114.99.131.101

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Anhui Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Aug 8 23:49:47 localhost postfix/smtpd\[32014\]: warning: unknown\[114.99.131.101\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 8 23:49:55 localhost postfix/smtpd\[32031\]: warning: unknown\[114.99.131.101\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 8 23:50:06 localhost postfix/smtpd\[32014\]: warning: unknown\[114.99.131.101\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 8 23:50:21 localhost postfix/smtpd\[32014\]: warning: unknown\[114.99.131.101\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 8 23:50:29 localhost postfix/smtpd\[32031\]: warning: unknown\[114.99.131.101\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-08-09 09:31:43

类型

评论内容

时间

attack

Aug  8 23:49:47 localhost postfix/smtpd\[32014\]: warning: unknown\[114.99.131.101\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  8 23:49:55 localhost postfix/smtpd\[32031\]: warning: unknown\[114.99.131.101\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  8 23:50:06 localhost postfix/smtpd\[32014\]: warning: unknown\[114.99.131.101\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  8 23:50:21 localhost postfix/smtpd\[32014\]: warning: unknown\[114.99.131.101\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  8 23:50:29 localhost postfix/smtpd\[32031\]: warning: unknown\[114.99.131.101\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...

2019-08-09 09:31:43

相同子网IP讨论:

IP	类型	评论内容	时间
114.99.131.70	attackbotsspam	Unauthorized connection attempt detected from IP address 114.99.131.70 to port 6656 [T]	2020-01-27 07:04:48
114.99.131.226	attack	Unauthorized connection attempt detected from IP address 114.99.131.226 to port 6656 [T]	2020-01-27 05:35:42
114.99.131.60	attackbots	Unauthorized connection attempt detected from IP address 114.99.131.60 to port 6656 [T]	2020-01-27 04:11:06
114.99.131.199	attackbots	Forbidden directory scan :: 2019/09/28 22:26:34 [error] 1103#1103: *462338 access forbidden by rule, client: 114.99.131.199, server: [censored_1], request: "GET /.../server-stuff/sql-query-find-invalid-email-addresses HTTP/1.1", host: "www.[censored_1]"	2019-09-29 04:14:36

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.99.131.101
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24973
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.99.131.101.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080801 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Aug 09 09:31:37 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

Host 101.131.99.114.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 101.131.99.114.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
118.45.238.79	attack	TCP (SYN) 118.45.238.79:47970 -> port 23, len 44	2020-06-01 00:42:53
27.106.121.147	attackbots	Unauthorized connection attempt detected from IP address 27.106.121.147 to port 445	2020-06-01 01:02:31
103.78.242.202	attackspam	TCP (SYN) 103.78.242.202:58788 -> port 8081, len 60	2020-06-01 01:08:53
196.42.53.147	attack	Automatic report - Port Scan Attack	2020-06-01 01:13:00
88.79.100.70	attackbotsspam	Unauthorized connection attempt detected from IP address 88.79.100.70 to port 445	2020-06-01 00:49:30
83.209.60.116	attack	Unauthorized connection attempt detected from IP address 83.209.60.116 to port 23	2020-06-01 00:50:43
93.144.228.113	attackbotsspam	Unauthorized connection attempt detected from IP address 93.144.228.113 to port 8080	2020-06-01 00:48:57
180.250.55.195	attackspambots	May 31 18:55:58 OPSO sshd\[6416\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.55.195 user=root May 31 18:56:00 OPSO sshd\[6416\]: Failed password for root from 180.250.55.195 port 44452 ssh2 May 31 19:00:38 OPSO sshd\[7341\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.55.195 user=root May 31 19:00:40 OPSO sshd\[7341\]: Failed password for root from 180.250.55.195 port 48304 ssh2 May 31 19:05:20 OPSO sshd\[8764\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.55.195 user=root	2020-06-01 01:05:25
180.76.37.36	attack	May 31 14:09:47 debian-2gb-nbg1-2 kernel: \[13185764.059271\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=180.76.37.36 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=47916 PROTO=TCP SPT=43082 DPT=12844 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-01 01:10:04
94.244.138.21	attack	" "	2020-06-01 01:11:37
112.80.136.135	attackspam	Unauthorized connection attempt detected from IP address 112.80.136.135 to port 8088	2020-06-01 00:45:42
113.141.65.61	attackspambots	Unauthorized connection attempt detected from IP address 113.141.65.61 to port 1433	2020-06-01 00:44:27
184.154.47.2	attack	Unauthorized connection attempt detected from IP address 184.154.47.2 to port 1400	2020-06-01 00:35:13
200.89.159.52	attack	2020-05-31T07:46:03.4443781495-001 sshd[44991]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52-159-89-200.fibertel.com.ar user=root 2020-05-31T07:46:05.2843741495-001 sshd[44991]: Failed password for root from 200.89.159.52 port 44614 ssh2 2020-05-31T07:48:43.5982401495-001 sshd[45080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52-159-89-200.fibertel.com.ar user=root 2020-05-31T07:48:45.0719691495-001 sshd[45080]: Failed password for root from 200.89.159.52 port 52160 ssh2 2020-05-31T07:51:20.8010031495-001 sshd[45220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52-159-89-200.fibertel.com.ar user=root 2020-05-31T07:51:22.8262661495-001 sshd[45220]: Failed password for root from 200.89.159.52 port 59708 ssh2 ...	2020-06-01 01:07:28
108.178.61.58	attack	TCP (SYN) 108.178.61.58:13622 -> port 8099, len 44	2020-06-01 00:46:23

最近上报的IP列表

147.30.41.153	143.219.19.35	123.104.150.125	24.172.96.148
23.229.32.227	34.23.28.147	91.61.34.113	113.193.7.66
106.110.167.139	94.29.124.138	49.88.65.127	177.73.193.216
191.240.71.167	189.79.185.6	186.90.190.105	23.225.34.58
185.244.143.233	175.110.105.226	81.215.62.170	222.64.42.209