14.139.229.2 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): India

运营商(isp): Govt Medical College Patiala

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): University/College/School

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Apr 24 17:03:07 gw1 sshd[26014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.139.229.2 Apr 24 17:03:09 gw1 sshd[26014]: Failed password for invalid user cosmo from 14.139.229.2 port 42917 ssh2 ...	2020-04-25 01:47:45
attack	Mar 19 14:01:10 Ubuntu-1404-trusty-64-minimal sshd\[27949\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.139.229.2 user=root Mar 19 14:01:11 Ubuntu-1404-trusty-64-minimal sshd\[27949\]: Failed password for root from 14.139.229.2 port 36525 ssh2 Mar 19 14:21:30 Ubuntu-1404-trusty-64-minimal sshd\[8223\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.139.229.2 user=root Mar 19 14:21:33 Ubuntu-1404-trusty-64-minimal sshd\[8223\]: Failed password for root from 14.139.229.2 port 43144 ssh2 Mar 19 14:26:44 Ubuntu-1404-trusty-64-minimal sshd\[10553\]: Invalid user mshan from 14.139.229.2	2020-03-19 22:53:53
attackspambots	Aug 14 05:56:09 lnxmysql61 sshd[24943]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.139.229.2	2019-08-14 12:32:11
attackbotsspam	Aug 13 05:52:06 * sshd[26178]: Failed password for invalid user ackron from 14.139.229.2 port 41611 ssh2 Aug 13 06:06:30 * sshd[26431]: Failed password for invalid user bot from 14.139.229.2 port 36040 ssh2 Aug 13 06:11:59 * sshd[26542]: Failed password for invalid user labuser from 14.139.229.2 port 60864 ssh2 Aug 13 06:17:25 * sshd[26603]: Failed password for invalid user condor from 14.139.229.2 port 57457 ssh2 Aug 13 06:22:58 * sshd[26778]: Failed password for invalid user karina from 14.139.229.2 port 54045 ssh2 Aug 13 06:34:04 * sshd[27049]: Failed password for invalid user rosicler from 14.139.229.2 port 47226 ssh2 Aug 13 06:39:36 * sshd[27206]: Failed password for invalid user info from 14.139.229.2 port 43818 ssh2 Aug 13 06:50:49 * sshd[27508]: Failed password for invalid user minecraft from 14.139.229.2 port 37003 ssh2 Aug 13 06:56:26 * sshd[27611]: Failed password for invalid user data2 from 14.139.229.2 port 33592 ssh2 Aug 13 07:02:11 * sshd[27762]: Failed password for invalid	2019-08-14 04:10:15

相同子网IP讨论:

IP	类型	评论内容	时间
14.139.229.226	attack	Unauthorized connection attempt from IP address 14.139.229.226 on Port 445(SMB)	2020-08-18 00:00:52

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.139.229.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48204
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.139.229.2.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019050301 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sat May 04 09:03:40 +08 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 2.229.139.14.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 2.229.139.14.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
51.79.44.52	attackspam	2020-04-09T00:47:01.990115vps751288.ovh.net sshd\[12071\]: Invalid user oracle from 51.79.44.52 port 32816 2020-04-09T00:47:02.000385vps751288.ovh.net sshd\[12071\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip52.ip-51-79-44.net 2020-04-09T00:47:04.123520vps751288.ovh.net sshd\[12071\]: Failed password for invalid user oracle from 51.79.44.52 port 32816 ssh2 2020-04-09T00:52:44.695819vps751288.ovh.net sshd\[12146\]: Invalid user ircbot from 51.79.44.52 port 42452 2020-04-09T00:52:44.707255vps751288.ovh.net sshd\[12146\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip52.ip-51-79-44.net	2020-04-09 10:11:42
5.135.158.228	attack	Apr 9 04:01:45 OPSO sshd\[1303\]: Invalid user knox from 5.135.158.228 port 53640 Apr 9 04:01:45 OPSO sshd\[1303\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.158.228 Apr 9 04:01:46 OPSO sshd\[1303\]: Failed password for invalid user knox from 5.135.158.228 port 53640 ssh2 Apr 9 04:06:55 OPSO sshd\[2901\]: Invalid user ftpuser from 5.135.158.228 port 49976 Apr 9 04:06:55 OPSO sshd\[2901\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.158.228	2020-04-09 10:08:32
116.104.85.92	attackspam	Brute forcing RDP port 3389	2020-04-09 09:57:33
103.145.12.41	attack	[2020-04-08 21:19:10] NOTICE[12114] chan_sip.c: Registration from '"2000" ' failed for '103.145.12.41:6071' - Wrong password [2020-04-08 21:19:10] SECURITY[12128] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-08T21:19:10.054-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2000",SessionID="0x7f020c0db748",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.41/6071",Challenge="23d1d4c7",ReceivedChallenge="23d1d4c7",ReceivedHash="d5974e3707aad930fb9f35c3a0e48ae6" [2020-04-08 21:19:10] NOTICE[12114] chan_sip.c: Registration from '"2000" ' failed for '103.145.12.41:6071' - Wrong password [2020-04-08 21:19:10] SECURITY[12128] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-08T21:19:10.193-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2000",SessionID="0x7f020c1403d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UD ...	2020-04-09 09:34:55
96.81.166.84	attackspambots	DATE:2020-04-08 23:46:59, IP:96.81.166.84, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-04-09 10:06:43
1.186.57.150	attackbots	SSH Brute-Force reported by Fail2Ban	2020-04-09 09:58:47
222.186.15.115	attackbots	Apr 9 04:09:41 vmanager6029 sshd\[5137\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.115 user=root Apr 9 04:09:43 vmanager6029 sshd\[5135\]: error: PAM: Authentication failure for root from 222.186.15.115 Apr 9 04:09:44 vmanager6029 sshd\[5138\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.115 user=root	2020-04-09 10:12:17
222.186.180.223	attackbots	Apr 9 03:40:34 nextcloud sshd\[27178\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223 user=root Apr 9 03:40:36 nextcloud sshd\[27178\]: Failed password for root from 222.186.180.223 port 4320 ssh2 Apr 9 03:40:54 nextcloud sshd\[27455\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.223 user=root	2020-04-09 09:43:32
14.29.115.191	attackbotsspam	2020-04-09T00:57:07.883489homeassistant sshd[25797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.115.191 user=root 2020-04-09T00:57:09.300686homeassistant sshd[25797]: Failed password for root from 14.29.115.191 port 60714 ssh2 ...	2020-04-09 09:48:34
129.226.50.78	attackspambots	$f2bV_matches	2020-04-09 09:33:24
49.235.86.177	attack	Ssh brute force	2020-04-09 10:13:02
213.55.77.131	attack	Apr 9 02:25:22 host sshd[38668]: Invalid user postgres from 213.55.77.131 port 38622 ...	2020-04-09 10:04:35
111.229.186.30	attack	SSH Authentication Attempts Exceeded	2020-04-09 10:10:46
106.75.154.191	attackbots	Apr 9 00:58:33 silence02 sshd[18454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.154.191 Apr 9 00:58:35 silence02 sshd[18454]: Failed password for invalid user user from 106.75.154.191 port 37200 ssh2 Apr 9 00:58:36 silence02 sshd[18457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.154.191	2020-04-09 09:46:17
111.229.246.61	attackspambots	SSH Brute-Forcing (server1)	2020-04-09 10:14:05

最近上报的IP列表

135.108.33.113	178.150.222.54	155.159.207.92	54.157.42.15
137.74.194.226	218.75.37.18	77.247.181.165	60.246.2.161
110.74.193.43	142.93.58.123	119.82.68.254	88.2.186.134
177.92.247.145	89.122.6.153	170.245.128.100	114.139.125.45
162.247.46.223	210.9.233.160	111.217.115.220	109.123.117.249