14.134.189.63 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
14.134.189.33	attackbots	Lines containing failures of 14.134.189.33 Jun 25 05:51:50 nexus sshd[1099]: Invalid user discover from 14.134.189.33 port 42428 Jun 25 05:51:50 nexus sshd[1099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.134.189.33 Jun 25 05:51:52 nexus sshd[1099]: Failed password for invalid user discover from 14.134.189.33 port 42428 ssh2 Jun 25 05:51:53 nexus sshd[1099]: Received disconnect from 14.134.189.33 port 42428:11: Bye Bye [preauth] Jun 25 05:51:53 nexus sshd[1099]: Disconnected from 14.134.189.33 port 42428 [preauth] Jun 25 05:55:00 nexus sshd[1136]: Invalid user qa from 14.134.189.33 port 52558 Jun 25 05:55:00 nexus sshd[1136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.134.189.33 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.134.189.33	2020-06-25 14:17:26
14.134.189.204	attackbotsspam	SSH login attempts.	2020-05-28 19:51:02

类型

评论内容

时间

14.134.189.33

attackbots

Lines containing failures of 14.134.189.33
Jun 25 05:51:50 nexus sshd[1099]: Invalid user discover from 14.134.189.33 port 42428
Jun 25 05:51:50 nexus sshd[1099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.134.189.33
Jun 25 05:51:52 nexus sshd[1099]: Failed password for invalid user discover from 14.134.189.33 port 42428 ssh2
Jun 25 05:51:53 nexus sshd[1099]: Received disconnect from 14.134.189.33 port 42428:11: Bye Bye [preauth]
Jun 25 05:51:53 nexus sshd[1099]: Disconnected from 14.134.189.33 port 42428 [preauth]
Jun 25 05:55:00 nexus sshd[1136]: Invalid user qa from 14.134.189.33 port 52558
Jun 25 05:55:00 nexus sshd[1136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.134.189.33


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=14.134.189.33

2020-06-25 14:17:26

14.134.189.204

attackbotsspam

SSH login attempts.

2020-05-28 19:51:02

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.134.189.63
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7168
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;14.134.189.63.			IN	A

;; AUTHORITY SECTION:
.			303	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 17:44:17 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

Host 63.189.134.14.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 63.189.134.14.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
103.145.12.209	attackbots	[2020-07-29 10:05:48] NOTICE[1248] chan_sip.c: Registration from '"60000" ' failed for '103.145.12.209:5428' - Wrong password [2020-07-29 10:05:48] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-29T10:05:48.328-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="60000",SessionID="0x7f2720048e48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.209/5428",Challenge="378440da",ReceivedChallenge="378440da",ReceivedHash="d9690370aff079cb6b2cfdd4163bfc36" [2020-07-29 10:05:48] NOTICE[1248] chan_sip.c: Registration from '"60000" ' failed for '103.145.12.209:5428' - Wrong password [2020-07-29 10:05:48] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-29T10:05:48.446-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="60000",SessionID="0x7f2720061a18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IP ...	2020-07-29 23:17:44
118.125.106.12	attack	Jul 29 16:37:33 havingfunrightnow sshd[9579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.125.106.12 Jul 29 16:37:35 havingfunrightnow sshd[9579]: Failed password for invalid user dongtingting from 118.125.106.12 port 39758 ssh2 Jul 29 16:58:03 havingfunrightnow sshd[10135]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.125.106.12 ...	2020-07-29 23:58:43
45.143.138.128	attackspam	Email rejected due to spam filtering	2020-07-29 23:45:57
94.102.49.193	attack	TCP (SYN) 94.102.49.193:18438 -> port 23, len 44	2020-07-29 23:51:03
196.40.123.202	attackspambots	1,17-10/02 [bc00/m01] PostRequest-Spammer scoring: zurich	2020-07-29 23:14:31
64.227.38.225	attackspambots	Jul 29 11:35:57 NPSTNNYC01T sshd[25962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.38.225 Jul 29 11:35:59 NPSTNNYC01T sshd[25962]: Failed password for invalid user xujun from 64.227.38.225 port 48136 ssh2 Jul 29 11:39:48 NPSTNNYC01T sshd[26308]: Failed password for root from 64.227.38.225 port 59254 ssh2 ...	2020-07-29 23:50:19
164.132.54.215	attackspambots	"Unauthorized connection attempt on SSHD detected"	2020-07-29 23:36:56
2.38.194.158	attackspam	W 31101,/var/log/nginx/access.log,-,-	2020-07-29 23:40:08
213.230.75.216	attackspambots	Email rejected due to spam filtering	2020-07-29 23:59:44
201.49.110.210	attackspam	Jul 29 17:27:16 ns382633 sshd\[9622\]: Invalid user malk from 201.49.110.210 port 52644 Jul 29 17:27:16 ns382633 sshd\[9622\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.49.110.210 Jul 29 17:27:18 ns382633 sshd\[9622\]: Failed password for invalid user malk from 201.49.110.210 port 52644 ssh2 Jul 29 17:31:31 ns382633 sshd\[10446\]: Invalid user jkim from 201.49.110.210 port 36144 Jul 29 17:31:31 ns382633 sshd\[10446\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.49.110.210	2020-07-29 23:34:13
132.232.6.207	attackbots	Jul 29 16:59:49 sip sshd[21696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.6.207 Jul 29 16:59:51 sip sshd[21696]: Failed password for invalid user cdonahue from 132.232.6.207 port 35078 ssh2 Jul 29 17:03:44 sip sshd[23145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.6.207	2020-07-29 23:45:08
95.154.192.121	attack	Malicious brute force vulnerability hacking attacks	2020-07-29 23:52:16
34.74.165.215	attack	2020-07-29T16:23:40+0200 Failed SSH Authentication/Brute Force Attack. (Server 4)	2020-07-29 23:30:33
222.82.166.144	attackbots	[Sun Jul 26 17:00:17 2020] - DDoS Attack From IP: 222.82.166.144 Port: 35024	2020-07-29 23:46:30
111.201.210.105	attack	20 attempts against mh-ssh on ice	2020-07-29 23:19:19

最近上报的IP列表

14.134.189.54	14.134.189.56	195.73.139.225	14.134.189.60
14.134.189.46	14.134.189.59	14.134.189.64	14.134.189.7
14.134.189.71	14.134.189.68	70.182.45.100	14.139.219.165
14.139.222.130	14.139.219.227	14.139.225.2	14.139.219.190
14.139.217.174	14.139.219.231	14.139.224.70	14.139.224.66