14.187.52.18 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Suspicious access to SMTP/POP/IMAP services.	2020-08-06 17:45:46

相同子网IP讨论:

IP	类型	评论内容	时间
14.187.52.177	attack	1593403008 - 06/29/2020 05:56:48 Host: 14.187.52.177/14.187.52.177 Port: 445 TCP Blocked	2020-06-29 13:47:05

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.187.52.18
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30847
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.187.52.18.			IN	A

;; AUTHORITY SECTION:
.			279	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020080602 1800 900 604800 86400

;; Query time: 72 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Aug 06 17:45:42 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

18.52.187.14.in-addr.arpa domain name pointer static.vnpt.vn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
18.52.187.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
112.85.42.182	attackspambots	Feb 24 08:18:05 v22018076622670303 sshd\[8912\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.182 user=root Feb 24 08:18:07 v22018076622670303 sshd\[8912\]: Failed password for root from 112.85.42.182 port 64184 ssh2 Feb 24 08:18:10 v22018076622670303 sshd\[8912\]: Failed password for root from 112.85.42.182 port 64184 ssh2 ...	2020-02-24 15:40:25
191.254.87.36	attackbotsspam	suspicious action Mon, 24 Feb 2020 01:53:58 -0300	2020-02-24 15:42:19
79.124.62.14	attackbotsspam	scan r	2020-02-24 16:01:11
193.31.24.113	attackbots	02/24/2020-09:12:47.493285 193.31.24.113 Protocol: 6 SURICATA TLS invalid record/traffic	2020-02-24 16:16:51
192.99.175.191	attackspam	suspicious action Mon, 24 Feb 2020 01:54:07 -0300	2020-02-24 15:36:57
105.235.205.90	attackbots	suspicious action Mon, 24 Feb 2020 01:53:42 -0300	2020-02-24 15:51:30
218.92.0.212	attackspambots	Feb 24 08:15:10 SilenceServices sshd[21426]: Failed password for root from 218.92.0.212 port 42099 ssh2 Feb 24 08:15:25 SilenceServices sshd[21426]: Failed password for root from 218.92.0.212 port 42099 ssh2 Feb 24 08:15:25 SilenceServices sshd[21426]: error: maximum authentication attempts exceeded for root from 218.92.0.212 port 42099 ssh2 [preauth]	2020-02-24 16:07:21
120.136.167.102	attack	suspicious action Mon, 24 Feb 2020 01:52:59 -0300	2020-02-24 16:13:09
218.161.35.187	attackbots	Automatic report - Port Scan Attack	2020-02-24 15:40:45
91.109.27.82	attackbots	[2020-02-24 02:41:30] NOTICE[1148] chan_sip.c: Registration from '' failed for '91.109.27.82:60884' - Wrong password [2020-02-24 02:41:30] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-24T02:41:30.906-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="7532",SessionID="0x7fd82c80d368",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/91.109.27.82/60884",Challenge="60fd0f19",ReceivedChallenge="60fd0f19",ReceivedHash="07678ff80a36226b48bf728605fc66f3" [2020-02-24 02:41:36] NOTICE[1148] chan_sip.c: Registration from '' failed for '91.109.27.82:54217' - Wrong password [2020-02-24 02:41:36] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-24T02:41:36.030-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="33103",SessionID="0x7fd82cc0d5f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/91.109.27.82/54217",Challenge="3 ...	2020-02-24 15:46:03
124.65.195.162	attackspam	Feb 23 23:48:54 stark sshd[905]: Failed password for invalid user district1lasertag from 124.65.195.162 port 2048 ssh2 Feb 23 23:52:56 stark sshd[956]: Invalid user fccqtyphon from 124.65.195.162 Feb 23 23:52:56 stark sshd[956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.65.195.162 Feb 23 23:52:58 stark sshd[956]: Failed password for invalid user fccqtyphon from 124.65.195.162 port 2049 ssh2	2020-02-24 16:12:34
114.237.134.133	attackbots	Feb 24 05:53:02 grey postfix/smtpd\[5539\]: NOQUEUE: reject: RCPT from unknown\[114.237.134.133\]: 554 5.7.1 Service unavailable\; Client host \[114.237.134.133\] blocked using cbl.abuseat.org\; Blocked - see http://www.abuseat.org/lookup.cgi\?ip=114.237.134.133\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-24 16:10:39
122.243.72.193	attackbots	Automatic report - Port Scan Attack	2020-02-24 16:08:23
217.112.142.87	attackspam	Feb 24 05:18:32 tempelhof postfix/smtpd[26239]: connect from tread.yarkaci.com[217.112.142.87] Feb x@x Feb 24 05:18:32 tempelhof postfix/smtpd[26239]: disconnect from tread.yarkaci.com[217.112.142.87] Feb 24 05:19:55 tempelhof postfix/smtpd[26239]: connect from tread.yarkaci.com[217.112.142.87] Feb x@x Feb 24 05:19:55 tempelhof postfix/smtpd[26239]: disconnect from tread.yarkaci.com[217.112.142.87] Feb 24 05:21:33 tempelhof postfix/smtpd[26292]: connect from tread.yarkaci.com[217.112.142.87] Feb x@x Feb 24 05:21:33 tempelhof postfix/smtpd[26292]: disconnect from tread.yarkaci.com[217.112.142.87] Feb 24 05:22:08 tempelhof postfix/smtpd[26239]: connect from tread.yarkaci.com[217.112.142.87] Feb x@x Feb 24 05:22:08 tempelhof postfix/smtpd[26239]: disconnect from tread.yarkaci.com[217.112.142.87] Feb 24 05:28:32 tempelhof postfix/smtpd[27017]: connect from tread.yarkaci.com[217.112.142.87] Feb x@x Feb 24 05:28:32 tempelhof postfix/smtpd[27017]: disconnect from tread.yarkaci........ -------------------------------	2020-02-24 15:49:05
111.113.22.10	attackbots	suspicious action Mon, 24 Feb 2020 01:53:54 -0300	2020-02-24 15:45:23

最近上报的IP列表

177.139.192.114	156.105.167.111	222.97.245.221	128.162.155.8
216.205.241.26	160.153.251.138	180.66.203.93	67.143.176.124
12.144.116.53	140.38.15.4	221.209.46.123	27.11.22.18
106.209.73.9	86.61.28.146	110.0.50.1	148.133.3.231
12.58.225.184	53.137.169.197	37.110.250.82	213.16.142.34