14.169.255.216

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	smtp probe/invalid login attempt	2020-01-02 13:21:23

相同子网IP讨论:

IP	类型	评论内容	时间
14.169.255.42	attack	Jul 4 23:30:34 offspring postfix/smtpd[11628]: warning: hostname static.vnpt.vn does not resolve to address 14.169.255.42 Jul 4 23:30:34 offspring postfix/smtpd[11628]: connect from unknown[14.169.255.42] Jul 4 23:30:37 offspring postfix/smtpd[11628]: warning: unknown[14.169.255.42]: SASL PLAIN authentication failed: authentication failure Jul 4 23:30:38 offspring postfix/smtpd[11628]: warning: unknown[14.169.255.42]: SASL LOGIN authentication failed: authentication failure Jul 4 23:30:38 offspring postfix/smtpd[11628]: warning: unknown[14.169.255.42]: SASL CRAM-MD5 authentication failed: authentication failure Jul 4 23:30:39 offspring postfix/smtpd[11628]: disconnect from unknown[14.169.255.42] Jul 4 23:30:39 offspring postfix/smtpd[11628]: warning: hostname static.vnpt.vn does not resolve to address 14.169.255.42 Jul 4 23:30:39 offspring postfix/smtpd[11628]: connect from unknown[14.169.255.42] Jul 4 23:30:42 offspring postfix/smtpd[11628]: warning: unknown[1........ -------------------------------	2020-07-05 07:19:00
14.169.255.16	attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/14.169.255.16/ VN - 1H : (45) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : VN NAME ASN : ASN45899 IP : 14.169.255.16 CIDR : 14.169.224.0/19 PREFIX COUNT : 2411 UNIQUE IP COUNT : 7209216 ATTACKS DETECTED ASN45899 : 1H - 9 3H - 10 6H - 12 12H - 16 24H - 24 DateTime : 2019-11-12 23:36:42 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-13 06:51:33

类型

评论内容

时间

14.169.255.42

attack

Jul  4 23:30:34 offspring postfix/smtpd[11628]: warning: hostname static.vnpt.vn does not resolve to address 14.169.255.42
Jul  4 23:30:34 offspring postfix/smtpd[11628]: connect from unknown[14.169.255.42]
Jul  4 23:30:37 offspring postfix/smtpd[11628]: warning: unknown[14.169.255.42]: SASL PLAIN authentication failed: authentication failure
Jul  4 23:30:38 offspring postfix/smtpd[11628]: warning: unknown[14.169.255.42]: SASL LOGIN authentication failed: authentication failure
Jul  4 23:30:38 offspring postfix/smtpd[11628]: warning: unknown[14.169.255.42]: SASL CRAM-MD5 authentication failed: authentication failure
Jul  4 23:30:39 offspring postfix/smtpd[11628]: disconnect from unknown[14.169.255.42]
Jul  4 23:30:39 offspring postfix/smtpd[11628]: warning: hostname static.vnpt.vn does not resolve to address 14.169.255.42
Jul  4 23:30:39 offspring postfix/smtpd[11628]: connect from unknown[14.169.255.42]
Jul  4 23:30:42 offspring postfix/smtpd[11628]: warning: unknown[1........
-------------------------------

2020-07-05 07:19:00

14.169.255.16

attack

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/14.169.255.16/ 
 
 VN - 1H : (45)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : VN 
 NAME ASN : ASN45899 
 
 IP : 14.169.255.16 
 
 CIDR : 14.169.224.0/19 
 
 PREFIX COUNT : 2411 
 
 UNIQUE IP COUNT : 7209216 
 
 
 ATTACKS DETECTED ASN45899 :  
  1H - 9 
  3H - 10 
  6H - 12 
 12H - 16 
 24H - 24 
 
 DateTime : 2019-11-12 23:36:42 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

2019-11-13 06:51:33

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.169.255.216
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17836
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.169.255.216.			IN	A

;; AUTHORITY SECTION:
.			496	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010102 1800 900 604800 86400

;; Query time: 107 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 02 13:21:18 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

216.255.169.14.in-addr.arpa domain name pointer static.vnpt.vn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
216.255.169.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
64.68.224.190	attackspambots	$f2bV_matches	2020-10-03 18:10:33
159.65.176.156	attackspam	s2.hscode.pl - SSH Attack	2020-10-03 18:29:34
116.247.81.99	attack	(sshd) Failed SSH login from 116.247.81.99 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 3 04:23:52 server2 sshd[16634]: Invalid user sig from 116.247.81.99 Oct 3 04:23:52 server2 sshd[16634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.247.81.99 Oct 3 04:23:54 server2 sshd[16634]: Failed password for invalid user sig from 116.247.81.99 port 54683 ssh2 Oct 3 04:30:12 server2 sshd[22503]: Invalid user luis from 116.247.81.99 Oct 3 04:30:12 server2 sshd[22503]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.247.81.99	2020-10-03 18:26:26
117.107.213.251	attack	Oct 3 06:04:07 ws19vmsma01 sshd[61461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.107.213.251 Oct 3 06:04:09 ws19vmsma01 sshd[61461]: Failed password for invalid user ftpuser from 117.107.213.251 port 59704 ssh2 ...	2020-10-03 18:30:06
27.77.115.4	attackspam	TCP (SYN) 27.77.115.4:65440 -> port 23, len 44	2020-10-03 18:50:49
190.145.254.138	attack	Oct 3 09:37:38 PorscheCustomer sshd[21736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.254.138 Oct 3 09:37:40 PorscheCustomer sshd[21736]: Failed password for invalid user deploy from 190.145.254.138 port 64795 ssh2 Oct 3 09:38:37 PorscheCustomer sshd[21761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.145.254.138 ...	2020-10-03 18:08:24
89.40.70.135	attackspam	Oct 2 20:34:17 firewall sshd[5382]: Invalid user nologin from 89.40.70.135 Oct 2 20:34:17 firewall sshd[5401]: Invalid user mysql from 89.40.70.135 Oct 2 20:34:17 firewall sshd[5403]: Invalid user gituser from 89.40.70.135 ...	2020-10-03 18:51:20
175.24.24.159	attackspambots	$f2bV_matches	2020-10-03 18:07:52
213.184.224.200	attackbotsspam	Lines containing failures of 213.184.224.200 Oct 1 20:06:31 nextcloud sshd[20971]: Invalid user tester from 213.184.224.200 port 40442 Oct 1 20:06:31 nextcloud sshd[20971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.184.224.200 Oct 1 20:06:33 nextcloud sshd[20971]: Failed password for invalid user tester from 213.184.224.200 port 40442 ssh2 Oct 1 20:06:33 nextcloud sshd[20971]: Received disconnect from 213.184.224.200 port 40442:11: Bye Bye [preauth] Oct 1 20:06:33 nextcloud sshd[20971]: Disconnected from invalid user tester 213.184.224.200 port 40442 [preauth] Oct 1 20:23:15 nextcloud sshd[22802]: Invalid user temp from 213.184.224.200 port 40698 Oct 1 20:23:15 nextcloud sshd[22802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.184.224.200 Oct 1 20:23:18 nextcloud sshd[22802]: Failed password for invalid user temp from 213.184.224.200 port 40698 ssh2 Oct 1 20:23:18 n........ ------------------------------	2020-10-03 18:20:18
218.92.0.202	attackspambots	2020-10-03T11:56:09.431349rem.lavrinenko.info sshd[26740]: refused connect from 218.92.0.202 (218.92.0.202) 2020-10-03T11:57:15.474958rem.lavrinenko.info sshd[26741]: refused connect from 218.92.0.202 (218.92.0.202) 2020-10-03T11:58:25.955423rem.lavrinenko.info sshd[26742]: refused connect from 218.92.0.202 (218.92.0.202) 2020-10-03T11:59:32.438770rem.lavrinenko.info sshd[26743]: refused connect from 218.92.0.202 (218.92.0.202) 2020-10-03T12:00:35.776315rem.lavrinenko.info sshd[26744]: refused connect from 218.92.0.202 (218.92.0.202) ...	2020-10-03 18:23:46
182.116.91.70	attack	Icarus honeypot on github	2020-10-03 18:43:48
161.97.113.95	attackbots	4 ssh attempts over 24 hour period.	2020-10-03 18:27:47
36.83.105.239	attackbotsspam	TCP (SYN) 36.83.105.239:8264 -> port 23, len 44	2020-10-03 18:19:16
106.75.165.187	attackspam	Oct 3 00:14:25 pornomens sshd\[8067\]: Invalid user 123456 from 106.75.165.187 port 54596 Oct 3 00:14:25 pornomens sshd\[8067\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.165.187 Oct 3 00:14:27 pornomens sshd\[8067\]: Failed password for invalid user 123456 from 106.75.165.187 port 54596 ssh2 ...	2020-10-03 18:22:20
185.153.197.180	attack	RDPBruteGam24	2020-10-03 18:24:19

最近上报的IP列表

12.237.7.247	190.8.220.107	68.181.105.105	221.117.199.75
191.78.193.118	71.105.251.198	201.49.248.164	45.80.65.15
36.82.98.1	89.208.225.103	103.45.110.161	51.219.241.172
104.238.205.168	183.83.133.90	137.13.243.3	200.126.33.222
153.10.52.25	59.196.173.136	213.164.212.225	54.161.7.194