14.187.85.164 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	2019-03-14 05:36:33 H=\(static.vnpt.vn\) \[14.187.85.164\]:27419 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-03-14 05:36:41 H=\(static.vnpt.vn\) \[14.187.85.164\]:27508 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-03-14 05:36:50 H=\(static.vnpt.vn\) \[14.187.85.164\]:27578 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-02-04 22:13:05

类型

评论内容

时间

attack

2019-03-14 05:36:33 H=\(static.vnpt.vn\) \[14.187.85.164\]:27419 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-03-14 05:36:41 H=\(static.vnpt.vn\) \[14.187.85.164\]:27508 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-03-14 05:36:50 H=\(static.vnpt.vn\) \[14.187.85.164\]:27578 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
...

2020-02-04 22:13:05

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.187.85.164
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20399
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.187.85.164.			IN	A

;; AUTHORITY SECTION:
.			593	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020020400 1800 900 604800 86400

;; Query time: 108 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 22:12:58 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

164.85.187.14.in-addr.arpa domain name pointer static.vnpt.vn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
164.85.187.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
88.199.41.154	attackspambots	Sep 18 04:10:56 mail.srvfarm.net postfix/smtps/smtpd[538692]: warning: unknown[88.199.41.154]: SASL PLAIN authentication failed: Sep 18 04:10:56 mail.srvfarm.net postfix/smtps/smtpd[538692]: lost connection after AUTH from unknown[88.199.41.154] Sep 18 04:11:41 mail.srvfarm.net postfix/smtpd[525584]: warning: unknown[88.199.41.154]: SASL PLAIN authentication failed: Sep 18 04:11:41 mail.srvfarm.net postfix/smtpd[525584]: lost connection after AUTH from unknown[88.199.41.154] Sep 18 04:14:59 mail.srvfarm.net postfix/smtps/smtpd[523777]: warning: unknown[88.199.41.154]: SASL PLAIN authentication failed:	2020-09-19 01:54:57
189.244.107.101	attackbots	1600361826 - 09/17/2020 18:57:06 Host: 189.244.107.101/189.244.107.101 Port: 445 TCP Blocked	2020-09-19 01:37:59
54.37.156.188	attackspambots	2020-09-18T12:38:26.5238171495-001 sshd[21477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.ip-54-37-156.eu user=root 2020-09-18T12:38:28.7170211495-001 sshd[21477]: Failed password for root from 54.37.156.188 port 39628 ssh2 2020-09-18T12:42:31.4300981495-001 sshd[21656]: Invalid user cjh from 54.37.156.188 port 45125 2020-09-18T12:42:31.4331341495-001 sshd[21656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.ip-54-37-156.eu 2020-09-18T12:42:31.4300981495-001 sshd[21656]: Invalid user cjh from 54.37.156.188 port 45125 2020-09-18T12:42:33.3808111495-001 sshd[21656]: Failed password for invalid user cjh from 54.37.156.188 port 45125 ssh2 ...	2020-09-19 01:48:20
203.86.30.17	attackbots	Sep 18 05:54:45 web01.agentur-b-2.de postfix/smtpd[2153271]: lost connection after STARTTLS from unknown[203.86.30.17] Sep 18 05:54:47 web01.agentur-b-2.de postfix/smtpd[2153276]: NOQUEUE: reject: RCPT from unknown[203.86.30.17]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Sep 18 05:55:53 web01.agentur-b-2.de postfix/smtpd[2153276]: lost connection after STARTTLS from unknown[203.86.30.17] Sep 18 05:55:55 web01.agentur-b-2.de postfix/smtpd[2153271]: NOQUEUE: reject: RCPT from unknown[203.86.30.17]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Sep 18 05:56:58 web01.agentur-b-2.de postfix/smtpd[2153276]: lost connection after STARTTLS from unknown[203.86.30.17]	2020-09-19 01:50:01
59.120.189.234	attackbotsspam	Sep 18 17:29:20 OPSO sshd\[15607\]: Invalid user oracle from 59.120.189.234 port 38022 Sep 18 17:29:20 OPSO sshd\[15607\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.120.189.234 Sep 18 17:29:22 OPSO sshd\[15607\]: Failed password for invalid user oracle from 59.120.189.234 port 38022 ssh2 Sep 18 17:34:58 OPSO sshd\[17156\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.120.189.234 user=root Sep 18 17:35:00 OPSO sshd\[17156\]: Failed password for root from 59.120.189.234 port 49530 ssh2	2020-09-19 01:07:36
193.35.51.23	attackbots	SMTP bruteforce auth scanning - failed login with invalid user	2020-09-19 01:05:27
104.236.151.120	attackbotsspam	104.236.151.120 (US/United States/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 18 12:23:36 server4 sshd[32344]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.242.204 user=root Sep 18 12:22:11 server4 sshd[31419]: Failed password for root from 117.34.91.2 port 49345 ssh2 Sep 18 12:22:38 server4 sshd[31810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.151.120 user=root Sep 18 12:22:39 server4 sshd[31810]: Failed password for root from 104.236.151.120 port 57381 ssh2 Sep 18 12:23:01 server4 sshd[31947]: Failed password for root from 190.111.151.198 port 43553 ssh2 Sep 18 12:22:09 server4 sshd[31419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.34.91.2 user=root IP Addresses Blocked: 180.76.242.204 (CN/China/-) 117.34.91.2 (CN/China/-)	2020-09-19 01:07:10
152.136.130.218	attackspam	2020-09-18T16:44:25.687716shield sshd\[3086\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.130.218 user=root 2020-09-18T16:44:27.499818shield sshd\[3086\]: Failed password for root from 152.136.130.218 port 50104 ssh2 2020-09-18T16:48:44.171025shield sshd\[4246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.130.218 user=root 2020-09-18T16:48:45.536412shield sshd\[4246\]: Failed password for root from 152.136.130.218 port 46480 ssh2 2020-09-18T16:53:12.558355shield sshd\[6115\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.130.218 user=root	2020-09-19 01:12:16
5.188.84.228	attackbots	8,28-01/02 [bc01/m14] PostRequest-Spammer scoring: lisboa	2020-09-19 01:44:05
177.220.133.158	attackbots	Sep 18 15:44:45 jumpserver sshd[124926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.220.133.158 user=root Sep 18 15:44:47 jumpserver sshd[124926]: Failed password for root from 177.220.133.158 port 49922 ssh2 Sep 18 15:49:05 jumpserver sshd[125079]: Invalid user simple from 177.220.133.158 port 38794 ...	2020-09-19 01:09:01
148.203.151.248	attackbots	Sep 18 16:02:27 mail.srvfarm.net postfix/smtpd[819719]: NOQUEUE: reject: RCPT from mailrelay5.vw.com.mx[148.203.151.248]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Sep 18 16:02:27 mail.srvfarm.net postfix/smtpd[806927]: NOQUEUE: reject: RCPT from mailrelay5.vw.com.mx[148.203.151.248]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Sep 18 16:02:28 mail.srvfarm.net postfix/smtpd[819719]: NOQUEUE: reject: RCPT from mailrelay5.vw.com.mx[148.203.151.248]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Sep 18 16:02:28 mail.srvfarm.net postfix/smtpd[806927]: NOQUEUE	2020-09-19 01:51:39
37.49.225.173	attack	Icarus honeypot on github	2020-09-19 00:59:12
178.219.30.186	attackbotsspam	Sep 17 18:42:29 mail.srvfarm.net postfix/smtpd[157369]: warning: unknown[178.219.30.186]: SASL PLAIN authentication failed: Sep 17 18:42:29 mail.srvfarm.net postfix/smtpd[157369]: lost connection after AUTH from unknown[178.219.30.186] Sep 17 18:43:09 mail.srvfarm.net postfix/smtps/smtpd[159171]: warning: unknown[178.219.30.186]: SASL PLAIN authentication failed: Sep 17 18:43:09 mail.srvfarm.net postfix/smtps/smtpd[159171]: lost connection after AUTH from unknown[178.219.30.186] Sep 17 18:52:26 mail.srvfarm.net postfix/smtpd[157367]: warning: unknown[178.219.30.186]: SASL PLAIN authentication failed:	2020-09-19 01:50:30
91.228.65.61	attackbots	Icarus honeypot on github	2020-09-19 01:38:45
112.85.42.74	attackbots	Sep 18 09:53:36 dignus sshd[8541]: Failed password for root from 112.85.42.74 port 19891 ssh2 Sep 18 09:53:38 dignus sshd[8541]: Failed password for root from 112.85.42.74 port 19891 ssh2 Sep 18 09:54:16 dignus sshd[8615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.74 user=root Sep 18 09:54:17 dignus sshd[8615]: Failed password for root from 112.85.42.74 port 62879 ssh2 Sep 18 09:54:20 dignus sshd[8615]: Failed password for root from 112.85.42.74 port 62879 ssh2 ...	2020-09-19 01:09:18

最近上报的IP列表

208.20.210.199	17.50.6.252	172.69.70.221	141.98.80.137
163.230.165.103	14.185.62.59	14.185.226.49	46.162.137.45
99.96.33.95	14.185.164.33	234.240.249.151	26.206.22.34
111.181.226.68	132.52.52.49	14.185.160.229	4.74.68.94
65.62.211.247	254.150.101.34	176.124.205.252	73.83.89.241