114.99.14.254 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
114.99.14.134	attackbots	MAIL: User Login Brute Force Attempt	2020-04-02 02:27:28
114.99.14.112	attack	Jan 9 13:50:43 mxgate1 postfix/postscreen[1105]: CONNECT from [114.99.14.112]:64732 to [176.31.12.44]:25 Jan 9 13:50:43 mxgate1 postfix/dnsblog[1164]: addr 114.99.14.112 listed by domain zen.spamhaus.org as 127.0.0.11 Jan 9 13:50:43 mxgate1 postfix/dnsblog[1164]: addr 114.99.14.112 listed by domain zen.spamhaus.org as 127.0.0.4 Jan 9 13:50:43 mxgate1 postfix/dnsblog[1163]: addr 114.99.14.112 listed by domain cbl.abuseat.org as 127.0.0.2 Jan 9 13:50:43 mxgate1 postfix/dnsblog[1160]: addr 114.99.14.112 listed by domain b.barracudacentral.org as 127.0.0.2 Jan 9 13:50:44 mxgate1 postfix/postscreen[1105]: PREGREET 14 after 0.26 from [114.99.14.112]:64732: EHLO IHR2prK Jan 9 13:50:44 mxgate1 postfix/postscreen[1105]: DNSBL rank 4 for [114.99.14.112]:64732 Jan 9 13:50:45 mxgate1 postfix/postscreen[1105]: NOQUEUE: reject: RCPT from [114.99.14.112]:64732: 550 5.7.1 Service unavailable; client [114.99.14.112] blocked using zen.spamhaus.org; from=x@x helo= ........ -----------------------------------	2020-01-10 03:18:58
114.99.14.200	attackbots	Sep 1 23:09:32 eola postfix/smtpd[1010]: connect from unknown[114.99.14.200] Sep 1 23:09:33 eola postfix/smtpd[1010]: NOQUEUE: reject: RCPT from unknown[114.99.14.200]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=<55vCdI> Sep 1 23:09:33 eola postfix/smtpd[1010]: disconnect from unknown[114.99.14.200] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4 Sep 1 23:09:34 eola postfix/smtpd[1010]: connect from unknown[114.99.14.200] Sep 1 23:09:34 eola postfix/smtpd[1010]: lost connection after AUTH from unknown[114.99.14.200] Sep 1 23:09:34 eola postfix/smtpd[1010]: disconnect from unknown[114.99.14.200] ehlo=1 auth=0/1 commands=1/2 Sep 1 23:09:35 eola postfix/smtpd[1010]: connect from unknown[114.99.14.200] Sep 1 23:09:35 eola postfix/smtpd[1010]: lost connection after AUTH from unknown[114.99.14.200] Sep 1 23:09:35 eola postfix/smtpd[1010]: disconnect from unknown[114.99.14.200] ehlo=1 auth=0/1 commands=1/2 Sep 1 23:09:35 eola ........ -------------------------------	2019-09-02 12:36:21

类型

评论内容

时间

114.99.14.134

attackbots

MAIL: User Login Brute Force Attempt

2020-04-02 02:27:28

114.99.14.112

attack

Jan  9 13:50:43 mxgate1 postfix/postscreen[1105]: CONNECT from [114.99.14.112]:64732 to [176.31.12.44]:25
Jan  9 13:50:43 mxgate1 postfix/dnsblog[1164]: addr 114.99.14.112 listed by domain zen.spamhaus.org as 127.0.0.11
Jan  9 13:50:43 mxgate1 postfix/dnsblog[1164]: addr 114.99.14.112 listed by domain zen.spamhaus.org as 127.0.0.4
Jan  9 13:50:43 mxgate1 postfix/dnsblog[1163]: addr 114.99.14.112 listed by domain cbl.abuseat.org as 127.0.0.2
Jan  9 13:50:43 mxgate1 postfix/dnsblog[1160]: addr 114.99.14.112 listed by domain b.barracudacentral.org as 127.0.0.2
Jan  9 13:50:44 mxgate1 postfix/postscreen[1105]: PREGREET 14 after 0.26 from [114.99.14.112]:64732: EHLO IHR2prK

Jan  9 13:50:44 mxgate1 postfix/postscreen[1105]: DNSBL rank 4 for [114.99.14.112]:64732
Jan  9 13:50:45 mxgate1 postfix/postscreen[1105]: NOQUEUE: reject: RCPT from [114.99.14.112]:64732: 550 5.7.1 Service unavailable; client [114.99.14.112] blocked using zen.spamhaus.org; from=x@x helo=


........
-----------------------------------

2020-01-10 03:18:58

114.99.14.200

attackbots

Sep  1 23:09:32 eola postfix/smtpd[1010]: connect from unknown[114.99.14.200]
Sep  1 23:09:33 eola postfix/smtpd[1010]: NOQUEUE: reject: RCPT from unknown[114.99.14.200]: 504 5.5.2 : Helo command rejected: need fully-qualified hostname; from=x@x helo=<55vCdI>
Sep  1 23:09:33 eola postfix/smtpd[1010]: disconnect from unknown[114.99.14.200] ehlo=1 mail=1 rcpt=0/1 quhostname=1 commands=3/4
Sep  1 23:09:34 eola postfix/smtpd[1010]: connect from unknown[114.99.14.200]
Sep  1 23:09:34 eola postfix/smtpd[1010]: lost connection after AUTH from unknown[114.99.14.200]
Sep  1 23:09:34 eola postfix/smtpd[1010]: disconnect from unknown[114.99.14.200] ehlo=1 auth=0/1 commands=1/2
Sep  1 23:09:35 eola postfix/smtpd[1010]: connect from unknown[114.99.14.200]
Sep  1 23:09:35 eola postfix/smtpd[1010]: lost connection after AUTH from unknown[114.99.14.200]
Sep  1 23:09:35 eola postfix/smtpd[1010]: disconnect from unknown[114.99.14.200] ehlo=1 auth=0/1 commands=1/2
Sep  1 23:09:35 eola ........
-------------------------------

2019-09-02 12:36:21

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.99.14.254
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5219
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;114.99.14.254.			IN	A

;; AUTHORITY SECTION:
.			174	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030501 1800 900 604800 86400

;; Query time: 33 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 06 12:17:06 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

Host 254.14.99.114.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 254.14.99.114.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
203.113.121.2	attackspambots	Automatic report - Port Scan Attack	2020-01-11 17:17:05
196.203.31.154	attack	Jan 11 09:53:43 srv01 sshd[28925]: Invalid user informix from 196.203.31.154 port 53738 Jan 11 09:53:43 srv01 sshd[28925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.203.31.154 Jan 11 09:53:43 srv01 sshd[28925]: Invalid user informix from 196.203.31.154 port 53738 Jan 11 09:53:45 srv01 sshd[28925]: Failed password for invalid user informix from 196.203.31.154 port 53738 ssh2 Jan 11 09:55:44 srv01 sshd[29056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.203.31.154 user=root Jan 11 09:55:46 srv01 sshd[29056]: Failed password for root from 196.203.31.154 port 35491 ssh2 ...	2020-01-11 16:59:11
200.29.120.94	attack	Unauthorized connection attempt detected from IP address 200.29.120.94 to port 22	2020-01-11 17:22:37
222.186.175.161	attackspambots	Jan 11 04:21:31 TORMINT sshd[23820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.161 user=root Jan 11 04:21:34 TORMINT sshd[23820]: Failed password for root from 222.186.175.161 port 3412 ssh2 Jan 11 04:21:47 TORMINT sshd[23820]: error: maximum authentication attempts exceeded for root from 222.186.175.161 port 3412 ssh2 [preauth] Jan 11 04:21:31 TORMINT sshd[23820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.161 user=root Jan 11 04:21:34 TORMINT sshd[23820]: Failed password for root from 222.186.175.161 port 3412 ssh2 Jan 11 04:21:47 TORMINT sshd[23820]: error: maximum authentication attempts exceeded for root from 222.186.175.161 port 3412 ssh2 [preauth] Jan 11 04:21:31 TORMINT sshd[23820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.161 user=root Jan 11 04:21:34 TORMINT sshd[23820]: Failed password for root from 2 ...	2020-01-11 17:28:42
2.180.8.16	attackspambots	20/1/11@01:08:13: FAIL: Alarm-Network address from=2.180.8.16 ...	2020-01-11 17:04:47
31.14.15.219	attackbots	Automatic report - XMLRPC Attack	2020-01-11 17:17:18
37.49.231.108	attackbotsspam	SIP Server BruteForce Attack	2020-01-11 16:54:08
202.29.39.1	attack	Jan 11 09:54:48 srv01 sshd[28986]: Invalid user cacti from 202.29.39.1 port 35200 Jan 11 09:54:48 srv01 sshd[28986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.39.1 Jan 11 09:54:48 srv01 sshd[28986]: Invalid user cacti from 202.29.39.1 port 35200 Jan 11 09:54:51 srv01 sshd[28986]: Failed password for invalid user cacti from 202.29.39.1 port 35200 ssh2 Jan 11 09:56:58 srv01 sshd[29146]: Invalid user jboss from 202.29.39.1 port 55158 ...	2020-01-11 17:22:10
184.168.152.165	attackbots	Automatic report - XMLRPC Attack	2020-01-11 17:17:50
160.153.154.23	attackbotsspam	Automatic report - XMLRPC Attack	2020-01-11 17:12:20
106.54.50.232	attackbotsspam	$f2bV_matches	2020-01-11 16:55:50
125.129.123.87	attackspambots	Jan 11 05:52:39 grey postfix/smtpd\[9275\]: NOQUEUE: reject: RCPT from unknown\[125.129.123.87\]: 554 5.7.1 Service unavailable\; Client host \[125.129.123.87\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[125.129.123.87\]\; from=\ to=\ proto=ESMTP helo=\<\[125.129.123.87\]\> ...	2020-01-11 16:58:11
222.186.30.12	attackspambots	Jan 11 09:44:56 mail sshd[13798]: Failed password for root from 222.186.30.12 port 43199 ssh2 ...	2020-01-11 17:01:32
118.149.120.245	attackspambots	[ssh] SSH attack	2020-01-11 16:53:06
92.119.160.30	attackspambots	scan r	2020-01-11 17:25:38

最近上报的IP列表

117.212.21.52	117.212.21.62	117.212.210.232	117.212.210.10
117.212.21.53	50.13.159.67	117.212.21.201	117.212.22.236
117.212.22.37	117.212.22.46	117.212.22.243	117.212.22.119
117.212.229.7	117.212.23.141	117.212.23.244	117.212.231.18
117.212.225.19	117.212.233.88	117.212.23.103	114.99.14.26