14.236.21.199 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Automatic report - Port Scan Attack	2019-07-25 11:52:38

相同子网IP讨论:

IP	类型	评论内容	时间
14.236.216.99	attackspambots	Unauthorized connection attempt from IP address 14.236.216.99 on Port 445(SMB)	2020-04-01 01:17:17
14.236.21.167	attack	Mar 12 04:50:36 ns381471 sshd[3520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.236.21.167 Mar 12 04:50:38 ns381471 sshd[3520]: Failed password for invalid user 888888 from 14.236.21.167 port 49745 ssh2	2020-03-12 16:35:17
14.236.213.235	attackspam	Attempt to attack host OS, exploiting network vulnerabilities, on 19-02-2020 13:35:14.	2020-02-20 01:16:26

类型

评论内容

时间

14.236.216.99

attackspambots

Unauthorized connection attempt from IP address 14.236.216.99 on Port 445(SMB)

2020-04-01 01:17:17

14.236.21.167

attack

Mar 12 04:50:36 ns381471 sshd[3520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.236.21.167
Mar 12 04:50:38 ns381471 sshd[3520]: Failed password for invalid user 888888 from 14.236.21.167 port 49745 ssh2

2020-03-12 16:35:17

14.236.213.235

attackspam

Attempt to attack host OS, exploiting network vulnerabilities, on 19-02-2020 13:35:14.

2020-02-20 01:16:26

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.236.21.199
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5302
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.236.21.199.			IN	A

;; AUTHORITY SECTION:
.			2583	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072401 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 25 11:52:32 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

199.21.236.14.in-addr.arpa domain name pointer static.vnpt.vn.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
199.21.236.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
35.226.165.144	attackbots	Invalid user disasterbot from 35.226.165.144 port 60218	2020-03-14 08:44:17
149.56.20.226	attack	149.56.20.226 - - \[13/Mar/2020:23:04:11 +0100\] "POST /wp-login.php HTTP/1.0" 200 6666 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 149.56.20.226 - - \[13/Mar/2020:23:04:14 +0100\] "POST /wp-login.php HTTP/1.0" 200 6664 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 149.56.20.226 - - \[13/Mar/2020:23:04:15 +0100\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-03-14 08:43:16
77.6.169.189	attack	Mar 13 22:13:04 OPSO sshd\[29195\]: Invalid user pi from 77.6.169.189 port 49458 Mar 13 22:13:04 OPSO sshd\[29196\]: Invalid user pi from 77.6.169.189 port 49464 Mar 13 22:13:04 OPSO sshd\[29195\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.6.169.189 Mar 13 22:13:04 OPSO sshd\[29196\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.6.169.189 Mar 13 22:13:06 OPSO sshd\[29195\]: Failed password for invalid user pi from 77.6.169.189 port 49458 ssh2 Mar 13 22:13:06 OPSO sshd\[29196\]: Failed password for invalid user pi from 77.6.169.189 port 49464 ssh2	2020-03-14 08:53:04
106.12.93.25	attackspambots	SSH brute force	2020-03-14 09:23:00
188.235.149.201	attack	1584133959 - 03/14/2020 04:12:39 Host: 188x235x149x201.static-business.saratov.ertelecom.ru/188.235.149.201 Port: 23 TCP Blocked ...	2020-03-14 09:06:25
123.136.115.111	attack	2020-03-13 22:09:52 H=\(\[123.136.115.111\]\) \[123.136.115.111\]:7511 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2020-03-13 22:12:33 H=\(\[123.136.115.111\]\) \[123.136.115.111\]:7269 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2020-03-13 22:13:27 H=\(\[123.136.115.111\]\) \[123.136.115.111\]:19699 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-03-14 08:41:39
173.201.145.109	attackspambots	[portscan] Port scan	2020-03-14 09:21:57
213.166.135.202	attack	2020-03-13 22:11:35 H=\(\[213.166.135.202\]\) \[213.166.135.202\]:42411 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2020-03-13 22:12:13 H=\(\[213.166.135.202\]\) \[213.166.135.202\]:45777 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2020-03-13 22:12:41 H=\(\[213.166.135.202\]\) \[213.166.135.202\]:43049 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-03-14 09:12:55
178.16.94.104	attackbots	03/13/2020-17:13:23.794540 178.16.94.104 Protocol: 6 ET DROP Spamhaus DROP Listed Traffic Inbound group 18	2020-03-14 08:45:25
122.228.19.79	attackbots	122.228.19.79 was recorded 19 times by 5 hosts attempting to connect to the following ports: 2002,6666,113,7548,1194,64738,9943,5632,1521,1701,6664,8004,3299,50000,40001,9001,623,69. Incident counter (4h, 24h, all-time): 19, 82, 16013	2020-03-14 09:05:19
185.175.93.3	attackbots	ET DROP Dshield Block Listed Source group 1 - port: 51091 proto: TCP cat: Misc Attack	2020-03-14 09:14:06
201.245.169.153	attackbotsspam	2020-03-13 22:12:16 H=static-201-245-169-153.static.etb.net.co \[201.245.169.153\]:20565 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2020-03-13 22:12:39 H=static-201-245-169-153.static.etb.net.co \[201.245.169.153\]:20770 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2020-03-13 22:12:56 H=static-201-245-169-153.static.etb.net.co \[201.245.169.153\]:20937 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-03-14 09:00:45
92.240.204.214	attackbotsspam	Chat Spam	2020-03-14 09:17:09
179.180.46.45	attack	Automatic report - Port Scan Attack	2020-03-14 09:19:32
194.150.15.70	attack	SSH auth scanning - multiple failed logins	2020-03-14 08:39:36

最近上报的IP列表

115.108.94.11	192.32.212.211	111.239.252.182	79.229.96.79
107.34.0.30	88.72.142.73	17.137.135.123	136.212.84.233
146.92.69.229	77.28.99.94	27.140.221.48	104.19.95.116
246.159.188.204	148.44.61.89	114.154.104.53	190.228.21.74
95.169.183.158	211.51.76.18	157.230.255.181	38.57.17.228