14.161.20.194 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	2019-07-07 04:51:53 H=\(p-avr1j0ip.zaimvdolg.com\) \[14.161.20.194\]:40860 I=\[193.107.88.166\]:25 sender verify fail for \: Unrouteable address 2019-07-07 04:51:53 H=\(p-avr1j0ip.zaimvdolg.com\) \[14.161.20.194\]:40860 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-07-07 04:51:53 H=\(p-avr1j0ip.zaimvdolg.com\) \[14.161.20.194\]:40860 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-02-04 23:20:58

类型

评论内容

时间

attackspambots

2019-07-07 04:51:53 H=\(p-avr1j0ip.zaimvdolg.com\) \[14.161.20.194\]:40860 I=\[193.107.88.166\]:25 sender verify fail for \: Unrouteable address
2019-07-07 04:51:53 H=\(p-avr1j0ip.zaimvdolg.com\) \[14.161.20.194\]:40860 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-07-07 04:51:53 H=\(p-avr1j0ip.zaimvdolg.com\) \[14.161.20.194\]:40860 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
...

2020-02-04 23:20:58

相同子网IP讨论:

IP	类型	评论内容	时间
14.161.20.223	attackspam	failed_logins	2020-04-26 05:04:15
14.161.20.223	attackbotsspam	Dovecot Invalid User Login Attempt.	2020-04-19 07:29:45
14.161.207.55	attackspambots	Automatic report - Port Scan Attack	2020-02-21 03:07:52
14.161.20.206	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 15-10-2019 04:50:20.	2019-10-15 14:58:57
14.161.20.105	attackbotsspam	Unauthorized connection attempt from IP address 14.161.20.105 on Port 445(SMB)	2019-10-03 00:49:33
14.161.20.152	attack	Excessive Port-Scanning	2019-08-07 02:22:20
14.161.20.40	attackbotsspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-06 02:55:25,383 INFO [amun_request_handler] PortScan Detected on Port: 445 (14.161.20.40)	2019-07-06 12:55:47

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.161.20.194
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59382
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.161.20.194.			IN	A

;; AUTHORITY SECTION:
.			572	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020400 1800 900 604800 86400

;; Query time: 107 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 23:20:52 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 194.20.161.14.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 194.20.161.14.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
159.203.201.11	attack	Scanning random ports - tries to find possible vulnerable services	2020-01-12 08:47:30
222.186.15.91	attack	Jan 12 01:23:05 dcd-gentoo sshd[32405]: User root from 222.186.15.91 not allowed because none of user's groups are listed in AllowGroups Jan 12 01:23:07 dcd-gentoo sshd[32405]: error: PAM: Authentication failure for illegal user root from 222.186.15.91 Jan 12 01:23:05 dcd-gentoo sshd[32405]: User root from 222.186.15.91 not allowed because none of user's groups are listed in AllowGroups Jan 12 01:23:07 dcd-gentoo sshd[32405]: error: PAM: Authentication failure for illegal user root from 222.186.15.91 Jan 12 01:23:05 dcd-gentoo sshd[32405]: User root from 222.186.15.91 not allowed because none of user's groups are listed in AllowGroups Jan 12 01:23:07 dcd-gentoo sshd[32405]: error: PAM: Authentication failure for illegal user root from 222.186.15.91 Jan 12 01:23:07 dcd-gentoo sshd[32405]: Failed keyboard-interactive/pam for invalid user root from 222.186.15.91 port 38285 ssh2 ...	2020-01-12 08:31:04
46.209.20.25	attack	" "	2020-01-12 08:25:26
61.160.245.87	attackbotsspam	Jan 11 22:20:11 datentool sshd[1368]: Invalid user test from 61.160.245.87 Jan 11 22:20:11 datentool sshd[1368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.160.245.87 Jan 11 22:20:14 datentool sshd[1368]: Failed password for invalid user test from 61.160.245.87 port 40116 ssh2 Jan 11 22:25:52 datentool sshd[1385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.160.245.87 user=r.r Jan 11 22:25:54 datentool sshd[1385]: Failed password for r.r from 61.160.245.87 port 49830 ssh2 Jan 11 22:28:55 datentool sshd[1399]: Invalid user toro from 61.160.245.87 Jan 11 22:28:55 datentool sshd[1399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.160.245.87 Jan 11 22:28:57 datentool sshd[1399]: Failed password for invalid user toro from 61.160.245.87 port 49362 ssh2 Jan 11 22:31:55 datentool sshd[1404]: pam_unix(sshd:auth): authentication failure; ........ -------------------------------	2020-01-12 08:39:29
140.143.80.138	attackbots	Invalid user aoyule from 140.143.80.138 port 36374	2020-01-12 08:19:55
180.250.69.213	attack	Jan 12 01:52:58 sso sshd[29769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.69.213 Jan 12 01:53:00 sso sshd[29769]: Failed password for invalid user yoko from 180.250.69.213 port 51198 ssh2 ...	2020-01-12 08:59:42
192.95.7.41	attackbotsspam	Jan 11 22:04:01 grey postfix/smtpd\[12415\]: NOQUEUE: reject: RCPT from unknown\[192.95.7.41\]: 554 5.7.1 Service unavailable\; Client host \[192.95.7.41\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[192.95.7.41\]\; from=\<4954-16-204828-819-dpeter=videsign.hu@mail.forgive1.xyz\> to=\ proto=ESMTP helo=\ ...	2020-01-12 08:29:27
121.241.244.92	attackspambots	Invalid user csgo1 from 121.241.244.92 port 60340	2020-01-12 08:43:08
129.211.130.37	attack	$f2bV_matches	2020-01-12 08:39:55
202.29.243.36	attackbots	Jan 12 00:57:54 cp sshd[7577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.243.36 Jan 12 00:57:54 cp sshd[7577]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.243.36	2020-01-12 08:33:04
213.183.101.89	attackspambots	Automatic report - SSH Brute-Force Attack	2020-01-12 08:58:39
37.6.77.39	attackspam	Telnet/23 MH Probe, BF, Hack -	2020-01-12 08:53:49
112.85.42.172	attack	Jan 11 19:17:42 linuxvps sshd\[1720\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.172 user=root Jan 11 19:17:43 linuxvps sshd\[1720\]: Failed password for root from 112.85.42.172 port 23261 ssh2 Jan 11 19:17:47 linuxvps sshd\[1720\]: Failed password for root from 112.85.42.172 port 23261 ssh2 Jan 11 19:17:52 linuxvps sshd\[1720\]: Failed password for root from 112.85.42.172 port 23261 ssh2 Jan 11 19:17:55 linuxvps sshd\[1720\]: Failed password for root from 112.85.42.172 port 23261 ssh2	2020-01-12 08:33:40
92.118.38.40	attack	Jan 12 01:06:15 vmanager6029 postfix/smtpd\[1271\]: warning: unknown\[92.118.38.40\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jan 12 01:06:51 vmanager6029 postfix/smtpd\[1271\]: warning: unknown\[92.118.38.40\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-01-12 08:27:57
200.159.35.18	attack	1578776604 - 01/11/2020 22:03:24 Host: 200.159.35.18/200.159.35.18 Port: 445 TCP Blocked	2020-01-12 08:47:07

最近上报的IP列表

111.68.99.124	31.162.231.70	14.1.29.120	77.42.120.250
61.219.164.192	14.1.29.119	200.57.88.111	190.133.67.197
14.1.29.118	14.1.29.116	14.1.29.115	14.1.29.114
14.1.29.113	189.120.73.33	14.1.29.111	14.1.29.109
14.1.29.108	185.244.39.221	31.207.34.147	14.1.29.107