14.160.20.194 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	(imapd) Failed IMAP login from 14.160.20.194 (VN/Vietnam/static.vnpt.vn): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug 28 16:39:57 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 20 secs): user=, method=PLAIN, rip=14.160.20.194, lip=5.63.12.44, TLS, session=	2020-08-28 20:17:05
attackspambots	'IP reached maximum auth failures for a one day block'	2020-08-21 04:44:27

类型

评论内容

时间

attack

(imapd) Failed IMAP login from 14.160.20.194 (VN/Vietnam/static.vnpt.vn): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug 28 16:39:57 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 20 secs): user=, method=PLAIN, rip=14.160.20.194, lip=5.63.12.44, TLS, session=

2020-08-28 20:17:05

attackspambots

'IP reached maximum auth failures for a one day block'

2020-08-21 04:44:27

相同子网IP讨论:

IP	类型	评论内容	时间
14.160.20.58	attackbotsspam	2020-05-2205:45:551jbyd5-000501-Uq\<=info@whatsup2013.chH=\(localhost\)[14.160.20.58]:58185P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3252id=6164D2818A5E7132EEEBA21ADE661FE4@whatsup2013.chT="Ireallyhopeintheforeseeablefutureweshallfrequentlythinkabouteachother"formoneybags@456.com2020-05-2205:49:491jbygu-0005He-3h\<=info@whatsup2013.chH=\(localhost\)[171.35.170.208]:44970P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3178id=7471C7949F4B6427FBFEB70FCB00F5A5@whatsup2013.chT="Iwouldreallylikeasturdy\	2020-05-22 18:19:21
14.160.20.50	attackspambots	Unauthorized connection attempt from IP address 14.160.20.50 on Port 445(SMB)	2020-01-24 23:13:35
14.160.20.22	attackspam	Unauthorized connection attempt from IP address 14.160.20.22 on Port 445(SMB)	2019-09-04 10:14:08
14.160.20.22	attackspam	445/tcp [2019-07-03]1pkt	2019-07-03 19:56:59

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.160.20.194
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17538
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.160.20.194.			IN	A

;; AUTHORITY SECTION:
.			517	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020082001 1800 900 604800 86400

;; Query time: 79 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 21 04:44:24 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

194.20.160.14.in-addr.arpa domain name pointer static.vnpt.vn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
194.20.160.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
106.13.125.84	attackbotsspam	Mar 2 22:50:10 Ubuntu-1404-trusty-64-minimal sshd\[29885\]: Invalid user market from 106.13.125.84 Mar 2 22:50:10 Ubuntu-1404-trusty-64-minimal sshd\[29885\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.125.84 Mar 2 22:50:12 Ubuntu-1404-trusty-64-minimal sshd\[29885\]: Failed password for invalid user market from 106.13.125.84 port 57362 ssh2 Mar 2 23:00:02 Ubuntu-1404-trusty-64-minimal sshd\[803\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.125.84 user=root Mar 2 23:00:04 Ubuntu-1404-trusty-64-minimal sshd\[803\]: Failed password for root from 106.13.125.84 port 49494 ssh2	2020-03-03 09:12:17
116.102.38.91	attackbotsspam	Unauthorized connection attempt detected from IP address 116.102.38.91 to port 23 [J]	2020-03-03 08:32:02
91.121.183.15	attackbotsspam	SS1,DEF GET /wp-login.php	2020-03-03 09:17:39
220.134.240.68	attackbotsspam	Honeypot attack, port: 81, PTR: 220-134-240-68.HINET-IP.hinet.net.	2020-03-03 08:35:09
175.6.133.182	attackspam	Mar 3 01:35:43 websrv1.aknwsrv.net postfix/smtpd[21910]: warning: unknown[175.6.133.182]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 3 01:35:50 websrv1.aknwsrv.net postfix/smtpd[21910]: warning: unknown[175.6.133.182]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 3 01:36:01 websrv1.aknwsrv.net postfix/smtpd[21910]: warning: unknown[175.6.133.182]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-03-03 09:05:11
14.98.4.82	attack	Mar 3 06:06:21 areeb-Workstation sshd[2345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.98.4.82 Mar 3 06:06:23 areeb-Workstation sshd[2345]: Failed password for invalid user debian-spamd from 14.98.4.82 port 45624 ssh2 ...	2020-03-03 09:20:31
125.142.63.88	attack	Mar 2 18:40:35 server sshd\[15959\]: Failed password for invalid user timemachine from 125.142.63.88 port 33958 ssh2 Mar 3 00:49:21 server sshd\[18895\]: Invalid user meteor from 125.142.63.88 Mar 3 00:49:21 server sshd\[18895\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.142.63.88 Mar 3 00:49:23 server sshd\[18895\]: Failed password for invalid user meteor from 125.142.63.88 port 40888 ssh2 Mar 3 01:00:28 server sshd\[21115\]: Invalid user es from 125.142.63.88 Mar 3 01:00:28 server sshd\[21115\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.142.63.88 ...	2020-03-03 08:33:44
62.171.154.136	attackspam	Time: Mon Mar 2 17:20:34 2020 -0500 IP: 62.171.154.136 (DE/Germany/vmi350471.contaboserver.net) Failures: 30 (smtpauth) Interval: 3600 seconds Blocked: Permanent Block	2020-03-03 09:03:16
37.49.230.96	attack	ET SCAN Sipvicious Scan - port: 5060 proto: UDP cat: Attempted Information Leak	2020-03-03 08:38:17
94.253.146.102	attackspambots	Spammer	2020-03-03 09:13:29
189.8.68.80	attackbots	Mar 3 00:31:24 klukluk sshd\[8781\]: Invalid user mysql from 189.8.68.80 Mar 3 00:35:20 klukluk sshd\[11400\]: Invalid user oracle from 189.8.68.80 Mar 3 00:39:10 klukluk sshd\[13796\]: Invalid user postgres from 189.8.68.80 ...	2020-03-03 08:33:12
211.253.10.96	attack	Mar 3 05:48:38 areeb-Workstation sshd[720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.253.10.96 Mar 3 05:48:40 areeb-Workstation sshd[720]: Failed password for invalid user deployer from 211.253.10.96 port 47516 ssh2 ...	2020-03-03 08:38:37
131.255.85.135	attackbotsspam	Attempt to attack host OS, exploiting network vulnerabilities, on 02-03-2020 22:00:10.	2020-03-03 09:01:14
116.104.32.122	attackbots	Unauthorized connection attempt detected from IP address 116.104.32.122 to port 23 [J]	2020-03-03 08:55:44
122.51.198.248	attackspam	Mar 2 14:58:09 web1 sshd\[30851\]: Invalid user server from 122.51.198.248 Mar 2 14:58:09 web1 sshd\[30851\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.198.248 Mar 2 14:58:11 web1 sshd\[30851\]: Failed password for invalid user server from 122.51.198.248 port 60010 ssh2 Mar 2 15:05:55 web1 sshd\[31561\]: Invalid user minecraft from 122.51.198.248 Mar 2 15:05:55 web1 sshd\[31561\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.198.248	2020-03-03 09:21:22

最近上报的IP列表

179.234.245.175	177.22.126.149	61.155.169.73	187.28.28.81
183.185.196.88	174.219.21.33	114.234.155.5	101.71.235.247
70.91.119.191	136.207.55.97	208.184.162.160	140.143.3.2
195.72.126.243	49.74.66.95	200.194.30.195	199.187.211.100
113.235.122.128	47.26.228.72	99.197.184.247	111.229.128.34