114.41.2.54 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Taiwan, Province of China

运营商(isp): Chunghwa Telecom Co. Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Honeypot attack, port: 23, PTR: 114-41-2-54.dynamic-ip.hinet.net.	2019-12-27 15:39:52

相同子网IP讨论:

IP	类型	评论内容	时间
114.41.227.19	attack	Brute forcing RDP port 3389	2020-08-29 16:21:05
114.41.245.104	attackbotsspam	Honeypot attack, port: 445, PTR: 114-41-245-104.dynamic-ip.hinet.net.	2020-06-27 19:47:32
114.41.244.213	attack	firewall-block, port(s): 23/tcp	2020-05-28 03:51:07
114.41.29.25	attack	Unauthorized connection attempt detected from IP address 114.41.29.25 to port 445	2020-03-18 20:27:14
114.41.204.160	attackspam	suspicious action Thu, 27 Feb 2020 11:21:01 -0300	2020-02-28 04:30:03
114.41.224.179	attackbotsspam	Unauthorized connection attempt from IP address 114.41.224.179 on Port 445(SMB)	2020-02-09 07:20:46
114.41.2.2	attackspambots	unauthorized connection attempt	2020-02-07 20:52:39
114.41.22.19	attackspambots	unauthorized connection attempt	2020-01-09 18:17:56
114.41.29.47	attack	Dec 20 17:48:18 debian-2gb-vpn-nbg1-1 kernel: [1231657.715777] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=114.41.29.47 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=51 ID=16111 PROTO=TCP SPT=24764 DPT=23 WINDOW=22659 RES=0x00 SYN URGP=0	2019-12-21 05:35:11
114.41.22.112	attackspam	Unauthorized connection attempt from IP address 114.41.22.112 on Port 445(SMB)	2019-12-20 06:33:11
114.41.243.6	attack	UTC: 2019-11-26 port: 23/tcp	2019-11-28 05:48:10
114.41.243.188	attackspam	port scan/probe/communication attempt; port 23	2019-11-26 07:42:45
114.41.202.82	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-11-22 05:25:08
114.41.26.248	attackspambots	23/tcp [2019-11-20]1pkt	2019-11-21 05:05:46
114.41.213.41	attackspambots	23/tcp [2019-10-22]1pkt	2019-10-23 07:55:05

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.41.2.54
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31129
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.41.2.54.			IN	A

;; AUTHORITY SECTION:
.			524	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122700 1800 900 604800 86400

;; Query time: 137 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Dec 27 15:39:47 CST 2019
;; MSG SIZE  rcvd: 115

HOST信息:

54.2.41.114.in-addr.arpa domain name pointer 114-41-2-54.dynamic-ip.hinet.net.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
54.2.41.114.in-addr.arpa	name = 114-41-2-54.dynamic-ip.hinet.net.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
185.14.250.194	attackbotsspam	email spam	2019-07-09 20:07:29
37.187.0.29	attack	2019-07-09T13:43:47.526796 sshd[18540]: Invalid user odoo from 37.187.0.29 port 54570 2019-07-09T13:43:47.541084 sshd[18540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.0.29 2019-07-09T13:43:47.526796 sshd[18540]: Invalid user odoo from 37.187.0.29 port 54570 2019-07-09T13:43:50.007953 sshd[18540]: Failed password for invalid user odoo from 37.187.0.29 port 54570 ssh2 2019-07-09T13:47:42.469011 sshd[18597]: Invalid user odoo from 37.187.0.29 port 42232 ...	2019-07-09 20:23:44
188.0.146.200	attackspam	19/7/9@06:45:07: FAIL: Alarm-Intrusion address from=188.0.146.200 ...	2019-07-09 20:39:37
118.36.190.186	attack	WordPress wp-login brute force :: 118.36.190.186 0.136 BYPASS [09/Jul/2019:13:13:13 1000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 4919 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2019-07-09 20:18:31
148.235.57.184	attackbots	$f2bV_matches	2019-07-09 20:44:00
138.255.14.90	attackbots	proto=tcp . spt=48237 . dpt=25 . (listed on Blocklist de Jul 08) (159)	2019-07-09 19:56:45
190.104.46.111	attack	Telnet Server BruteForce Attack	2019-07-09 19:54:24
50.63.197.85	attackbotsspam	ENG,WP GET /wp-includes/wlwmanifest.xml	2019-07-09 20:43:14
185.176.27.26	attack	09.07.2019 12:05:42 Connection to port 18497 blocked by firewall	2019-07-09 20:05:55
5.39.95.202	attackbots	Jul 9 11:18:44 MK-Soft-VM3 sshd\[3786\]: Invalid user squad from 5.39.95.202 port 41826 Jul 9 11:18:44 MK-Soft-VM3 sshd\[3786\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.39.95.202 Jul 9 11:18:46 MK-Soft-VM3 sshd\[3786\]: Failed password for invalid user squad from 5.39.95.202 port 41826 ssh2 ...	2019-07-09 20:16:45
222.186.52.123	attackbotsspam	2019-07-09T19:12:14.952183enmeeting.mahidol.ac.th sshd\[20736\]: User root from 222.186.52.123 not allowed because not listed in AllowUsers 2019-07-09T19:12:15.406846enmeeting.mahidol.ac.th sshd\[20736\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.123 user=root 2019-07-09T19:12:17.351942enmeeting.mahidol.ac.th sshd\[20736\]: Failed password for invalid user root from 222.186.52.123 port 52967 ssh2 ...	2019-07-09 20:27:31
170.210.214.50	attackspambots	Jul 7 07:52:07 josie sshd[32518]: Invalid user postgres from 170.210.214.50 Jul 7 07:52:07 josie sshd[32518]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.210.214.50 Jul 7 07:52:09 josie sshd[32518]: Failed password for invalid user postgres from 170.210.214.50 port 42134 ssh2 Jul 7 07:52:09 josie sshd[32519]: Received disconnect from 170.210.214.50: 11: Bye Bye Jul 7 07:56:02 josie sshd[2020]: Invalid user tom from 170.210.214.50 Jul 7 07:56:02 josie sshd[2020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.210.214.50 Jul 7 07:56:04 josie sshd[2020]: Failed password for invalid user tom from 170.210.214.50 port 48994 ssh2 Jul 7 07:56:04 josie sshd[2023]: Received disconnect from 170.210.214.50: 11: Bye Bye Jul 7 07:58:23 josie sshd[3395]: Invalid user simon from 170.210.214.50 Jul 7 07:58:23 josie sshd[3395]: pam_unix(sshd:auth): authentication failure; logname= uid........ -------------------------------	2019-07-09 20:37:44
198.71.227.39	attackbots	xmlrpc attack	2019-07-09 19:53:46
5.199.130.188	attack	SSH Bruteforce Attack	2019-07-09 20:29:07
77.247.109.72	attack	\[2019-07-09 08:08:53\] NOTICE\[13443\] chan_sip.c: Registration from '"1000" \' failed for '77.247.109.72:5416' - Wrong password \[2019-07-09 08:08:53\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-09T08:08:53.478-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1000",SessionID="0x7f02f835fad8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.72/5416",Challenge="1502e83b",ReceivedChallenge="1502e83b",ReceivedHash="f162c3d1579440fab96784431b2cba79" \[2019-07-09 08:08:53\] NOTICE\[13443\] chan_sip.c: Registration from '"1000" \' failed for '77.247.109.72:5416' - Wrong password \[2019-07-09 08:08:53\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-09T08:08:53.740-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1000",SessionID="0x7f02f88cef08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV	2019-07-09 20:14:58

最近上报的IP列表

190.48.97.27	167.172.37.249	117.192.88.187	189.5.210.239
49.228.76.14	27.46.36.134	196.195.49.78	125.34.90.156
42.117.213.125	138.19.102.178	120.25.167.56	203.212.98.24
181.143.139.141	113.172.255.135	45.182.127.227	121.229.0.50
144.132.166.70	123.207.229.184	103.67.152.212	47.103.3.18