14.231.11.91 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Unauthorized connection attempt from IP address 14.231.11.91 on Port 445(SMB)	2020-05-26 19:58:39

相同子网IP讨论:

IP	类型	评论内容	时间
14.231.117.71	attackbotsspam	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2020-09-07 20:41:51
14.231.117.71	attackspambots	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2020-09-07 12:25:22
14.231.117.71	attackbotsspam	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2020-09-07 05:08:50
14.231.113.123	attackbotsspam	$f2bV_matches	2020-06-04 17:07:02
14.231.119.238	attackbotsspam	Unauthorized connection attempt from IP address 14.231.119.238 on Port 445(SMB)	2020-04-16 20:01:56
14.231.119.238	attack	Unauthorized connection attempt from IP address 14.231.119.238 on Port 445(SMB)	2020-04-14 19:20:55
14.231.111.153	attackbots	Attempt to attack host OS, exploiting network vulnerabilities, on 18-12-2019 06:25:12.	2019-12-18 20:56:20
14.231.117.37	attack	Unauthorized connection attempt from IP address 14.231.117.37 on Port 445(SMB)	2019-07-09 12:31:24

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.231.11.91
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10726
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.231.11.91.			IN	A

;; AUTHORITY SECTION:
.			353	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020052600 1800 900 604800 86400

;; Query time: 110 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue May 26 19:58:32 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

91.11.231.14.in-addr.arpa domain name pointer static.vnpt.vn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
91.11.231.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
189.79.100.98	attackbotsspam	Dec 22 01:29:57 plusreed sshd[2319]: Invalid user geniuz from 189.79.100.98 ...	2019-12-22 15:00:43
81.28.100.140	attack	Dec 22 07:29:53 exim[15746]: [1\49] 1iiukS-00045y-2J H=lot.shrewdmhealth.com (lot.varzide.co) [81.28.100.140] F= rejected after DATA: This message scored 102.1 spam points.	2019-12-22 15:19:06
140.143.134.86	attackbotsspam	Dec 21 22:30:06 mockhub sshd[19106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.134.86 Dec 21 22:30:08 mockhub sshd[19106]: Failed password for invalid user hoghton from 140.143.134.86 port 49043 ssh2 ...	2019-12-22 15:04:48
112.172.147.34	attack	Dec 21 20:24:36 kapalua sshd\[9908\]: Invalid user larkin from 112.172.147.34 Dec 21 20:24:36 kapalua sshd\[9908\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.172.147.34 Dec 21 20:24:38 kapalua sshd\[9908\]: Failed password for invalid user larkin from 112.172.147.34 port 25754 ssh2 Dec 21 20:30:28 kapalua sshd\[10424\]: Invalid user hugh from 112.172.147.34 Dec 21 20:30:28 kapalua sshd\[10424\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.172.147.34	2019-12-22 14:50:15
37.49.231.157	attackbots	Portscan or hack attempt detected by psad/fwsnort	2019-12-22 14:55:06
46.38.144.179	attackspambots	Dec 22 07:56:57 relay postfix/smtpd\[29531\]: warning: unknown\[46.38.144.179\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 22 07:57:46 relay postfix/smtpd\[10866\]: warning: unknown\[46.38.144.179\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 22 08:00:07 relay postfix/smtpd\[16408\]: warning: unknown\[46.38.144.179\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 22 08:00:57 relay postfix/smtpd\[7051\]: warning: unknown\[46.38.144.179\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Dec 22 08:03:28 relay postfix/smtpd\[16408\]: warning: unknown\[46.38.144.179\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-12-22 15:15:32
85.38.164.51	attack	Dec 22 07:13:47 root sshd[21465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.38.164.51 Dec 22 07:13:48 root sshd[21465]: Failed password for invalid user epos from 85.38.164.51 port 41338 ssh2 Dec 22 07:30:30 root sshd[21660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.38.164.51 ...	2019-12-22 14:53:34
41.43.91.101	attackbotsspam	wget call in url	2019-12-22 14:29:59
197.248.16.118	attack	Dec 22 07:24:01 ns381471 sshd[14365]: Failed password for root from 197.248.16.118 port 60462 ssh2	2019-12-22 14:43:54
112.120.190.180	attackbotsspam	Dec 22 07:28:03 srv01 sshd[32197]: Invalid user admin from 112.120.190.180 port 40546 Dec 22 07:28:03 srv01 sshd[32197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.120.190.180 Dec 22 07:28:03 srv01 sshd[32197]: Invalid user admin from 112.120.190.180 port 40546 Dec 22 07:28:05 srv01 sshd[32197]: Failed password for invalid user admin from 112.120.190.180 port 40546 ssh2 Dec 22 07:30:24 srv01 sshd[32414]: Invalid user ubuntu from 112.120.190.180 port 41112 ...	2019-12-22 14:50:52
176.31.217.184	attack	Dec 21 20:25:14 web9 sshd\[12638\]: Invalid user test666 from 176.31.217.184 Dec 21 20:25:14 web9 sshd\[12638\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.217.184 Dec 21 20:25:16 web9 sshd\[12638\]: Failed password for invalid user test666 from 176.31.217.184 port 48612 ssh2 Dec 21 20:30:18 web9 sshd\[13459\]: Invalid user test1test from 176.31.217.184 Dec 21 20:30:18 web9 sshd\[13459\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.217.184	2019-12-22 14:46:50
40.121.39.27	attack	Dec 22 08:01:50 sd-53420 sshd\[13389\]: Invalid user btftp from 40.121.39.27 Dec 22 08:01:50 sd-53420 sshd\[13389\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.121.39.27 Dec 22 08:01:51 sd-53420 sshd\[13389\]: Failed password for invalid user btftp from 40.121.39.27 port 35260 ssh2 Dec 22 08:08:05 sd-53420 sshd\[15579\]: Invalid user nc from 40.121.39.27 Dec 22 08:08:05 sd-53420 sshd\[15579\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.121.39.27 ...	2019-12-22 15:16:24
51.75.31.33	attackspam	Dec 21 21:04:12 php1 sshd\[15211\]: Invalid user abc from 51.75.31.33 Dec 21 21:04:12 php1 sshd\[15211\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=33.ip-51-75-31.eu Dec 21 21:04:14 php1 sshd\[15211\]: Failed password for invalid user abc from 51.75.31.33 port 47678 ssh2 Dec 21 21:11:11 php1 sshd\[16466\]: Invalid user cloteal from 51.75.31.33 Dec 21 21:11:11 php1 sshd\[16466\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=33.ip-51-75-31.eu	2019-12-22 15:15:02
222.186.180.17	attack	Dec 22 09:52:44 server sshd\[3877\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17 user=root Dec 22 09:52:46 server sshd\[3877\]: Failed password for root from 222.186.180.17 port 11272 ssh2 Dec 22 09:52:50 server sshd\[3877\]: Failed password for root from 222.186.180.17 port 11272 ssh2 Dec 22 09:52:53 server sshd\[3877\]: Failed password for root from 222.186.180.17 port 11272 ssh2 Dec 22 09:52:57 server sshd\[3877\]: Failed password for root from 222.186.180.17 port 11272 ssh2 ...	2019-12-22 14:57:16
82.7.11.64	attackspam	Dec 22 06:14:09 server sshd\[9177\]: Invalid user kuni from 82.7.11.64 Dec 22 06:14:09 server sshd\[9177\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpc146294-brig23-2-0-cust831.3-3.cable.virginm.net Dec 22 06:14:10 server sshd\[9177\]: Failed password for invalid user kuni from 82.7.11.64 port 32974 ssh2 Dec 22 09:30:09 server sshd\[29473\]: Invalid user bilodeau from 82.7.11.64 Dec 22 09:30:09 server sshd\[29473\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpc146294-brig23-2-0-cust831.3-3.cable.virginm.net ...	2019-12-22 15:12:37

最近上报的IP列表

59.144.158.82	121.108.39.181	197.126.53.55	8.76.139.153
171.235.191.253	77.198.60.46	128.108.17.90	238.181.102.111
158.126.50.248	233.34.252.155	14.169.40.240	111.248.70.93
46.133.142.61	202.115.196.39	115.58.193.136	42.99.36.215
230.30.83.75	243.108.143.153	51.35.24.96	16.163.144.13