必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
类型 评论内容 时间
attack
Oct 17 21:44:32 server378 sshd[31472]: Address 14.190.13.195 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Oct 17 21:44:32 server378 sshd[31472]: Invalid user admin from 14.190.13.195
Oct 17 21:44:32 server378 sshd[31472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.190.13.195
Oct 17 21:44:34 server378 sshd[31472]: Failed password for invalid user admin from 14.190.13.195 port 59373 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=14.190.13.195
2019-10-18 04:44:31
相同子网IP讨论:
IP 类型 评论内容 时间
14.190.138.57 attackspam
Unauthorized connection attempt from IP address 14.190.138.57 on Port 445(SMB)
2020-07-16 03:01:51
14.190.134.206 attackbots
Attempt to attack host OS, exploiting network vulnerabilities, on 27-12-2019 04:55:09.
2019-12-27 14:29:17
14.190.134.239 attackbotsspam
Oct 16 05:09:00 lvps83-169-44-148 sshd[31773]: warning: /etc/hosts.allow, line 26: host name/address mismatch: 14.190.134.239 != static.vnpt.vn
Oct 16 05:09:00 lvps83-169-44-148 sshd[31773]: Did not receive identification string from 14.190.134.239
Oct 16 05:09:01 lvps83-169-44-148 sshd[31775]: warning: /etc/hosts.allow, line 26: host name/address mismatch: 14.190.134.239 != static.vnpt.vn
Oct 16 05:09:03 lvps83-169-44-148 sshd[31775]: Address 14.190.134.239 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Oct 16 05:09:03 lvps83-169-44-148 sshd[31775]: Invalid user tech from 14.190.134.239
Oct 16 05:09:03 lvps83-169-44-148 sshd[31775]: Failed none for invalid user tech from 14.190.134.239 port 49254 ssh2
Oct 16 05:09:04 lvps83-169-44-148 sshd[31775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.190.134.239 
Oct 16 05:09:06 lvps83-169-44-148 sshd[31775]: Failed password for invali........
-------------------------------
2019-10-16 15:44:59
14.190.138.155 attackbots
Unauthorized connection attempt from IP address 14.190.138.155 on Port 445(SMB)
2019-08-30 21:20:42
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.190.13.195
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11991
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.190.13.195.			IN	A

;; AUTHORITY SECTION:
.			553	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101700 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 18 04:44:28 CST 2019
;; MSG SIZE  rcvd: 117
HOST信息:
195.13.190.14.in-addr.arpa domain name pointer static.vnpt.vn.
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
195.13.190.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:
相关IP信息:
最新评论:
IP 类型 评论内容 时间
42.106.181.188 attackspambots
SS5,WP GET /wp-login.php
2020-06-12 02:54:22
222.186.175.182 attack
Jun 11 20:51:05 pve1 sshd[17224]: Failed password for root from 222.186.175.182 port 54088 ssh2
Jun 11 20:51:09 pve1 sshd[17224]: Failed password for root from 222.186.175.182 port 54088 ssh2
...
2020-06-12 02:58:11
103.133.37.50 attackbotsspam
Honeypot attack, port: 445, PTR: PTR record not found
2020-06-12 02:26:26
202.125.137.70 attackspambots
Honeypot attack, port: 445, PTR: khi77.pie.net.pk.
2020-06-12 02:31:55
46.182.6.20 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-06-12 02:57:45
37.252.190.224 attackbotsspam
Failed password for root from 37.252.190.224 port 37798 ssh2
2020-06-12 02:43:26
95.68.135.208 attackspam
Honeypot attack, port: 5555, PTR: 5f4487d0.dynamic.mv.ru.
2020-06-12 02:30:34
107.167.85.118 attackspambots
HTTP_USER_AGENT Mozilla/5.0 (Windows NT 10.0; WOW64; rv:47.0) Gecko/20100101 Firefox/47.0
2020-06-12 02:56:28
183.87.215.180 attackbots
 TCP (SYN) 183.87.215.180:63856 -> port 445, len 52
2020-06-12 02:53:46
35.202.177.121 attack
Jun 11 20:18:00 vps647732 sshd[22584]: Failed password for root from 35.202.177.121 port 36438 ssh2
Jun 11 20:23:18 vps647732 sshd[22654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.202.177.121
...
2020-06-12 02:27:45
40.74.70.219 attackbotsspam
40.74.70.219 - - [11/Jun/2020:19:35:40 +0100] "POST //wp-login.php HTTP/1.1" 200 3626 "https://wpeagledemoblog.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
40.74.70.219 - - [11/Jun/2020:19:45:44 +0100] "POST //wp-login.php HTTP/1.1" 200 3626 "https://wpeagledemoblog.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
40.74.70.219 - - [11/Jun/2020:19:45:45 +0100] "POST //wp-login.php HTTP/1.1" 200 3626 "https://wpeagledemoblog.com//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
...
2020-06-12 02:54:46
189.212.112.9 attack
port scan and connect, tcp 23 (telnet)
2020-06-12 02:44:57
111.229.78.199 attack
Jun 11 16:12:48 pornomens sshd\[25655\]: Invalid user lpadm from 111.229.78.199 port 35376
Jun 11 16:12:48 pornomens sshd\[25655\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.78.199
Jun 11 16:12:51 pornomens sshd\[25655\]: Failed password for invalid user lpadm from 111.229.78.199 port 35376 ssh2
...
2020-06-12 02:26:05
68.183.48.172 attack
Jun 11 12:31:41 django-0 sshd\[5281\]: Invalid user t24dev05 from 68.183.48.172Jun 11 12:31:43 django-0 sshd\[5281\]: Failed password for invalid user t24dev05 from 68.183.48.172 port 35655 ssh2Jun 11 12:36:23 django-0 sshd\[5355\]: Failed password for root from 68.183.48.172 port 36089 ssh2
...
2020-06-12 02:25:23
121.199.53.239 attackbots
[Thu Jun 11 13:47:30 2020] - Syn Flood From IP: 121.199.53.239 Port: 6000
2020-06-12 02:53:25

最近上报的IP列表

201.26.96.253 201.254.38.70 201.254.165.109 18.163.5.33
31.25.29.163 141.101.105.230 201.249.179.250 177.50.212.204
5.173.250.228 201.249.122.32 129.211.56.92 45.77.155.9
84.170.213.179 80.211.67.90 172.105.10.93 201.239.64.233
103.39.135.154 201.239.58.79 105.96.44.37 191.252.184.219