14.234.11.97 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Unauthorized connection attempt from IP address 14.234.11.97 on Port 445(SMB)	2020-03-08 00:18:02
attackspam	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2020-02-28 13:04:29

相同子网IP讨论:

IP	类型	评论内容	时间
14.234.112.152	attack	Automatic report - Port Scan Attack	2020-03-09 20:55:35
14.234.112.32	attackbots	Attempt to attack host OS, exploiting network vulnerabilities, on 26-11-2019 06:25:37.	2019-11-26 18:17:40
14.234.115.75	attackspambots	Unauthorized connection attempt from IP address 14.234.115.75 on Port 445(SMB)	2019-07-07 00:13:03

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.234.11.97
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56244
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.234.11.97.			IN	A

;; AUTHORITY SECTION:
.			332	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022701 1800 900 604800 86400

;; Query time: 118 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 28 13:04:24 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

97.11.234.14.in-addr.arpa domain name pointer static.vnpt.vn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
97.11.234.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
45.138.72.253	attackspambots	Postfix SASL Login attempt. IP autobanned	2020-08-27 02:54:06
109.48.97.80	attackbotsspam	Aug 26 14:34:29 server postfix/smtpd[26653]: NOQUEUE: reject: RCPT from a109-48-97-80.cpe.netcabo.pt[109.48.97.80]: 554 5.7.1 Service unavailable; Client host [109.48.97.80] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/109.48.97.80; from= to= proto=ESMTP helo=	2020-08-27 03:09:31
111.231.33.135	attackspambots	SSH login attempts.	2020-08-27 03:10:47
36.57.64.185	attackbotsspam	Aug 26 15:25:50 srv01 postfix/smtpd\[30927\]: warning: unknown\[36.57.64.185\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 26 15:26:32 srv01 postfix/smtpd\[30927\]: warning: unknown\[36.57.64.185\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 26 15:29:09 srv01 postfix/smtpd\[30280\]: warning: unknown\[36.57.64.185\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 26 15:29:26 srv01 postfix/smtpd\[30280\]: warning: unknown\[36.57.64.185\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 26 15:29:46 srv01 postfix/smtpd\[30280\]: warning: unknown\[36.57.64.185\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-08-27 02:54:37
167.172.117.26	attack	SSH auth scanning - multiple failed logins	2020-08-27 03:22:02
36.111.182.49	attack	Failed password for invalid user t from 36.111.182.49 port 33154 ssh2	2020-08-27 02:46:21
76.164.201.54	attackbotsspam	20/8/26@08:34:08: FAIL: Alarm-Intrusion address from=76.164.201.54 ...	2020-08-27 03:22:25
45.129.33.47	attackbots	ET DROP Dshield Block Listed Source group 1 - port: 12553 proto: tcp cat: Misc Attackbytes: 60	2020-08-27 02:51:18
152.136.220.127	attackbots	Aug 26 20:19:13 ns382633 sshd\[21957\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.220.127 user=root Aug 26 20:19:15 ns382633 sshd\[21957\]: Failed password for root from 152.136.220.127 port 44694 ssh2 Aug 26 20:24:37 ns382633 sshd\[22780\]: Invalid user xing from 152.136.220.127 port 55230 Aug 26 20:24:37 ns382633 sshd\[22780\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.220.127 Aug 26 20:24:39 ns382633 sshd\[22780\]: Failed password for invalid user xing from 152.136.220.127 port 55230 ssh2	2020-08-27 02:55:56
209.97.190.69	attack	Aug 26 17:51:17 scw-6657dc sshd[18419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.190.69 Aug 26 17:51:17 scw-6657dc sshd[18419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.190.69 Aug 26 17:51:20 scw-6657dc sshd[18419]: Failed password for invalid user etq from 209.97.190.69 port 49286 ssh2 ...	2020-08-27 03:03:15
49.233.80.20	attackbots	Aug 26 20:02:32 ns308116 sshd[13948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.80.20 user=admin Aug 26 20:02:34 ns308116 sshd[13948]: Failed password for admin from 49.233.80.20 port 59282 ssh2 Aug 26 20:05:57 ns308116 sshd[18291]: Invalid user kpa from 49.233.80.20 port 56032 Aug 26 20:05:57 ns308116 sshd[18291]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.80.20 Aug 26 20:05:59 ns308116 sshd[18291]: Failed password for invalid user kpa from 49.233.80.20 port 56032 ssh2 ...	2020-08-27 03:13:46
140.143.39.177	attackspambots	Aug 26 20:09:13 ip106 sshd[15649]: Failed password for root from 140.143.39.177 port 26646 ssh2 Aug 26 20:11:59 ip106 sshd[15748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.39.177 ...	2020-08-27 03:05:26
128.199.182.19	attackbots	Aug 26 11:59:11 dignus sshd[13163]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.182.19 Aug 26 11:59:12 dignus sshd[13163]: Failed password for invalid user test from 128.199.182.19 port 57138 ssh2 Aug 26 12:03:07 dignus sshd[13692]: Invalid user dinesh from 128.199.182.19 port 36532 Aug 26 12:03:07 dignus sshd[13692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.182.19 Aug 26 12:03:10 dignus sshd[13692]: Failed password for invalid user dinesh from 128.199.182.19 port 36532 ssh2 ...	2020-08-27 03:05:56
188.166.150.254	attackspam	Aug 26 16:36:16 marvibiene sshd[20587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.150.254 Aug 26 16:36:17 marvibiene sshd[20587]: Failed password for invalid user purple from 188.166.150.254 port 56432 ssh2 Aug 26 16:40:12 marvibiene sshd[20909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.166.150.254	2020-08-27 02:59:06
24.230.41.86	attack	Brute forcing email accounts	2020-08-27 02:52:04

最近上报的IP列表

119.160.69.76	185.217.1.242	85.209.3.205	218.147.221.223
182.53.2.65	217.197.242.40	180.242.222.113	183.88.144.7
202.53.146.6	41.248.136.182	106.215.38.220	106.12.192.201
190.177.81.36	212.92.244.53	45.95.32.253	212.95.137.183
181.226.24.76	165.227.7.157	47.199.166.119	116.212.183.148