14.116.35.139 - IPInfo

基本信息:

城市(city): Guangzhou

省份(region): Guangdong

国家(country): China

运营商(isp): ChinaNet Guangdong Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
14.116.35.25	attackbots	Lines containing failures of 14.116.35.25 Jul 13 00:59:49 shared11 sshd[5480]: Invalid user support from 14.116.35.25 port 58786 Jul 13 00:59:49 shared11 sshd[5480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.116.35.25 Jul 13 00:59:51 shared11 sshd[5480]: Failed password for invalid user support from 14.116.35.25 port 58786 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.116.35.25	2019-07-13 07:49:01

类型

评论内容

时间

14.116.35.25

attackbots

Lines containing failures of 14.116.35.25
Jul 13 00:59:49 shared11 sshd[5480]: Invalid user support from 14.116.35.25 port 58786
Jul 13 00:59:49 shared11 sshd[5480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.116.35.25
Jul 13 00:59:51 shared11 sshd[5480]: Failed password for invalid user support from 14.116.35.25 port 58786 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=14.116.35.25

2019-07-13 07:49:01

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.116.35.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55743
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.116.35.139.			IN	A

;; AUTHORITY SECTION:
.			1467	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019070800 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 08 16:34:32 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 139.35.116.14.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 139.35.116.14.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
103.21.218.242	attackspambots	Dec 15 19:28:08 vserver sshd\[6144\]: Invalid user server from 103.21.218.242Dec 15 19:28:09 vserver sshd\[6144\]: Failed password for invalid user server from 103.21.218.242 port 60622 ssh2Dec 15 19:34:05 vserver sshd\[6212\]: Invalid user lier from 103.21.218.242Dec 15 19:34:08 vserver sshd\[6212\]: Failed password for invalid user lier from 103.21.218.242 port 37782 ssh2 ...	2019-12-16 02:56:31
208.113.204.109	attackspam	Op5 Monitor command_test.php Command Injection Vulnerability	2019-12-16 02:45:48
181.41.216.130	attackspambots	Dec 15 21:49:29 mail postfix/smtpd\[15093\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.130\]: 554 5.7.1 \: Relay access denied\; from=\<7btcvm0h1wk3jy57@titovmed.ru\> to=\ proto=ESMTP helo=\<\[181.41.216.130\]\> Dec 15 21:49:29 mail postfix/smtpd\[15093\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.130\]: 554 5.7.1 \: Relay access denied\; from=\<7btcvm0h1wk3jy57@titovmed.ru\> to=\ proto=ESMTP helo=\<\[181.41.216.130\]\> Dec 15 21:49:29 mail postfix/smtpd\[15093\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.130\]: 554 5.7.1 \: Relay access denied\; from=\<7btcvm0h1wk3jy57@titovmed.ru\> to=\ proto=ESMTP helo=\<\[181.41.216.130\]\> Dec 15 21:49:29 mail postfix/smtpd\[15093\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.130\]: 554 5.7.1 \: Relay access denied\; from=\<7btcvm0h1wk3jy57@titovmed.ru\> to=\ proto=ESMTP helo=\<\[181.41.216.130\]\> De	2019-12-16 03:23:43
45.82.153.83	attack	Dec 14 09:05:46 georgia postfix/smtpd[50078]: connect from unknown[45.82.153.83] Dec 14 09:05:46 georgia postfix/smtpd[50078]: connect from unknown[45.82.153.83] Dec 14 09:05:55 georgia postfix/smtpd[50078]: warning: unknown[45.82.153.83]: SASL LOGIN authentication failed: authentication failure Dec 14 09:05:55 georgia postfix/smtpd[50078]: warning: unknown[45.82.153.83]: SASL LOGIN authentication failed: authentication failure Dec 14 09:05:56 georgia postfix/smtpd[50078]: lost connection after AUTH from unknown[45.82.153.83] Dec 14 09:05:56 georgia postfix/smtpd[50078]: lost connection after AUTH from unknown[45.82.153.83] Dec 14 09:05:56 georgia postfix/smtpd[50078]: disconnect from unknown[45.82.153.83] ehlo=1 auth=0/1 commands=1/2 Dec 14 09:05:56 georgia postfix/smtpd[50078]: disconnect from unknown[45.82.153.83] ehlo=1 auth=0/1 commands=1/2 Dec 14 09:05:56 georgia postfix/smtpd[50078]: connect from unknown[45.82.153.83] Dec 14 09:05:56 georgia postfix/smtpd[50078]:........ -------------------------------	2019-12-16 02:53:47
91.209.54.54	attackspam	Dec 15 20:51:34 server sshd\[15332\]: Invalid user proneto from 91.209.54.54 Dec 15 20:51:34 server sshd\[15332\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.209.54.54 Dec 15 20:51:36 server sshd\[15332\]: Failed password for invalid user proneto from 91.209.54.54 port 56798 ssh2 Dec 15 21:08:39 server sshd\[20236\]: Invalid user stefan from 91.209.54.54 Dec 15 21:08:39 server sshd\[20236\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.209.54.54 ...	2019-12-16 02:43:08
117.217.101.151	attack	firewall-block, port(s): 445/tcp	2019-12-16 02:58:42
149.91.88.183	attack	$f2bV_matches	2019-12-16 03:23:05
125.124.143.182	attackspambots	SSH brute-force: detected 8 distinct usernames within a 24-hour window.	2019-12-16 03:06:54
201.80.108.83	attack	Dec 15 21:32:02 server sshd\[27348\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.83 user=root Dec 15 21:32:04 server sshd\[27348\]: Failed password for root from 201.80.108.83 port 32163 ssh2 Dec 15 21:39:50 server sshd\[29489\]: Invalid user search from 201.80.108.83 Dec 15 21:39:50 server sshd\[29489\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.83 Dec 15 21:39:52 server sshd\[29489\]: Failed password for invalid user search from 201.80.108.83 port 31164 ssh2 ...	2019-12-16 03:04:23
81.26.130.133	attackspam	Dec 15 06:37:31 php1 sshd\[16093\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.26.130.133 user=root Dec 15 06:37:33 php1 sshd\[16093\]: Failed password for root from 81.26.130.133 port 43080 ssh2 Dec 15 06:45:23 php1 sshd\[17147\]: Invalid user maha1004 from 81.26.130.133 Dec 15 06:45:23 php1 sshd\[17147\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.26.130.133 Dec 15 06:45:24 php1 sshd\[17147\]: Failed password for invalid user maha1004 from 81.26.130.133 port 49524 ssh2	2019-12-16 03:07:23
187.44.106.12	attack	Dec 15 19:47:28 localhost sshd\[15662\]: Invalid user alex from 187.44.106.12 port 58519 Dec 15 19:47:28 localhost sshd\[15662\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.44.106.12 Dec 15 19:47:30 localhost sshd\[15662\]: Failed password for invalid user alex from 187.44.106.12 port 58519 ssh2	2019-12-16 02:53:04
34.77.69.190	attack	port scan and connect, tcp 80 (http)	2019-12-16 02:45:01
36.90.69.106	attackspambots	Unauthorized connection attempt detected from IP address 36.90.69.106 to port 445	2019-12-16 02:57:42
45.55.188.133	attackspam	Dec 15 19:48:21 vps647732 sshd[11923]: Failed password for root from 45.55.188.133 port 52982 ssh2 ...	2019-12-16 02:54:18
31.135.76.57	attack	1576421414 - 12/15/2019 15:50:14 Host: 31.135.76.57/31.135.76.57 Port: 445 TCP Blocked	2019-12-16 02:45:22

最近上报的IP列表

186.163.121.120	76.30.136.119	170.80.132.224	230.146.214.64
216.53.1.188	88.54.77.123	113.177.134.201	111.55.229.250
207.97.197.145	220.187.89.71	246.97.49.50	111.95.20.130
206.148.219.182	208.211.207.230	188.128.101.158	88.159.213.211
214.19.37.43	155.79.231.11	170.244.212.247	111.31.24.82