114.99.14.228 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
114.99.14.134	attackbots	MAIL: User Login Brute Force Attempt	2020-04-02 02:27:28
114.99.14.112	attack	Jan 9 13:50:43 mxgate1 postfix/postscreen[1105]: CONNECT from [114.99.14.112]:64732 to [176.31.12.44]:25 Jan 9 13:50:43 mxgate1 postfix/dnsblog[1164]: addr 114.99.14.112 listed by domain zen.spamhaus.org as 127.0.0.11 Jan 9 13:50:43 mxgate1 postfix/dnsblog[1164]: addr 114.99.14.112 listed by domain zen.spamhaus.org as 127.0.0.4 Jan 9 13:50:43 mxgate1 postfix/dnsblog[1163]: addr 114.99.14.112 listed by domain cbl.abuseat.org as 127.0.0.2 Jan 9 13:50:43 mxgate1 postfix/dnsblog[1160]: addr 114.99.14.112 listed by domain b.barracudacentral.org as 127.0.0.2 Jan 9 13:50:44 mxgate1 postfix/postscreen[1105]: PREGREET 14 after 0.26 from [114.99.14.112]:64732: EHLO IHR2prK Jan 9 13:50:44 mxgate1 postfix/postscreen[1105]: DNSBL rank 4 for [114.99.14.112]:64732 Jan 9 13:50:45 mxgate1 postfix/postscreen[1105]: NOQUEUE: reject: RCPT from [114.99.14.112]:64732: 550 5.7.1 Service unavailable; client [114.99.14.112] blocked using zen.spamhaus.org; from=x@x helo= ........ -----------------------------------	2020-01-10 03:18:58
114.99.14.200	attackbots	Sep 1 23:09:32 eola postfix/smtpd[1010]: connect from unknown[114.99.14.200] Sep 1 23:09:33 eola postfix/smtpd[1010]: NOQUEUE: reject: RCPT from unknown[114.99.14.200]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=<55vCdI> Sep 1 23:09:33 eola postfix/smtpd[1010]: disconnect from unknown[114.99.14.200] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4 Sep 1 23:09:34 eola postfix/smtpd[1010]: connect from unknown[114.99.14.200] Sep 1 23:09:34 eola postfix/smtpd[1010]: lost connection after AUTH from unknown[114.99.14.200] Sep 1 23:09:34 eola postfix/smtpd[1010]: disconnect from unknown[114.99.14.200] ehlo=1 auth=0/1 commands=1/2 Sep 1 23:09:35 eola postfix/smtpd[1010]: connect from unknown[114.99.14.200] Sep 1 23:09:35 eola postfix/smtpd[1010]: lost connection after AUTH from unknown[114.99.14.200] Sep 1 23:09:35 eola postfix/smtpd[1010]: disconnect from unknown[114.99.14.200] ehlo=1 auth=0/1 commands=1/2 Sep 1 23:09:35 eola ........ -------------------------------	2019-09-02 12:36:21

类型

评论内容

时间

114.99.14.134

attackbots

MAIL: User Login Brute Force Attempt

2020-04-02 02:27:28

114.99.14.112

attack

Jan  9 13:50:43 mxgate1 postfix/postscreen[1105]: CONNECT from [114.99.14.112]:64732 to [176.31.12.44]:25
Jan  9 13:50:43 mxgate1 postfix/dnsblog[1164]: addr 114.99.14.112 listed by domain zen.spamhaus.org as 127.0.0.11
Jan  9 13:50:43 mxgate1 postfix/dnsblog[1164]: addr 114.99.14.112 listed by domain zen.spamhaus.org as 127.0.0.4
Jan  9 13:50:43 mxgate1 postfix/dnsblog[1163]: addr 114.99.14.112 listed by domain cbl.abuseat.org as 127.0.0.2
Jan  9 13:50:43 mxgate1 postfix/dnsblog[1160]: addr 114.99.14.112 listed by domain b.barracudacentral.org as 127.0.0.2
Jan  9 13:50:44 mxgate1 postfix/postscreen[1105]: PREGREET 14 after 0.26 from [114.99.14.112]:64732: EHLO IHR2prK

Jan  9 13:50:44 mxgate1 postfix/postscreen[1105]: DNSBL rank 4 for [114.99.14.112]:64732
Jan  9 13:50:45 mxgate1 postfix/postscreen[1105]: NOQUEUE: reject: RCPT from [114.99.14.112]:64732: 550 5.7.1 Service unavailable; client [114.99.14.112] blocked using zen.spamhaus.org; from=x@x helo=


........
-----------------------------------

2020-01-10 03:18:58

114.99.14.200

attackbots

Sep  1 23:09:32 eola postfix/smtpd[1010]: connect from unknown[114.99.14.200]
Sep  1 23:09:33 eola postfix/smtpd[1010]: NOQUEUE: reject: RCPT from unknown[114.99.14.200]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=<55vCdI>
Sep  1 23:09:33 eola postfix/smtpd[1010]: disconnect from unknown[114.99.14.200] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4
Sep  1 23:09:34 eola postfix/smtpd[1010]: connect from unknown[114.99.14.200]
Sep  1 23:09:34 eola postfix/smtpd[1010]: lost connection after AUTH from unknown[114.99.14.200]
Sep  1 23:09:34 eola postfix/smtpd[1010]: disconnect from unknown[114.99.14.200] ehlo=1 auth=0/1 commands=1/2
Sep  1 23:09:35 eola postfix/smtpd[1010]: connect from unknown[114.99.14.200]
Sep  1 23:09:35 eola postfix/smtpd[1010]: lost connection after AUTH from unknown[114.99.14.200]
Sep  1 23:09:35 eola postfix/smtpd[1010]: disconnect from unknown[114.99.14.200] ehlo=1 auth=0/1 commands=1/2
Sep  1 23:09:35 eola ........
-------------------------------

2019-09-02 12:36:21

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.99.14.228
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43248
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;114.99.14.228.			IN	A

;; AUTHORITY SECTION:
.			320	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030501 1800 900 604800 86400

;; Query time: 23 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 06 12:16:24 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

Host 228.14.99.114.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 228.14.99.114.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
137.74.173.182	attackbotsspam	May 2 14:58:30 dev0-dcde-rnet sshd[6053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.173.182 May 2 14:58:32 dev0-dcde-rnet sshd[6053]: Failed password for invalid user paula from 137.74.173.182 port 37102 ssh2 May 2 15:09:38 dev0-dcde-rnet sshd[6134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.173.182	2020-05-02 21:26:59
1.54.100.60	attackspam	Unauthorized connection attempt from IP address 1.54.100.60 on Port 445(SMB)	2020-05-02 20:57:12
45.143.220.100	attackspam	SIP Brute force to port 5060	2020-05-02 21:32:35
222.91.97.134	attack	2020-05-02T14:08:20.425435vps751288.ovh.net sshd\[25231\]: Invalid user vbox from 222.91.97.134 port 2307 2020-05-02T14:08:20.435139vps751288.ovh.net sshd\[25231\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.91.97.134 2020-05-02T14:08:22.245555vps751288.ovh.net sshd\[25231\]: Failed password for invalid user vbox from 222.91.97.134 port 2307 ssh2 2020-05-02T14:15:05.639155vps751288.ovh.net sshd\[25269\]: Invalid user src from 222.91.97.134 port 2308 2020-05-02T14:15:05.646972vps751288.ovh.net sshd\[25269\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.91.97.134	2020-05-02 21:08:58
115.73.213.31	attackbotsspam	(imapd) Failed IMAP login from 115.73.213.31 (VN/Vietnam/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: May 2 16:44:39 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=115.73.213.31, lip=5.63.12.44, session=	2020-05-02 21:30:20
118.25.183.200	attack	May 2 13:56:52 ovpn sshd\[20551\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.183.200 user=root May 2 13:56:54 ovpn sshd\[20551\]: Failed password for root from 118.25.183.200 port 38912 ssh2 May 2 14:09:40 ovpn sshd\[23720\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.183.200 user=root May 2 14:09:42 ovpn sshd\[23720\]: Failed password for root from 118.25.183.200 port 55604 ssh2 May 2 14:14:52 ovpn sshd\[25029\]: Invalid user nicola from 118.25.183.200 May 2 14:14:52 ovpn sshd\[25029\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.183.200	2020-05-02 21:21:38
46.209.49.246	attack	Repeated RDP login failures. Last user: User9	2020-05-02 20:54:33
222.186.175.23	attackbots	May 2 13:21:39 scw-6657dc sshd[26433]: Failed password for root from 222.186.175.23 port 11076 ssh2 May 2 13:21:39 scw-6657dc sshd[26433]: Failed password for root from 222.186.175.23 port 11076 ssh2 May 2 13:21:41 scw-6657dc sshd[26433]: Failed password for root from 222.186.175.23 port 11076 ssh2 ...	2020-05-02 21:22:04
194.31.244.26	attackbotsspam	05/02/2020-09:18:34.585813 194.31.244.26 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-02 21:28:04
51.91.251.20	attack	Fail2Ban Ban Triggered	2020-05-02 21:23:35
14.116.154.173	attack	May 2 09:58:36 dns1 sshd[4389]: Failed password for root from 14.116.154.173 port 36992 ssh2 May 2 10:01:20 dns1 sshd[4564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.116.154.173 May 2 10:01:22 dns1 sshd[4564]: Failed password for invalid user pmm from 14.116.154.173 port 44856 ssh2	2020-05-02 21:04:16
210.242.193.130	attackbotsspam	Unauthorized connection attempt from IP address 210.242.193.130 on Port 445(SMB)	2020-05-02 21:06:45
186.179.103.107	attack	May 2 12:45:13 game-panel sshd[31452]: Failed password for root from 186.179.103.107 port 60692 ssh2 May 2 12:49:32 game-panel sshd[31617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.179.103.107 May 2 12:49:34 game-panel sshd[31617]: Failed password for invalid user bc from 186.179.103.107 port 37825 ssh2	2020-05-02 20:57:45
14.227.198.65	attackbotsspam	Unauthorized connection attempt from IP address 14.227.198.65 on Port 445(SMB)	2020-05-02 21:12:42
180.76.147.221	attackspam	SSH invalid-user multiple login try	2020-05-02 21:14:09

最近上报的IP列表

117.212.192.78	114.99.14.229	114.99.14.231	114.99.14.232
114.99.14.234	114.99.14.236	114.99.14.24	114.99.14.240
114.99.14.242	114.99.14.244	23.49.28.43	117.212.194.46
117.212.194.53	117.212.194.67	114.99.14.247	186.21.34.87
117.212.194.64	117.212.194.60	117.212.194.63	117.212.194.57