必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attack
Oct 17 21:44:32 server378 sshd[31472]: Address 14.190.13.195 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Oct 17 21:44:32 server378 sshd[31472]: Invalid user admin from 14.190.13.195
Oct 17 21:44:32 server378 sshd[31472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.190.13.195
Oct 17 21:44:34 server378 sshd[31472]: Failed password for invalid user admin from 14.190.13.195 port 59373 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=14.190.13.195
2019-10-18 04:44:31
相同子网IP讨论:
IP 类型 评论内容 时间
14.190.138.57 attackspam
Unauthorized connection attempt from IP address 14.190.138.57 on Port 445(SMB)
2020-07-16 03:01:51
14.190.134.206 attackbots
Attempt to attack host OS, exploiting network vulnerabilities, on 27-12-2019 04:55:09.
2019-12-27 14:29:17
14.190.134.239 attackbotsspam
Oct 16 05:09:00 lvps83-169-44-148 sshd[31773]: warning: /etc/hosts.allow, line 26: host name/address mismatch: 14.190.134.239 != static.vnpt.vn
Oct 16 05:09:00 lvps83-169-44-148 sshd[31773]: Did not receive identification string from 14.190.134.239
Oct 16 05:09:01 lvps83-169-44-148 sshd[31775]: warning: /etc/hosts.allow, line 26: host name/address mismatch: 14.190.134.239 != static.vnpt.vn
Oct 16 05:09:03 lvps83-169-44-148 sshd[31775]: Address 14.190.134.239 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Oct 16 05:09:03 lvps83-169-44-148 sshd[31775]: Invalid user tech from 14.190.134.239
Oct 16 05:09:03 lvps83-169-44-148 sshd[31775]: Failed none for invalid user tech from 14.190.134.239 port 49254 ssh2
Oct 16 05:09:04 lvps83-169-44-148 sshd[31775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.190.134.239 
Oct 16 05:09:06 lvps83-169-44-148 sshd[31775]: Failed password for invali........
-------------------------------
2019-10-16 15:44:59
14.190.138.155 attackbots
Unauthorized connection attempt from IP address 14.190.138.155 on Port 445(SMB)
2019-08-30 21:20:42
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.190.13.195
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11991
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.190.13.195.			IN	A

;; AUTHORITY SECTION:
.			553	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101700 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 18 04:44:28 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
195.13.190.14.in-addr.arpa domain name pointer static.vnpt.vn.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
195.13.190.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
89.133.62.227 attackspambots
2019-11-21T15:53:43.990267abusebot-5.cloudsearch.cf sshd\[21801\]: Invalid user bjorn from 89.133.62.227 port 37812
2019-11-22 00:36:37
159.65.69.32 attack
WordPress login Brute force / Web App Attack on client site.
2019-11-22 00:15:16
123.235.3.189 attack
MultiHost/MultiPort Probe, Scan, Hack -
2019-11-22 00:13:08
200.2.162.34 attackspam
[Thu Nov 21 12:51:39.135673 2019] [:error] [pid 126122] [client 200.2.162.34:61000] [client 200.2.162.34] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ws24vmsma01.ufn.edu.br"] [uri "/"] [unique_id "Xdayiytk-RyrOURhjUi5ewAAAAI"]
...
2019-11-22 00:12:38
118.25.152.227 attack
Oct 18 06:41:58 microserver sshd[3020]: Failed password for uucp from 118.25.152.227 port 54255 ssh2
Oct 18 06:46:31 microserver sshd[3643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.152.227  user=root
Oct 18 06:46:33 microserver sshd[3643]: Failed password for root from 118.25.152.227 port 45252 ssh2
Oct 18 06:51:05 microserver sshd[4325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.152.227  user=root
Oct 18 07:04:48 microserver sshd[5967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.152.227  user=root
Oct 18 07:04:51 microserver sshd[5967]: Failed password for root from 118.25.152.227 port 37466 ssh2
Oct 18 07:09:20 microserver sshd[6639]: Invalid user atir from 118.25.152.227 port 56698
Oct 18 07:09:20 microserver sshd[6639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.152.227
Oct 18 07:09:22 microserver
2019-11-22 00:30:26
104.248.40.59 attackspambots
11/21/2019-15:54:45.548017 104.248.40.59 Protocol: 6 ET POLICY Cleartext WordPress Login
2019-11-22 00:28:04
223.204.240.251 attackbotsspam
Honeypot attack, port: 445, PTR: mx-ll-223.204.240-251.dynamic.3bb.co.th.
2019-11-22 00:35:18
202.46.37.42 attackbotsspam
Honeypot attack, port: 445, PTR: ptr.cnsat.com.cn.
2019-11-22 00:26:50
102.177.145.221 attackbots
Fail2Ban Ban Triggered
2019-11-22 00:46:06
123.13.156.197 attackspambots
firewall-block, port(s): 1433/tcp
2019-11-22 00:48:14
222.186.173.180 attackbots
Nov 21 17:34:05 eventyay sshd[23655]: Failed password for root from 222.186.173.180 port 49364 ssh2
Nov 21 17:34:19 eventyay sshd[23655]: error: maximum authentication attempts exceeded for root from 222.186.173.180 port 49364 ssh2 [preauth]
Nov 21 17:34:28 eventyay sshd[23662]: Failed password for root from 222.186.173.180 port 65030 ssh2
...
2019-11-22 00:34:53
185.220.101.6 attack
Automatic report - Banned IP Access
2019-11-22 00:21:38
149.202.18.201 attackbotsspam
Autoban   149.202.18.201 AUTH/CONNECT
2019-11-22 00:21:54
49.88.112.74 attackbotsspam
2019-11-21T16:18:17.219253shield sshd\[1593\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.74  user=root
2019-11-21T16:18:19.782992shield sshd\[1593\]: Failed password for root from 49.88.112.74 port 26206 ssh2
2019-11-21T16:18:21.327261shield sshd\[1593\]: Failed password for root from 49.88.112.74 port 26206 ssh2
2019-11-21T16:18:23.336066shield sshd\[1593\]: Failed password for root from 49.88.112.74 port 26206 ssh2
2019-11-21T16:21:47.639395shield sshd\[2156\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.74  user=root
2019-11-22 00:37:54
95.105.233.209 attackspam
[ssh] SSH attack
2019-11-22 00:41:15

最近上报的IP列表

201.26.96.253 201.254.38.70 201.254.165.109 18.163.5.33
31.25.29.163 141.101.105.230 201.249.179.250 177.50.212.204
5.173.250.228 201.249.122.32 129.211.56.92 45.77.155.9
84.170.213.179 80.211.67.90 172.105.10.93 201.239.64.233
103.39.135.154 201.239.58.79 105.96.44.37 191.252.184.219