114.40.68.45 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Taiwan, Province of China

运营商(isp): Chunghwa Telecom Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/114.40.68.45/ TW - 1H : (220) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : TW NAME ASN : ASN3462 IP : 114.40.68.45 CIDR : 114.40.0.0/16 PREFIX COUNT : 390 UNIQUE IP COUNT : 12267520 WYKRYTE ATAKI Z ASN3462 : 1H - 19 3H - 47 6H - 60 12H - 90 24H - 152 DateTime : 2019-10-01 05:51:31 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-10-01 15:19:30

类型

评论内容

时间

attack

IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/114.40.68.45/ 
 TW - 1H : (220)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : TW 
 NAME ASN : ASN3462 
 
 IP : 114.40.68.45 
 
 CIDR : 114.40.0.0/16 
 
 PREFIX COUNT : 390 
 
 UNIQUE IP COUNT : 12267520 
 
 
 WYKRYTE ATAKI Z ASN3462 :  
  1H - 19 
  3H - 47 
  6H - 60 
 12H - 90 
 24H - 152 
 
 DateTime : 2019-10-01 05:51:31 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

2019-10-01 15:19:30

相同子网IP讨论:

IP	类型	评论内容	时间
114.40.68.57	attackbotsspam	TCP (SYN) 114.40.68.57:52709 -> port 23, len 44	2020-05-29 18:37:01
114.40.68.184	attackbots	1580792074 - 02/04/2020 05:54:34 Host: 114.40.68.184/114.40.68.184 Port: 445 TCP Blocked	2020-02-04 20:05:26

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.40.68.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36933
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.40.68.45.			IN	A

;; AUTHORITY SECTION:
.			597	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100101 1800 900 604800 86400

;; Query time: 51 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 01 15:19:25 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

45.68.40.114.in-addr.arpa domain name pointer 114-40-68-45.dynamic-ip.hinet.net.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
45.68.40.114.in-addr.arpa	name = 114-40-68-45.dynamic-ip.hinet.net.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
156.96.45.192	attackbotsspam	Postfix SMTP rejection	2020-02-25 09:47:33
95.38.214.208	attackspam	suspicious action Mon, 24 Feb 2020 20:23:12 -0300	2020-02-25 10:02:34
222.111.145.234	attackbotsspam	Honeypot attack, port: 81, PTR: PTR record not found	2020-02-25 09:40:11
180.76.232.66	attack	Feb 24 15:11:09 web1 sshd\[6159\]: Invalid user krishna from 180.76.232.66 Feb 24 15:11:09 web1 sshd\[6159\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.232.66 Feb 24 15:11:10 web1 sshd\[6159\]: Failed password for invalid user krishna from 180.76.232.66 port 40664 ssh2 Feb 24 15:12:58 web1 sshd\[6358\]: Invalid user compose from 180.76.232.66 Feb 24 15:12:58 web1 sshd\[6358\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.232.66	2020-02-25 09:46:48
36.229.202.213	attackbotsspam	suspicious action Mon, 24 Feb 2020 20:23:33 -0300	2020-02-25 09:40:34
54.36.189.198	attackbots	2020-02-24 15:04:42 server sshd[10683]: Failed password for invalid user root from 54.36.189.198 port 51480 ssh2	2020-02-25 09:52:25
49.88.112.116	attack	Feb 25 02:36:00 localhost sshd\[31943\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.116 user=root Feb 25 02:36:02 localhost sshd\[31943\]: Failed password for root from 49.88.112.116 port 30153 ssh2 Feb 25 02:36:05 localhost sshd\[31943\]: Failed password for root from 49.88.112.116 port 30153 ssh2	2020-02-25 09:47:07
95.82.255.58	attack	Feb 24 20:26:57 NPSTNNYC01T sshd[6620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.82.255.58 Feb 24 20:26:59 NPSTNNYC01T sshd[6620]: Failed password for invalid user debian from 95.82.255.58 port 53978 ssh2 Feb 24 20:36:17 NPSTNNYC01T sshd[7340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.82.255.58 ...	2020-02-25 09:38:35
211.25.119.131	attack	Feb 25 02:20:55 vps691689 sshd[22678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.25.119.131 Feb 25 02:20:57 vps691689 sshd[22678]: Failed password for invalid user Ronald from 211.25.119.131 port 61637 ssh2 ...	2020-02-25 09:46:16
92.171.176.123	attack	Honeypot attack, port: 5555, PTR: lfbn-cle-1-727-123.w92-171.abo.wanadoo.fr.	2020-02-25 09:58:03
153.142.49.250	attackspam	SMB Server BruteForce Attack	2020-02-25 09:35:47
196.220.67.2	attackspambots	Feb 25 01:09:10 zeus sshd[4123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.220.67.2 Feb 25 01:09:12 zeus sshd[4123]: Failed password for invalid user email from 196.220.67.2 port 58852 ssh2 Feb 25 01:15:21 zeus sshd[4272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.220.67.2 Feb 25 01:15:23 zeus sshd[4272]: Failed password for invalid user magda from 196.220.67.2 port 59646 ssh2	2020-02-25 09:29:44
103.94.6.69	attackspam	2020-02-25T01:24:23.949910shield sshd\[1569\]: Invalid user debian-spamd from 103.94.6.69 port 41338 2020-02-25T01:24:23.954017shield sshd\[1569\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.6.69 2020-02-25T01:24:26.161920shield sshd\[1569\]: Failed password for invalid user debian-spamd from 103.94.6.69 port 41338 ssh2 2020-02-25T01:26:47.054364shield sshd\[2003\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.6.69 user=root 2020-02-25T01:26:48.364055shield sshd\[2003\]: Failed password for root from 103.94.6.69 port 57755 ssh2	2020-02-25 09:38:16
103.71.45.23	attackspam	02/24/2020-18:23:20.773532 103.71.45.23 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2020-02-25 09:54:06
183.56.54.83	attack	2020-02-25T00:23:21.620152 X postfix/smtpd[5329]: lost connection after AUTH from unknown[183.56.54.83] 2020-02-25T00:23:22.502494 X postfix/smtpd[5329]: lost connection after AUTH from unknown[183.56.54.83] 2020-02-25T00:23:23.377108 X postfix/smtpd[5329]: lost connection after AUTH from unknown[183.56.54.83]	2020-02-25 09:49:18

最近上报的IP列表

123.7.169.232	159.135.230.47	110.173.130.40	103.204.108.153
27.41.71.56	193.228.59.112	83.90.217.252	45.120.51.137
16.74.16.95	67.154.125.143	159.200.195.2	66.151.93.25
106.221.88.84	119.121.90.78	220.50.104.179	21.201.85.86
166.240.251.18	200.71.182.240	36.92.56.37	182.215.65.3