14.161.43.45 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Port Scan detected! ...	2020-06-07 18:43:55
attack	Unauthorized connection attempt from IP address 14.161.43.45 on Port 445(SMB)	2019-08-06 00:05:58

相同子网IP讨论:

IP	类型	评论内容	时间
14.161.43.154	attack	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-07-21 01:53:14
14.161.43.210	attackbotsspam	'IP reached maximum auth failures for a one day block'	2020-06-12 05:44:02
14.161.43.154	attackspam	Invalid user admin from 14.161.43.154 port 34683	2020-06-06 01:57:43
14.161.43.54	attack	Dovecot Invalid User Login Attempt.	2020-05-11 13:09:34
14.161.43.54	attack	too many bad login attempts	2020-05-07 16:46:19
14.161.43.49	attackbots	Automatic report - Port Scan Attack	2020-04-20 12:29:44
14.161.43.49	attackspambots	Automatic report - Port Scan Attack	2020-04-03 01:23:25
14.161.43.107	attackspam	lfd: (smtpauth) Failed SMTP AUTH login from 14.161.43.107 (VN/Vietnam/static.vnpt.vn): 5 in the last 3600 secs - Sat Jul 14 16:08:46 2018	2020-02-07 05:48:47

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.161.43.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36699
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.161.43.45.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072304 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 24 08:20:05 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

45.43.161.14.in-addr.arpa domain name pointer static.vnpt.vn.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
45.43.161.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
177.154.72.180	attack	dovecot jail - smtp auth [ma]	2019-08-04 04:41:09
103.1.184.127	attack	Jul 31 20:22:07 penfold sshd[26658]: Invalid user yp from 103.1.184.127 port 42450 Jul 31 20:22:07 penfold sshd[26658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.1.184.127 Jul 31 20:22:08 penfold sshd[26658]: Failed password for invalid user yp from 103.1.184.127 port 42450 ssh2 Jul 31 20:22:08 penfold sshd[26658]: Received disconnect from 103.1.184.127 port 42450:11: Bye Bye [preauth] Jul 31 20:22:08 penfold sshd[26658]: Disconnected from 103.1.184.127 port 42450 [preauth] Jul 31 20:28:29 penfold sshd[26828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.1.184.127 user=r.r Jul 31 20:28:30 penfold sshd[26828]: Failed password for r.r from 103.1.184.127 port 43960 ssh2 Jul 31 20:28:30 penfold sshd[26828]: Received disconnect from 103.1.184.127 port 43960:11: Bye Bye [preauth] Jul 31 20:28:30 penfold sshd[26828]: Disconnected from 103.1.184.127 port 43960 [preauth] ........ ---------------------------------------	2019-08-04 05:06:23
191.53.221.40	attack	Aug 3 17:05:53 xeon postfix/smtpd[8655]: warning: unknown[191.53.221.40]: SASL PLAIN authentication failed: authentication failure	2019-08-04 05:20:03
46.166.151.47	attackbots	\[2019-08-03 16:52:59\] SECURITY\[2326\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-03T16:52:59.994-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00446812111465",SessionID="0x7ff4d07952f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.151.47/58730",ACLName="no_extension_match" \[2019-08-03 16:53:22\] SECURITY\[2326\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-03T16:53:22.135-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="1793260046406820923",SessionID="0x7ff4d0348688",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.151.47/57022",ACLName="no_extension_match" \[2019-08-03 17:00:55\] SECURITY\[2326\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-08-03T17:00:55.515-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00346812410249",SessionID="0x7ff4d02d8f48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.151.47/59433",ACLName="no_e	2019-08-04 05:12:30
218.240.130.106	attack	Aug 3 21:25:52 [host] sshd[15885]: Invalid user user_1 from 218.240.130.106 Aug 3 21:25:52 [host] sshd[15885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.240.130.106 Aug 3 21:25:54 [host] sshd[15885]: Failed password for invalid user user_1 from 218.240.130.106 port 46477 ssh2	2019-08-04 04:44:18
103.19.57.110	attackspambots	Automatic report - Banned IP Access	2019-08-04 04:53:19
144.217.166.59	attack	Aug 3 12:11:19 *** sshd[2141]: Failed password for invalid user debian from 144.217.166.59 port 38520 ssh2	2019-08-04 04:40:00
204.48.19.178	attack	pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=204.48.19.178 user=root Failed password for root from 204.48.19.178 port 36128 ssh2 Invalid user mars from 204.48.19.178 port 34234 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=204.48.19.178 Failed password for invalid user mars from 204.48.19.178 port 34234 ssh2	2019-08-04 05:04:28
201.6.99.139	attackspambots	Aug 3 20:21:30 MK-Soft-VM5 sshd\[22701\]: Invalid user ys from 201.6.99.139 port 40364 Aug 3 20:21:30 MK-Soft-VM5 sshd\[22701\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.6.99.139 Aug 3 20:21:32 MK-Soft-VM5 sshd\[22701\]: Failed password for invalid user ys from 201.6.99.139 port 40364 ssh2 ...	2019-08-04 04:53:02
196.182.18.34	attack	196.182.18.34 - - [03/Aug/2019:11:08:01 -0400] "GET /?page=/etc/passwd&action=view&manufacturerID=61&productID=9885&linkID=1673 HTTP/1.1" 200 16429 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0" ...	2019-08-04 05:13:52
123.1.186.5	attackbotsspam	Aug 3 16:06:13 work-partkepr sshd\[10229\]: Invalid user cactiuser from 123.1.186.5 port 36226 Aug 3 16:06:13 work-partkepr sshd\[10229\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.1.186.5 ...	2019-08-04 05:20:21
35.236.135.112	attackbots	WordPress brute force	2019-08-04 05:11:16
51.15.122.200	attackspambots	20 attempts against mh-misbehave-ban on ice.magehost.pro	2019-08-04 05:20:39
182.61.41.203	attackspam	Aug 3 18:29:05 lnxweb61 sshd[25726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.41.203	2019-08-04 05:09:13
185.222.211.4	attackspambots	Aug 3 17:08:00 xeon postfix/smtpd[8987]: NOQUEUE: reject: RCPT from unknown[185.222.211.4]: 554 5.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=	2019-08-04 05:17:33

最近上报的IP列表

51.83.78.109	180.250.149.227	42.177.24.185	159.253.37.114
80.245.119.109	18.208.204.124	177.139.132.78	223.194.135.81
194.87.150.220	97.112.72.109	217.228.221.253	104.214.234.214
82.213.250.93	189.4.2.30	31.220.12.131	119.96.157.243
185.99.157.109	112.163.45.167	13.230.24.192	172.58.224.139