14.134.188.106

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
14.134.188.217	attack	Jun 16 13:51:08 localhost sshd[491544]: Invalid user mc from 14.134.188.217 port 36639 ...	2020-06-16 15:57:15
14.134.188.56	attackspambots	May 20 03:48:25 Tower sshd[32087]: Connection from 14.134.188.56 port 51366 on 192.168.10.220 port 22 rdomain "" May 20 03:48:39 Tower sshd[32087]: Invalid user nhh from 14.134.188.56 port 51366 May 20 03:48:39 Tower sshd[32087]: error: Could not get shadow information for NOUSER May 20 03:48:39 Tower sshd[32087]: Failed password for invalid user nhh from 14.134.188.56 port 51366 ssh2 May 20 03:48:41 Tower sshd[32087]: Received disconnect from 14.134.188.56 port 51366:11: Bye Bye [preauth] May 20 03:48:41 Tower sshd[32087]: Disconnected from invalid user nhh 14.134.188.56 port 51366 [preauth]	2020-05-20 17:17:34

类型

评论内容

时间

14.134.188.217

attack

Jun 16 13:51:08 localhost sshd[491544]: Invalid user mc from 14.134.188.217 port 36639
...

2020-06-16 15:57:15

14.134.188.56

attackspambots

May 20 03:48:25 Tower sshd[32087]: Connection from 14.134.188.56 port 51366 on 192.168.10.220 port 22 rdomain ""
May 20 03:48:39 Tower sshd[32087]: Invalid user nhh from 14.134.188.56 port 51366
May 20 03:48:39 Tower sshd[32087]: error: Could not get shadow information for NOUSER
May 20 03:48:39 Tower sshd[32087]: Failed password for invalid user nhh from 14.134.188.56 port 51366 ssh2
May 20 03:48:41 Tower sshd[32087]: Received disconnect from 14.134.188.56 port 51366:11: Bye Bye [preauth]
May 20 03:48:41 Tower sshd[32087]: Disconnected from invalid user nhh 14.134.188.56 port 51366 [preauth]

2020-05-20 17:17:34

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.134.188.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35288
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;14.134.188.106.			IN	A

;; AUTHORITY SECTION:
.			237	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400

;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 12:59:25 CST 2022
;; MSG SIZE  rcvd: 107

HOST信息:

Host 106.188.134.14.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 106.188.134.14.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
41.233.173.2	attackbots	Unauthorised access (Oct 13) SRC=41.233.173.2 LEN=40 TTL=52 ID=62932 TCP DPT=23 WINDOW=40252 SYN	2019-10-13 18:43:26
178.62.64.107	attackspam	Triggered by Fail2Ban at Ares web server	2019-10-13 18:27:29
93.174.163.30	attackspam	Automatic report - XMLRPC Attack	2019-10-13 18:35:26
181.48.68.54	attackbots	2019-10-13T03:46:25.252947abusebot-5.cloudsearch.cf sshd\[649\]: Invalid user da from 181.48.68.54 port 37370	2019-10-13 18:27:05
202.112.57.41	attackbotsspam	Lines containing failures of 202.112.57.41 Oct 6 04:42:58 shared02 sshd[3186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.112.57.41 user=r.r Oct 6 04:43:00 shared02 sshd[3186]: Failed password for r.r from 202.112.57.41 port 44198 ssh2 Oct 6 04:43:01 shared02 sshd[3186]: Received disconnect from 202.112.57.41 port 44198:11: Bye Bye [preauth] Oct 6 04:43:01 shared02 sshd[3186]: Disconnected from authenticating user r.r 202.112.57.41 port 44198 [preauth] Oct 6 05:05:53 shared02 sshd[11174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.112.57.41 user=r.r Oct 6 05:05:55 shared02 sshd[11174]: Failed password for r.r from 202.112.57.41 port 47288 ssh2 Oct 6 05:05:55 shared02 sshd[11174]: Received disconnect from 202.112.57.41 port 47288:11: Bye Bye [preauth] Oct 6 05:05:55 shared02 sshd[11174]: Disconnected from authenticating user r.r 202.112.57.41 port 47288 [preauth] Oc........ ------------------------------	2019-10-13 18:30:09
51.254.47.198	attackbotsspam	Oct 13 09:08:43 MK-Soft-Root1 sshd[14626]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.47.198 Oct 13 09:08:45 MK-Soft-Root1 sshd[14626]: Failed password for invalid user postgres from 51.254.47.198 port 45664 ssh2 ...	2019-10-13 18:17:11
212.129.2.12	attack	\[2019-10-13 05:17:45\] NOTICE\[1887\] chan_sip.c: Registration from '"250"\' failed for '212.129.2.12:24432' - Wrong password \[2019-10-13 05:17:45\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-13T05:17:45.210-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="250",SessionID="0x7fc3ac85f3d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.129.2.12/24432",Challenge="25383b7f",ReceivedChallenge="25383b7f",ReceivedHash="a1c193425db093162b2e54a3e30ddd67" \[2019-10-13 05:24:40\] NOTICE\[1887\] chan_sip.c: Registration from '"700"\' failed for '212.129.2.12:24441' - Wrong password \[2019-10-13 05:24:40\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-13T05:24:40.782-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="700",SessionID="0x7fc3ac226ee8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.12	2019-10-13 18:07:23
203.48.246.66	attackspambots	Oct 13 10:20:50 server sshd\[16623\]: User root from 203.48.246.66 not allowed because listed in DenyUsers Oct 13 10:20:50 server sshd\[16623\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.48.246.66 user=root Oct 13 10:20:53 server sshd\[16623\]: Failed password for invalid user root from 203.48.246.66 port 55974 ssh2 Oct 13 10:26:17 server sshd\[6881\]: User root from 203.48.246.66 not allowed because listed in DenyUsers Oct 13 10:26:17 server sshd\[6881\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.48.246.66 user=root	2019-10-13 18:10:31
42.247.22.66	attackspam	Oct 13 10:18:41 icinga sshd[25085]: Failed password for root from 42.247.22.66 port 46103 ssh2 ...	2019-10-13 18:41:18
51.83.106.0	attack	Oct 13 04:02:25 www_kotimaassa_fi sshd[511]: Failed password for root from 51.83.106.0 port 35716 ssh2 ...	2019-10-13 18:15:47
41.73.252.236	attackbots	Oct 13 06:27:27 ns381471 sshd[28699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.73.252.236 Oct 13 06:27:29 ns381471 sshd[28699]: Failed password for invalid user Russia2018 from 41.73.252.236 port 55108 ssh2 Oct 13 06:32:37 ns381471 sshd[28871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.73.252.236	2019-10-13 18:49:15
134.209.90.220	attack	Oct 6 10:54:00 uapps sshd[15665]: User r.r from 134.209.90.220 not allowed because not listed in AllowUsers Oct 6 10:54:00 uapps sshd[15665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.90.220 user=r.r Oct 6 10:54:01 uapps sshd[15665]: Failed password for invalid user r.r from 134.209.90.220 port 39356 ssh2 Oct 6 10:54:01 uapps sshd[15665]: Received disconnect from 134.209.90.220: 11: Bye Bye [preauth] Oct 6 11:02:38 uapps sshd[15811]: User r.r from 134.209.90.220 not allowed because not listed in AllowUsers Oct 6 11:02:38 uapps sshd[15811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.90.220 user=r.r ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=134.209.90.220	2019-10-13 18:09:23
45.237.140.120	attackbots	Oct 13 11:26:33 root sshd[8924]: Failed password for root from 45.237.140.120 port 57620 ssh2 Oct 13 11:31:41 root sshd[8990]: Failed password for root from 45.237.140.120 port 40632 ssh2 ...	2019-10-13 18:20:14
110.136.8.111	attackbotsspam	Oct 13 05:28:48 HOSTNAME sshd[17888]: Address 110.136.8.111 maps to 111.subnet110-136-8.speedy.telkom.net.id, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 13 05:28:48 HOSTNAME sshd[17888]: Invalid user r.r from 110.136.8.111 port 59549 Oct 13 05:28:48 HOSTNAME sshd[17888]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.136.8.111 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=110.136.8.111	2019-10-13 18:17:25
197.248.205.53	attackspambots	Oct 13 06:31:58 localhost sshd\[17893\]: Invalid user Tattoo123 from 197.248.205.53 port 55368 Oct 13 06:31:58 localhost sshd\[17893\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.248.205.53 Oct 13 06:32:01 localhost sshd\[17893\]: Failed password for invalid user Tattoo123 from 197.248.205.53 port 55368 ssh2	2019-10-13 18:10:52

最近上报的IP列表

14.134.187.86	14.134.187.96	14.134.188.119	14.134.188.127
14.134.187.95	14.134.188.114	14.134.188.122	14.134.188.137
14.134.187.99	14.134.188.154	14.134.188.144	14.134.188.139
14.134.188.160	14.134.188.156	14.134.188.141	14.134.188.163
14.134.188.150	14.134.188.164	14.134.188.138	14.134.188.168