必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attackspam
Lines containing failures of 14.169.142.43
Mar 11 11:33:32 shared06 sshd[28296]: Invalid user admin from 14.169.142.43 port 47490
Mar 11 11:33:32 shared06 sshd[28296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.169.142.43
Mar 11 11:33:34 shared06 sshd[28296]: Failed password for invalid user admin from 14.169.142.43 port 47490 ssh2
Mar 11 11:33:34 shared06 sshd[28296]: Connection closed by invalid user admin 14.169.142.43 port 47490 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=14.169.142.43
2020-03-12 00:34:03
相同子网IP讨论:
IP 类型 评论内容 时间
14.169.142.118 attackspambots
Fail2Ban Ban Triggered
2019-09-06 21:53:02
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.169.142.43
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2083
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.169.142.43.			IN	A

;; AUTHORITY SECTION:
.			439	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020031100 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 12 00:33:57 CST 2020
;; MSG SIZE  rcvd: 117
HOST信息:
43.142.169.14.in-addr.arpa domain name pointer static.vnpt.vn.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
43.142.169.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
170.244.188.36 attack
Unauthorized connection attempt detected from IP address 170.244.188.36 to port 80
2020-04-04 18:23:58
115.79.207.146 attackbotsspam
CMS (WordPress or Joomla) login attempt.
2020-04-04 18:36:21
190.128.150.46 attackbots
Apr  4 07:55:41 jane sshd[4096]: Failed password for root from 190.128.150.46 port 57244 ssh2
...
2020-04-04 18:01:05
89.106.196.114 attackspam
Apr  4 11:41:37 vserver sshd\[25334\]: Failed password for root from 89.106.196.114 port 14521 ssh2Apr  4 11:44:56 vserver sshd\[25371\]: Failed password for root from 89.106.196.114 port 57476 ssh2Apr  4 11:48:06 vserver sshd\[25415\]: Failed password for root from 89.106.196.114 port 53781 ssh2Apr  4 11:51:13 vserver sshd\[25465\]: Failed password for root from 89.106.196.114 port 60722 ssh2
...
2020-04-04 18:29:24
45.83.118.106 attackspambots
[2020-04-04 05:21:47] NOTICE[12114][C-000013ac] chan_sip.c: Call from '' (45.83.118.106:62772) to extension '46842002309' rejected because extension not found in context 'public'.
[2020-04-04 05:21:47] SECURITY[12128] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-04T05:21:47.182-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="46842002309",SessionID="0x7f020c088288",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.83.118.106/62772",ACLName="no_extension_match"
[2020-04-04 05:25:24] NOTICE[12114][C-000013b1] chan_sip.c: Call from '' (45.83.118.106:54815) to extension '01146842002309' rejected because extension not found in context 'public'.
[2020-04-04 05:25:24] SECURITY[12128] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-04T05:25:24.064-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01146842002309",SessionID="0x7f020c053058",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.83.
...
2020-04-04 18:08:06
199.249.230.114 attackbotsspam
MLV GET /wp-config.php.1
2020-04-04 18:08:32
206.189.156.42 attackspam
Apr  4 08:21:37 [HOSTNAME] sshd[23423]: User **removed** from 206.189.156.42 not allowed because not listed in AllowUsers
Apr  4 08:21:37 [HOSTNAME] sshd[23423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.156.42  user=**removed**
Apr  4 08:21:40 [HOSTNAME] sshd[23423]: Failed password for invalid user **removed** from 206.189.156.42 port 49402 ssh2
...
2020-04-04 18:23:33
122.59.181.52 attackspam
Brute force attack against VPN service
2020-04-04 18:43:47
112.186.79.4 attackbots
Apr  4 05:53:35 vmd48417 sshd[22902]: Failed password for root from 112.186.79.4 port 44498 ssh2
2020-04-04 18:07:06
64.225.24.239 attackbots
k+ssh-bruteforce
2020-04-04 18:25:43
195.62.32.150 attackbots
Port 5087 scan denied
2020-04-04 18:21:03
222.186.42.136 attackspambots
Apr  4 02:33:21 debian sshd[2629]: Unable to negotiate with 222.186.42.136 port 61768: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
Apr  4 06:46:00 debian sshd[14581]: Unable to negotiate with 222.186.42.136 port 59590: no matching key exchange method found. Their offer: ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
...
2020-04-04 18:49:21
171.35.174.78 attackbots
failed_logins
2020-04-04 18:12:32
199.249.230.66 attackbotsspam
MLV GET /wp-config.php.swp
2020-04-04 18:04:51
211.152.35.9 attack
SMB Server BruteForce Attack
2020-04-04 18:27:56

最近上报的IP列表

150.75.189.147 46.29.118.149 216.184.3.114 171.87.183.236
118.24.140.69 36.74.38.89 14.161.226.16 154.92.19.133
48.237.190.178 104.197.31.95 227.74.118.89 142.166.19.78
55.59.253.185 187.251.91.100 204.197.210.149 210.254.133.148
144.48.234.172 217.219.219.28 165.8.25.239 241.113.250.106