14.231.148.104

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	Attempt to attack host OS, exploiting network vulnerabilities, on 15-10-2019 04:50:21.	2019-10-15 14:57:46

相同子网IP讨论:

IP	类型	评论内容	时间
14.231.148.235	attackspam	Jul 3 10:32:44 CT3029 sshd[21588]: Invalid user admin from 14.231.148.235 port 56972 Jul 3 10:32:44 CT3029 sshd[21588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.231.148.235 Jul 3 10:32:47 CT3029 sshd[21588]: Failed password for invalid user admin from 14.231.148.235 port 56972 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.231.148.235	2020-07-05 23:55:58
14.231.148.249	attack	2020-04-2822:44:171jTX5S-0004LU-TY\<=info@whatsup2013.chH=\(localhost\)[14.231.148.249]:48893P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3148id=00ae184b406b4149d5d066ca2dd9f3eff16874@whatsup2013.chT="Youmakemysoulhot"fordavidsharris1960@gmail.comsahil.mishra1421@gmail.com2020-04-2822:43:501jTX51-0004IE-VW\<=info@whatsup2013.chH=\(localhost\)[14.237.117.104]:52660P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3247id=ae06782b200bde2d0ef006555e8ab39fbc5649b355@whatsup2013.chT="Younodoubtknow\,Ilosthappiness"forfranksv24@gmail.commikesmobilediesel91@gmail.com2020-04-2822:46:241jTX7Y-0004bv-47\<=info@whatsup2013.chH=\(localhost\)[186.226.0.24]:42184P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3134id=2c2cd4d9d2f92cdffc02f4a7ac78416d4ea4517cd7@whatsup2013.chT="You'rehandsome"fordclay3699@gmail.comdrakefarmsjd@gmail.com2020-04-2822:44:261jTX5d-0004Mo-PI\<=info@whatsup2013.chH	2020-04-29 06:00:41
14.231.148.251	attackbots	Feb 18 14:25:34 grey postfix/smtpd\[25713\]: NOQUEUE: reject: RCPT from unknown\[14.231.148.251\]: 554 5.7.1 Service unavailable\; Client host \[14.231.148.251\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?14.231.148.251\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-18 23:15:59
14.231.148.77	attack	2020-02-0905:50:551j0eYY-00026R-5Q\<=verena@rs-solution.chH=\(localhost\)[123.21.92.131]:56494P=esmtpsaX=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:verena@rs-solution.chS=2122id=979224777CA88635E9ECA51DE99089F4@rs-solution.chT="curiositysake"forcallumceltic91@hotmail.co.uk2020-02-0905:49:491j0eXT-0001x3-Rj\<=verena@rs-solution.chH=\(localhost\)[41.41.51.202]:39077P=esmtpsaX=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:verena@rs-solution.chS=2088id=5752E4B7BC6846F5292C65DD29E58981@rs-solution.chT="Ihopeyouareadecentperson"forgems007braunk@gmail.com2020-02-0905:50:041j0eXj-0001xX-Lr\<=verena@rs-solution.chH=\(localhost\)[202.63.195.32]:47050P=esmtpsaX=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:verena@rs-solution.chS=2158id=CECB7D2E25F1DF6CB0B5FC44B0B47CE5@rs-solution.chT="Ihopeyouareadecentperson"forbobbflht0405@yahoo.com2020-02-0905:50:181j0eXx-00025g-8o\<=verena@rs-solution.chH=\(localhost\)[14.231.148.77]:49692P=esmtpsaX=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA3	2020-02-09 18:28:36

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.231.148.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10633
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.231.148.104.			IN	A

;; AUTHORITY SECTION:
.			511	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101500 1800 900 604800 86400

;; Query time: 39 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Oct 15 14:57:42 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

104.148.231.14.in-addr.arpa domain name pointer static.vnpt.vn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
104.148.231.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

IP	类型	评论内容	时间
175.202.32.78	attack	Unauthorized connection attempt detected from IP address 175.202.32.78 to port 5555	2020-07-01 13:02:46
45.148.121.43	attack	scans 2 times in preceeding hours on the ports (in chronological order) 11211 11211	2020-07-01 13:18:53
220.135.29.237	attackspam	TCP (SYN) 220.135.29.237:42052 -> port 23, len 44	2020-07-01 12:50:42
186.251.254.138	attack	Unauthorized connection attempt detected from IP address 186.251.254.138 to port 445	2020-07-01 12:54:18
220.134.237.145	attack	IP 220.134.237.145 attacked honeypot on port: 88 at 6/29/2020 8:06:52 AM	2020-07-01 13:23:04
223.29.225.43	attackspam	Unauthorized connection attempt: SRC=223.29.225.43 ...	2020-07-01 13:20:57
183.152.173.128	attackbots	Unauthorized connection attempt detected from IP address 183.152.173.128 to port 23	2020-07-01 13:10:56
220.142.174.102	attackbotsspam	TCP (SYN) 220.142.174.102:24030 -> port 23, len 44	2020-07-01 13:13:41
94.102.51.58	attackbotsspam	TCP (SYN) 94.102.51.58:43379 -> port 136, len 44	2020-07-01 12:35:23
77.89.199.166	attack	Firewall Dropped Connection	2020-07-01 12:39:51
212.56.197.250	attack	Port probing on unauthorized port 23	2020-07-01 12:42:57
111.231.54.33	attackspam	$f2bV_matches	2020-07-01 12:57:25
71.6.233.198	attack	TCP (SYN) 71.6.233.198:7547 -> port 7547, len 44	2020-07-01 13:25:49
81.214.85.207	attackspambots	Unauthorized connection attempt detected from IP address 81.214.85.207 to port 26	2020-07-01 12:58:16
110.137.177.17	attackspam	[portscan] tcp/23 [TELNET] *(RWIN=54242)(06301147)	2020-07-01 12:59:00

最近上报的IP列表

104.244.79.218	109.167.134.253	114.220.152.103	187.148.4.135
45.9.123.238	217.15.159.18	1.162.144.87	186.52.189.165
180.246.77.54	111.93.52.182	199.195.117.162	88.100.20.29
45.130.255.234	118.114.190.136	156.93.130.160	106.13.23.105
23.185.163.159	210.50.246.18	123.141.88.122	83.94.0.129