14.20.91.68 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Guangdong Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	20 attempts against mh-ssh on web2	2020-07-05 15:52:21

相同子网IP讨论:

IP	类型	评论内容	时间
14.20.91.197	attack	Nov 28 09:09:11 saengerschafter sshd[16167]: Invalid user ozmore from 14.20.91.197 Nov 28 09:09:11 saengerschafter sshd[16167]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.20.91.197 Nov 28 09:09:12 saengerschafter sshd[16167]: Failed password for invalid user ozmore from 14.20.91.197 port 58138 ssh2 Nov 28 09:09:12 saengerschafter sshd[16167]: Received disconnect from 14.20.91.197: 11: Bye Bye [preauth] Nov 28 09:13:22 saengerschafter sshd[16559]: Invalid user delia from 14.20.91.197 Nov 28 09:13:22 saengerschafter sshd[16559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.20.91.197 Nov 28 09:13:24 saengerschafter sshd[16559]: Failed password for invalid user delia from 14.20.91.197 port 59697 ssh2 Nov 28 09:13:25 saengerschafter sshd[16559]: Received disconnect from 14.20.91.197: 11: Bye Bye [preauth] Nov 28 09:18:03 saengerschafter sshd[16640]: Invalid user nologin from 14.20........ -------------------------------	2019-11-29 03:24:46

类型

评论内容

时间

14.20.91.197

attack

Nov 28 09:09:11 saengerschafter sshd[16167]: Invalid user ozmore from 14.20.91.197
Nov 28 09:09:11 saengerschafter sshd[16167]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.20.91.197 
Nov 28 09:09:12 saengerschafter sshd[16167]: Failed password for invalid user ozmore from 14.20.91.197 port 58138 ssh2
Nov 28 09:09:12 saengerschafter sshd[16167]: Received disconnect from 14.20.91.197: 11: Bye Bye [preauth]
Nov 28 09:13:22 saengerschafter sshd[16559]: Invalid user delia from 14.20.91.197
Nov 28 09:13:22 saengerschafter sshd[16559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.20.91.197 
Nov 28 09:13:24 saengerschafter sshd[16559]: Failed password for invalid user delia from 14.20.91.197 port 59697 ssh2
Nov 28 09:13:25 saengerschafter sshd[16559]: Received disconnect from 14.20.91.197: 11: Bye Bye [preauth]
Nov 28 09:18:03 saengerschafter sshd[16640]: Invalid user nologin from 14.20........
-------------------------------

2019-11-29 03:24:46

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.20.91.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57122
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.20.91.68.			IN	A

;; AUTHORITY SECTION:
.			467	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020070500 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jul 05 15:52:13 CST 2020
;; MSG SIZE  rcvd: 115

HOST信息:

Host 68.91.20.14.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 68.91.20.14.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
46.127.6.197	attackspam	Jun 7 22:41:24 ns sshd[2123]: Connection from 46.127.6.197 port 33936 on 134.119.39.98 port 22 Jun 7 22:41:27 ns sshd[2123]: User r.r from 46.127.6.197 not allowed because not listed in AllowUsers Jun 7 22:41:27 ns sshd[2123]: Failed password for invalid user r.r from 46.127.6.197 port 33936 ssh2 Jun 7 22:41:27 ns sshd[2123]: Received disconnect from 46.127.6.197 port 33936:11: Bye Bye [preauth] Jun 7 22:41:27 ns sshd[2123]: Disconnected from 46.127.6.197 port 33936 [preauth] Jun 7 23:05:16 ns sshd[8658]: Connection from 46.127.6.197 port 39608 on 134.119.39.98 port 22 Jun 7 23:05:17 ns sshd[8658]: User r.r from 46.127.6.197 not allowed because not listed in AllowUsers Jun 7 23:05:17 ns sshd[8658]: Failed password for invalid user r.r from 46.127.6.197 port 39608 ssh2 Jun 7 23:05:17 ns sshd[8658]: Received disconnect from 46.127.6.197 port 39608:11: Bye Bye [preauth] Jun 7 23:05:17 ns sshd[8658]: Disconnected from 46.127.6.197 port 39608 [preauth] Jun 7 23:12........ -------------------------------	2020-06-08 18:15:01
86.111.144.10	attack	Jun 8 05:28:15 web01.agentur-b-2.de postfix/smtpd[1323751]: NOQUEUE: reject: RCPT from unknown[86.111.144.10]: 554 5.7.1 Service unavailable; Client host [86.111.144.10] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/86.111.144.10; from= to= proto=ESMTP helo= Jun 8 05:28:16 web01.agentur-b-2.de postfix/smtpd[1323751]: NOQUEUE: reject: RCPT from unknown[86.111.144.10]: 554 5.7.1 Service unavailable; Client host [86.111.144.10] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/86.111.144.10; from= to= proto=ESMTP helo= Jun 8 05:28:17 web01.agentur-b-2.de postfix/smtpd[1323751]: NOQUEUE: reject: RCPT from unknown[86.111.144.10]: 554 5.7.1 Service unavailable; Client host [86.111.144.10] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamha	2020-06-08 18:47:46
109.162.242.157	attackbotsspam	Jun 8 05:35:25 mail.srvfarm.net postfix/smtps/smtpd[673725]: warning: unknown[109.162.242.157]: SASL PLAIN authentication failed: Jun 8 05:35:25 mail.srvfarm.net postfix/smtps/smtpd[673725]: lost connection after AUTH from unknown[109.162.242.157] Jun 8 05:38:01 mail.srvfarm.net postfix/smtps/smtpd[673725]: warning: unknown[109.162.242.157]: SASL PLAIN authentication failed: Jun 8 05:38:01 mail.srvfarm.net postfix/smtps/smtpd[673725]: lost connection after AUTH from unknown[109.162.242.157] Jun 8 05:43:14 mail.srvfarm.net postfix/smtpd[671306]: warning: unknown[109.162.242.157]: SASL PLAIN authentication failed:	2020-06-08 18:28:31
43.248.190.237	attackbots	SSH_attack	2020-06-08 18:49:34
148.153.11.58	attackspam	Jun 8 05:08:48 web01.agentur-b-2.de postfix/smtpd[1319302]: NOQUEUE: reject: RCPT from unknown[148.153.11.58]: 554 5.7.1 Service unavailable; Client host [148.153.11.58] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/148.153.11.58 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<111.co.za> Jun 8 05:08:50 web01.agentur-b-2.de postfix/smtpd[1319302]: NOQUEUE: reject: RCPT from unknown[148.153.11.58]: 554 5.7.1 Service unavailable; Client host [148.153.11.58] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/148.153.11.58 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=<111.co.za> Jun 8 05:08:52 web01.agentur-b-2.de postfix/smtpd[1319302]: NOQUEUE: reject: RCPT from unknown[148.153.11.58]: 554 5.7.1 Service unavailable; Client host [148.153.11.58] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/148.153.11.58 / https://www.spamhaus.or	2020-06-08 18:43:08
188.92.209.143	attackbots	Jun 8 05:21:04 mail.srvfarm.net postfix/smtps/smtpd[671710]: warning: unknown[188.92.209.143]: SASL PLAIN authentication failed: Jun 8 05:21:04 mail.srvfarm.net postfix/smtps/smtpd[671710]: lost connection after AUTH from unknown[188.92.209.143] Jun 8 05:21:31 mail.srvfarm.net postfix/smtps/smtpd[673656]: warning: unknown[188.92.209.143]: SASL PLAIN authentication failed: Jun 8 05:21:31 mail.srvfarm.net postfix/smtps/smtpd[673656]: lost connection after AUTH from unknown[188.92.209.143] Jun 8 05:25:20 mail.srvfarm.net postfix/smtps/smtpd[674165]: warning: unknown[188.92.209.143]: SASL PLAIN authentication failed:	2020-06-08 18:37:09
200.77.176.209	attackbotsspam	Jun 8 05:42:18 mail.srvfarm.net postfix/smtps/smtpd[673571]: warning: unknown[200.77.176.209]: SASL PLAIN authentication failed: Jun 8 05:42:18 mail.srvfarm.net postfix/smtps/smtpd[673571]: lost connection after AUTH from unknown[200.77.176.209] Jun 8 05:44:20 mail.srvfarm.net postfix/smtpd[673396]: warning: unknown[200.77.176.209]: SASL PLAIN authentication failed: Jun 8 05:44:20 mail.srvfarm.net postfix/smtpd[673396]: lost connection after AUTH from unknown[200.77.176.209] Jun 8 05:46:25 mail.srvfarm.net postfix/smtps/smtpd[671637]: warning: unknown[200.77.176.209]: SASL PLAIN authentication failed:	2020-06-08 18:21:36
186.216.71.57	attackbots	Jun 8 05:31:58 mail.srvfarm.net postfix/smtpd[671307]: warning: unknown[186.216.71.57]: SASL PLAIN authentication failed: Jun 8 05:31:59 mail.srvfarm.net postfix/smtpd[671307]: lost connection after AUTH from unknown[186.216.71.57] Jun 8 05:34:39 mail.srvfarm.net postfix/smtpd[673035]: warning: unknown[186.216.71.57]: SASL PLAIN authentication failed: Jun 8 05:34:40 mail.srvfarm.net postfix/smtpd[673035]: lost connection after AUTH from unknown[186.216.71.57] Jun 8 05:35:01 mail.srvfarm.net postfix/smtps/smtpd[671665]: warning: unknown[186.216.71.57]: SASL PLAIN authentication failed:	2020-06-08 18:24:47
14.242.85.98	attackbotsspam	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2020-06-08 18:52:05
191.53.193.219	attackspambots	Jun 8 05:38:15 mail.srvfarm.net postfix/smtpd[671306]: warning: unknown[191.53.193.219]: SASL PLAIN authentication failed: Jun 8 05:38:16 mail.srvfarm.net postfix/smtpd[671306]: lost connection after AUTH from unknown[191.53.193.219] Jun 8 05:43:21 mail.srvfarm.net postfix/smtps/smtpd[674232]: warning: unknown[191.53.193.219]: SASL PLAIN authentication failed: Jun 8 05:43:22 mail.srvfarm.net postfix/smtps/smtpd[674232]: lost connection after AUTH from unknown[191.53.193.219] Jun 8 05:46:21 mail.srvfarm.net postfix/smtps/smtpd[672369]: warning: unknown[191.53.193.219]: SASL PLAIN authentication failed:	2020-06-08 18:23:39
202.158.49.138	attack	email spam	2020-06-08 18:33:01
89.203.144.174	attack	Jun 8 05:13:29 mail.srvfarm.net postfix/smtps/smtpd[652499]: warning: unknown[89.203.144.174]: SASL PLAIN authentication failed: Jun 8 05:13:29 mail.srvfarm.net postfix/smtps/smtpd[652499]: lost connection after AUTH from unknown[89.203.144.174] Jun 8 05:15:47 mail.srvfarm.net postfix/smtps/smtpd[652490]: warning: unknown[89.203.144.174]: SASL PLAIN authentication failed: Jun 8 05:15:47 mail.srvfarm.net postfix/smtps/smtpd[652490]: lost connection after AUTH from unknown[89.203.144.174] Jun 8 05:16:21 mail.srvfarm.net postfix/smtpd[652520]: warning: unknown[89.203.144.174]: SASL PLAIN authentication failed:	2020-06-08 18:47:00
87.101.92.28	attackbots	Multiple attempts to login to our HIK camera DVD recorder	2020-06-08 18:11:47
177.44.17.173	attack	Jun 8 05:34:22 mail.srvfarm.net postfix/smtpd[673236]: warning: unknown[177.44.17.173]: SASL PLAIN authentication failed: Jun 8 05:34:23 mail.srvfarm.net postfix/smtpd[673236]: lost connection after AUTH from unknown[177.44.17.173] Jun 8 05:39:37 mail.srvfarm.net postfix/smtps/smtpd[674232]: warning: unknown[177.44.17.173]: SASL PLAIN authentication failed: Jun 8 05:39:37 mail.srvfarm.net postfix/smtps/smtpd[674232]: lost connection after AUTH from unknown[177.44.17.173] Jun 8 05:43:44 mail.srvfarm.net postfix/smtpd[671308]: warning: unknown[177.44.17.173]: SASL PLAIN authentication failed:	2020-06-08 18:26:33
187.86.194.102	attackbotsspam	Jun 8 05:06:30 mail.srvfarm.net postfix/smtps/smtpd[652523]: warning: unknown[187.86.194.102]: SASL PLAIN authentication failed: Jun 8 05:06:30 mail.srvfarm.net postfix/smtps/smtpd[652523]: lost connection after AUTH from unknown[187.86.194.102] Jun 8 05:07:53 mail.srvfarm.net postfix/smtpd[652508]: warning: unknown[187.86.194.102]: SASL PLAIN authentication failed: Jun 8 05:07:54 mail.srvfarm.net postfix/smtpd[652508]: lost connection after AUTH from unknown[187.86.194.102] Jun 8 05:12:48 mail.srvfarm.net postfix/smtpd[669639]: warning: unknown[187.86.194.102]: SASL PLAIN authentication failed:	2020-06-08 18:37:36

最近上报的IP列表

139.251.206.163	87.129.9.72	174.141.174.101	149.173.252.130
0.43.104.17	243.64.138.84	136.88.235.46	63.45.21.86
208.60.234.39	152.79.223.45	100.244.16.195	121.52.29.189
15.229.30.84	20.161.187.118	4.43.228.247	110.143.88.35
76.197.138.116	50.163.228.193	109.162.242.177	192.241.194.186