	(Oct 4) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 4) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 4) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 4) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 4) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 4) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 4) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 3) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 3) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 3) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 3) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 3) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 3) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 3) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 3) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 3) LEN=40 TTL=56 ID=19108 TCP DPT=23 WINDOW=2739 SYN (Oct 3...	2019-10-04 19:15:35
122.176.27.149	attackbotsspam	2019-10-04T10:55:31.428259abusebot-7.cloudsearch.cf sshd\[18233\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.176.27.149 user=root	2019-10-04 19:29:51
152.250.252.179	attack	Oct 4 13:32:09 MK-Soft-VM5 sshd[445]: Failed password for root from 152.250.252.179 port 45292 ssh2 ...	2019-10-04 19:46:34
103.137.184.46	attack	WordPress wp-login brute force :: 103.137.184.46 0.132 BYPASS [04/Oct/2019:20:23:49 1000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2019-10-04 19:25:49
217.182.79.245	attackbots	Oct 4 08:07:58 server sshd\[14491\]: User root from 217.182.79.245 not allowed because listed in DenyUsers Oct 4 08:07:58 server sshd\[14491\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.79.245 user=root Oct 4 08:08:00 server sshd\[14491\]: Failed password for invalid user root from 217.182.79.245 port 42320 ssh2 Oct 4 08:12:15 server sshd\[13766\]: User root from 217.182.79.245 not allowed because listed in DenyUsers Oct 4 08:12:15 server sshd\[13766\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.79.245 user=root	2019-10-04 19:22:00
201.55.126.57	attackspambots	Oct 4 12:26:02 dev0-dcde-rnet sshd[6787]: Failed password for root from 201.55.126.57 port 44795 ssh2 Oct 4 12:31:51 dev0-dcde-rnet sshd[6801]: Failed password for root from 201.55.126.57 port 37162 ssh2	2019-10-04 19:25:10
142.44.234.247	attack	Oct 4 07:38:11 www sshd\[226331\]: Invalid user P@55word\#12345 from 142.44.234.247 Oct 4 07:38:11 www sshd\[226331\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.234.247 Oct 4 07:38:12 www sshd\[226331\]: Failed password for invalid user P@55word\#12345 from 142.44.234.247 port 54924 ssh2 ...	2019-10-04 19:47:23
77.247.110.17	attackbots	\[2019-10-04 07:24:51\] NOTICE\[1948\] chan_sip.c: Registration from '"199" \' failed for '77.247.110.17:5078' - Wrong password \[2019-10-04 07:24:51\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-04T07:24:51.120-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="199",SessionID="0x7f1e1c02d9c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.17/5078",Challenge="4cc0f178",ReceivedChallenge="4cc0f178",ReceivedHash="877e77cfa890e01c420c2223a1ee35a1" \[2019-10-04 07:24:51\] NOTICE\[1948\] chan_sip.c: Registration from '"199" \' failed for '77.247.110.17:5078' - Wrong password \[2019-10-04 07:24:51\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-04T07:24:51.232-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="199",SessionID="0x7f1e1c3735b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.2	2019-10-04 19:52:47
92.118.160.37	attackspambots	04.10.2019 08:03:49 Connection to port 6001 blocked by firewall	2019-10-04 19:26:20
75.80.193.222	attackspambots	2019-10-04T07:41:13.838188abusebot-2.cloudsearch.cf sshd\[8765\]: Invalid user P@ssword@xxx from 75.80.193.222 port 42822	2019-10-04 19:14:11

最近上报的IP列表

212.224.113.128	139.142.99.25	123.13.100.33	201.10.183.238
75.181.101.231	106.43.159.26	138.94.230.79	167.75.204.23
5.204.160.212	124.181.184.98	156.160.227.251	162.172.173.234
195.116.29.183	5.63.68.87	42.118.118.95	68.185.227.246
153.92.127.204	182.106.18.198	104.42.36.239	64.173.105.7