14.116.254.75 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Guangdong Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	spam	2020-04-15 16:24:04

相同子网IP讨论:

IP	类型	评论内容	时间
14.116.254.127	attackbotsspam	Feb 22 17:34:34 motanud sshd\[32317\]: Invalid user ubuntu from 14.116.254.127 port 47364 Feb 22 17:34:34 motanud sshd\[32317\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.116.254.127 Feb 22 17:34:36 motanud sshd\[32317\]: Failed password for invalid user ubuntu from 14.116.254.127 port 47364 ssh2	2019-08-10 21:14:05
14.116.254.33	attackbotsspam	Feb 6 16:51:43 motanud sshd\[13713\]: Invalid user jason from 14.116.254.33 port 25609 Feb 6 16:51:43 motanud sshd\[13713\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.116.254.33 Feb 6 16:51:45 motanud sshd\[13713\]: Failed password for invalid user jason from 14.116.254.33 port 25609 ssh2	2019-08-10 21:11:45
14.116.254.128	attack	Invalid user easy from 14.116.254.128 port 43826	2019-07-28 04:48:35

类型

评论内容

时间

14.116.254.127

attackbotsspam

Feb 22 17:34:34 motanud sshd\[32317\]: Invalid user ubuntu from 14.116.254.127 port 47364
Feb 22 17:34:34 motanud sshd\[32317\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.116.254.127
Feb 22 17:34:36 motanud sshd\[32317\]: Failed password for invalid user ubuntu from 14.116.254.127 port 47364 ssh2

2019-08-10 21:14:05

14.116.254.33

attackbotsspam

Feb  6 16:51:43 motanud sshd\[13713\]: Invalid user jason from 14.116.254.33 port 25609
Feb  6 16:51:43 motanud sshd\[13713\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.116.254.33
Feb  6 16:51:45 motanud sshd\[13713\]: Failed password for invalid user jason from 14.116.254.33 port 25609 ssh2

2019-08-10 21:11:45

14.116.254.128

attack

Invalid user easy from 14.116.254.128 port 43826

2019-07-28 04:48:35

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.116.254.75
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44679
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.116.254.75.			IN	A

;; AUTHORITY SECTION:
.			504	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020041500 1800 900 604800 86400

;; Query time: 153 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 15 16:24:00 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 75.254.116.14.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 75.254.116.14.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
74.208.65.52	attack	" "	2020-04-05 05:49:58
184.154.189.90	attack	Unauthorized connection attempt detected from IP address 184.154.189.90 to port 5900	2020-04-05 05:44:09
50.127.71.5	attack	Apr 4 21:42:56 *** sshd[17116]: User root from 50.127.71.5 not allowed because not listed in AllowUsers	2020-04-05 06:00:15
50.3.60.24	attack	2020-04-04 08:34:07 H=(07660fc9.virusmeter.uno) [50.3.60.24]:44136 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2020-04-04 08:34:07 H=(076a801c.virusmeter.uno) [50.3.60.24]:33056 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) 2020-04-04 08:34:07 H=(0768dd7f.virusmeter.uno) [50.3.60.24]:42510 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) ...	2020-04-05 05:28:43
183.185.213.35	attack	23/tcp [2020-04-04]1pkt	2020-04-05 05:51:09
85.105.145.67	attack	Unauthorized connection attempt detected from IP address 85.105.145.67 to port 8080	2020-04-05 05:46:05
213.230.67.32	attackspambots	Apr 4 22:15:26 sso sshd[16873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.230.67.32 Apr 4 22:15:29 sso sshd[16873]: Failed password for invalid user nicolas from 213.230.67.32 port 13428 ssh2 ...	2020-04-05 05:30:42
170.78.75.122	attack	445/tcp [2020-04-04]1pkt	2020-04-05 05:24:19
222.186.173.154	attackspambots	Apr 4 17:33:33 plusreed sshd[1686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.154 user=root Apr 4 17:33:35 plusreed sshd[1686]: Failed password for root from 222.186.173.154 port 50768 ssh2 ...	2020-04-05 05:34:24
165.227.212.156	attackbots	Apr 4 18:30:33 sso sshd[21732]: Failed password for root from 165.227.212.156 port 40074 ssh2 ...	2020-04-05 05:44:35
150.95.31.150	attackspambots	Apr 4 22:52:29 lock-38 sshd[566178]: Failed password for root from 150.95.31.150 port 57058 ssh2 Apr 4 22:59:55 lock-38 sshd[566364]: Failed password for root from 150.95.31.150 port 47148 ssh2 Apr 4 23:03:57 lock-38 sshd[566491]: Failed password for root from 150.95.31.150 port 52160 ssh2 Apr 4 23:07:49 lock-38 sshd[566617]: Failed password for root from 150.95.31.150 port 57222 ssh2 Apr 4 23:11:36 lock-38 sshd[566793]: Failed password for root from 150.95.31.150 port 34012 ssh2 ...	2020-04-05 06:00:50
142.4.123.184	attackbotsspam	1900/udp [2020-04-04]1pkt	2020-04-05 05:35:47
179.113.122.237	attack	Apr 4 23:44:43 legacy sshd[15306]: Failed password for root from 179.113.122.237 port 54196 ssh2 Apr 4 23:48:27 legacy sshd[15414]: Failed password for root from 179.113.122.237 port 54900 ssh2 Apr 4 23:52:09 legacy sshd[15529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.113.122.237 ...	2020-04-05 05:58:52
83.219.128.94	attack	Apr 4 23:24:18 srv01 sshd[7186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.219.128.94 user=root Apr 4 23:24:21 srv01 sshd[7186]: Failed password for root from 83.219.128.94 port 43924 ssh2 Apr 4 23:28:01 srv01 sshd[7499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.219.128.94 user=root Apr 4 23:28:03 srv01 sshd[7499]: Failed password for root from 83.219.128.94 port 54322 ssh2 Apr 4 23:31:42 srv01 sshd[7737]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.219.128.94 user=root Apr 4 23:31:44 srv01 sshd[7737]: Failed password for root from 83.219.128.94 port 36484 ssh2 ...	2020-04-05 06:00:36
222.186.175.217	attack	Apr 5 00:30:21 ift sshd\[31298\]: Failed password for root from 222.186.175.217 port 10766 ssh2Apr 5 00:30:25 ift sshd\[31298\]: Failed password for root from 222.186.175.217 port 10766 ssh2Apr 5 00:30:28 ift sshd\[31298\]: Failed password for root from 222.186.175.217 port 10766 ssh2Apr 5 00:30:31 ift sshd\[31298\]: Failed password for root from 222.186.175.217 port 10766 ssh2Apr 5 00:30:34 ift sshd\[31298\]: Failed password for root from 222.186.175.217 port 10766 ssh2 ...	2020-04-05 05:31:38

最近上报的IP列表

117.24.60.41	118.220.62.56	161.186.234.112	113.239.248.33
106.12.90.141	94.177.242.233	94.177.242.90	89.40.115.214
85.237.51.73	83.97.108.73	77.89.248.157	60.174.233.175
58.241.203.144	58.57.111.163	49.87.236.40	45.179.26.3
43.226.39.106	42.157.5.138	116.49.125.44	36.248.19.235