14.160.20.194 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	(imapd) Failed IMAP login from 14.160.20.194 (VN/Vietnam/static.vnpt.vn): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug 28 16:39:57 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 20 secs): user=, method=PLAIN, rip=14.160.20.194, lip=5.63.12.44, TLS, session=	2020-08-28 20:17:05
attackspambots	'IP reached maximum auth failures for a one day block'	2020-08-21 04:44:27

类型

评论内容

时间

attack

(imapd) Failed IMAP login from 14.160.20.194 (VN/Vietnam/static.vnpt.vn): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug 28 16:39:57 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 20 secs): user=, method=PLAIN, rip=14.160.20.194, lip=5.63.12.44, TLS, session=

2020-08-28 20:17:05

attackspambots

'IP reached maximum auth failures for a one day block'

2020-08-21 04:44:27

相同子网IP讨论:

IP	类型	评论内容	时间
14.160.20.58	attackbotsspam	2020-05-2205:45:551jbyd5-000501-Uq\<=info@whatsup2013.chH=$localhost$[14.160.20.58]:58185P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3252id=6164D2818A5E7132EEEBA21ADE661FE4@whatsup2013.chT="Ireallyhopeintheforeseeablefutureweshallfrequentlythinkabouteachother"formoneybags@456.com2020-05-2205:49:491jbygu-0005He-3h\<=info@whatsup2013.chH=$localhost$[171.35.170.208]:44970P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3178id=7471C7949F4B6427FBFEB70FCB00F5A5@whatsup2013.chT="Iwouldreallylikeasturdy\	2020-05-22 18:19:21
14.160.20.50	attackspambots	Unauthorized connection attempt from IP address 14.160.20.50 on Port 445(SMB)	2020-01-24 23:13:35
14.160.20.22	attackspam	Unauthorized connection attempt from IP address 14.160.20.22 on Port 445(SMB)	2019-09-04 10:14:08
14.160.20.22	attackspam	445/tcp [2019-07-03]1pkt	2019-07-03 19:56:59

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.160.20.194
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17538
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.160.20.194.			IN	A

;; AUTHORITY SECTION:
.			517	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020082001 1800 900 604800 86400

;; Query time: 79 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 21 04:44:24 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

194.20.160.14.in-addr.arpa domain name pointer static.vnpt.vn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
194.20.160.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
112.85.42.173	attackspambots	--- report --- Dec 18 20:28:24 sshd: Connection from 112.85.42.173 port 10597 Dec 18 20:28:34 sshd: Did not receive identification string from 112.85.42.173	2019-12-19 08:13:18
139.59.38.94	attack	Invalid user twister from 139.59.38.94 port 51812	2019-12-19 08:23:12
178.150.216.229	attack	Dec 19 00:43:53 MK-Soft-VM3 sshd[22650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.150.216.229 Dec 19 00:43:56 MK-Soft-VM3 sshd[22650]: Failed password for invalid user 1q2w3e4r5t from 178.150.216.229 port 51824 ssh2 ...	2019-12-19 08:07:35
167.99.77.94	attackspam	Dec 18 18:46:11 plusreed sshd[28881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.77.94 user=root Dec 18 18:46:13 plusreed sshd[28881]: Failed password for root from 167.99.77.94 port 41704 ssh2 ...	2019-12-19 08:08:03
138.197.152.113	attack	Invalid user admin from 138.197.152.113 port 53674	2019-12-19 08:15:48
95.248.4.121	attackspambots	[munged]::443 95.248.4.121 - - [18/Dec/2019:23:38:19 +0100] "POST /[munged]: HTTP/1.1" 401 8487 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 95.248.4.121 - - [18/Dec/2019:23:38:22 +0100] "POST /[munged]: HTTP/1.1" 401 8487 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 95.248.4.121 - - [18/Dec/2019:23:38:25 +0100] "POST /[munged]: HTTP/1.1" 401 8488 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 95.248.4.121 - - [18/Dec/2019:23:38:28 +0100] "POST /[munged]: HTTP/1.1" 401 8487 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 95.248.4.121 - - [18/Dec/2019:23:38:31 +0100] "POST /[munged]: HTTP/1.1" 401 8487 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 95.248.4.121 - - [18/Dec/2019:23:38:34 +0100] "POST /[munged]: HTTP/1.1" 401 8487 "-" "Mozilla/5.0 (X11; Ubuntu; Li	2019-12-19 08:34:40
222.186.175.215	attack	Brute-force attempt banned	2019-12-19 08:14:00
172.105.150.29	attackbotsspam	Unauthorized connection attempt detected from IP address 172.105.150.29 to port 1434	2019-12-19 08:18:28
111.206.87.230	attack	Dec 18 13:56:09 php1 sshd\[28799\]: Invalid user hc from 111.206.87.230 Dec 18 13:56:09 php1 sshd\[28799\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.206.87.230 Dec 18 13:56:11 php1 sshd\[28799\]: Failed password for invalid user hc from 111.206.87.230 port 56406 ssh2 Dec 18 14:02:32 php1 sshd\[29399\]: Invalid user quackenbush from 111.206.87.230 Dec 18 14:02:32 php1 sshd\[29399\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.206.87.230	2019-12-19 08:18:39
51.79.44.52	attackbots	SSH-BruteForce	2019-12-19 08:39:45
54.36.232.55	attackbots	Dec 18 14:23:32 kapalua sshd\[20250\]: Invalid user theong from 54.36.232.55 Dec 18 14:23:32 kapalua sshd\[20250\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.232.55 Dec 18 14:23:35 kapalua sshd\[20250\]: Failed password for invalid user theong from 54.36.232.55 port 17634 ssh2 Dec 18 14:28:24 kapalua sshd\[21294\]: Invalid user opus from 54.36.232.55 Dec 18 14:28:24 kapalua sshd\[21294\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.232.55	2019-12-19 08:39:28
222.186.175.181	attackbots	$f2bV_matches	2019-12-19 08:15:14
49.88.112.75	attackbotsspam	Dec 19 05:05:22 gw1 sshd[18016]: Failed password for root from 49.88.112.75 port 11992 ssh2 ...	2019-12-19 08:12:38
54.38.18.211	attackspam	Too many connections or unauthorized access detected from Arctic banned ip	2019-12-19 08:25:29
60.250.164.169	attackbotsspam	Dec 18 19:25:36 ny01 sshd[23335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.250.164.169 Dec 18 19:25:38 ny01 sshd[23335]: Failed password for invalid user apache from 60.250.164.169 port 56850 ssh2 Dec 18 19:31:22 ny01 sshd[24103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.250.164.169	2019-12-19 08:40:16

最近上报的IP列表

179.234.245.175	177.22.126.149	61.155.169.73	187.28.28.81
183.185.196.88	174.219.21.33	114.234.155.5	101.71.235.247
70.91.119.191	136.207.55.97	208.184.162.160	140.143.3.2
195.72.126.243	49.74.66.95	200.194.30.195	199.187.211.100
113.235.122.128	47.26.228.72	99.197.184.247	111.229.128.34