14.231.219.118

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Sep 26 23:18:07 vpn01 sshd[12459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.231.219.118 Sep 26 23:18:09 vpn01 sshd[12459]: Failed password for invalid user admin from 14.231.219.118 port 58487 ssh2 ...	2019-09-27 09:27:43

类型

评论内容

时间

attack

Sep 26 23:18:07 vpn01 sshd[12459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.231.219.118
Sep 26 23:18:09 vpn01 sshd[12459]: Failed password for invalid user admin from 14.231.219.118 port 58487 ssh2
...

2019-09-27 09:27:43

相同子网IP讨论:

IP	类型	评论内容	时间
14.231.219.93	attackbots	Attempt to attack host OS, exploiting network vulnerabilities, on 26-03-2020 03:50:15.	2020-03-26 18:44:01
14.231.219.97	attack	Sun, 21 Jul 2019 07:35:14 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 01:37:13

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.231.219.118
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 57428
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.231.219.118.			IN	A

;; AUTHORITY SECTION:
.			557	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019092603 1800 900 604800 86400

;; Query time: 219 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Sep 27 09:27:38 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

118.219.231.14.in-addr.arpa domain name pointer static.vnpt.vn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
118.219.231.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
210.5.155.142	attackbots	Sep 10 22:03:26 lnxweb62 sshd[6420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.5.155.142 Sep 10 22:03:27 lnxweb62 sshd[6420]: Failed password for invalid user admin from 210.5.155.142 port 60913 ssh2 Sep 10 22:03:32 lnxweb62 sshd[6455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.5.155.142	2020-09-11 07:41:59
185.220.101.134	attackbots	2020-09-10 17:32:18.291418-0500 localhost sshd[40294]: Failed password for root from 185.220.101.134 port 9494 ssh2	2020-09-11 07:43:56
140.143.228.227	attackbotsspam	SSH Invalid Login	2020-09-11 07:41:16
82.64.32.76	attackbotsspam	Sep 10 21:07:03 ip106 sshd[18013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.64.32.76 Sep 10 21:07:05 ip106 sshd[18013]: Failed password for invalid user shen from 82.64.32.76 port 53746 ssh2 ...	2020-09-11 07:21:20
58.246.88.84	attackspam	2020-09-10T18:55[Censored Hostname] sshd[9999]: Failed password for invalid user pi from 58.246.88.84 port 42620 ssh2 2020-09-10T18:55[Censored Hostname] sshd[10001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.246.88.84 user=root 2020-09-10T18:55[Censored Hostname] sshd[10001]: Failed password for root from 58.246.88.84 port 6324 ssh2[...]	2020-09-11 07:31:22
203.212.228.130	attack	Port Scan detected! ...	2020-09-11 07:49:11
49.233.128.229	attackspam	prod6 ...	2020-09-11 07:38:19
211.199.41.233	attackspambots	Sep 11 01:05:48 vps639187 sshd\[28432\]: Invalid user cablecom from 211.199.41.233 port 49482 Sep 11 01:05:48 vps639187 sshd\[28432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.199.41.233 Sep 11 01:05:50 vps639187 sshd\[28432\]: Failed password for invalid user cablecom from 211.199.41.233 port 49482 ssh2 ...	2020-09-11 07:28:19
61.244.70.248	attackbotsspam	61.244.70.248 - - [11/Sep/2020:00:30:50 +0100] "POST /wp-login.php HTTP/1.1" 200 1874 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 61.244.70.248 - - [11/Sep/2020:00:30:52 +0100] "POST /wp-login.php HTTP/1.1" 200 1858 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 61.244.70.248 - - [11/Sep/2020:00:30:53 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-11 07:58:31
175.206.43.79	attackbotsspam	Sep 10 18:55:45 db sshd[26783]: User root from 175.206.43.79 not allowed because none of user's groups are listed in AllowGroups ...	2020-09-11 07:32:50
27.4.169.85	attackspambots	Icarus honeypot on github	2020-09-11 07:24:56
80.82.70.214	attack	Sep 11 02:11:31 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=80.82.70.214, lip=212.111.212.230, session=\<0UEYsP2ucq5QUkbW\> Sep 11 02:12:49 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=80.82.70.214, lip=212.111.212.230, session=\ Sep 11 02:15:44 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=80.82.70.214, lip=212.111.212.230, session=\ Sep 11 02:17:15 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 4 secs\): user=\, method=PLAIN, rip=80.82.70.214, lip=212.111.212.230, session=\ Sep 11 02:20:30 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=80.82.70.214, lip=212.1 ...	2020-09-11 07:23:52
178.159.127.5	attackbotsspam	20/9/10@12:55:18: FAIL: Alarm-Network address from=178.159.127.5 ...	2020-09-11 07:53:38
121.181.222.12	attackbotsspam	Sep 10 18:55:46 andromeda sshd\[5746\]: Invalid user nagios from 121.181.222.12 port 58770 Sep 10 18:55:47 andromeda sshd\[5746\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.181.222.12 Sep 10 18:55:48 andromeda sshd\[5746\]: Failed password for invalid user nagios from 121.181.222.12 port 58770 ssh2	2020-09-11 07:29:45
71.6.146.130	attackspam	22/tcp 179/tcp 5025/tcp... [2020-07-12/09-10]152pkt,104pt.(tcp),21pt.(udp)	2020-09-11 07:25:58

最近上报的IP列表

81.46.226.80	35.202.213.9	185.156.177.197	188.155.209.146
170.0.7.210	170.84.182.26	46.242.15.80	172.94.53.141
116.203.22.161	187.58.139.189	173.249.15.49	221.214.201.225
115.249.92.88	200.24.238.107	180.254.183.21	250.140.180.168
213.0.236.161	0.56.120.52	163.204.107.118	188.128.43.28