14.49.199.118 - IPInfo

基本信息:

城市(city): Jeju City

省份(region): Jeju-do

国家(country): South Korea

运营商(isp): KT Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/14.49.199.118/ KR - 1H : (18) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : KR NAME ASN : ASN4766 IP : 14.49.199.118 CIDR : 14.49.196.0/22 PREFIX COUNT : 8136 UNIQUE IP COUNT : 44725248 ATTACKS DETECTED ASN4766 : 1H - 2 3H - 3 6H - 3 12H - 5 24H - 8 DateTime : 2019-10-27 04:50:40 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-10-27 16:35:45

类型

评论内容

时间

attack

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/14.49.199.118/ 
 
 KR - 1H : (18)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : KR 
 NAME ASN : ASN4766 
 
 IP : 14.49.199.118 
 
 CIDR : 14.49.196.0/22 
 
 PREFIX COUNT : 8136 
 
 UNIQUE IP COUNT : 44725248 
 
 
 ATTACKS DETECTED ASN4766 :  
  1H - 2 
  3H - 3 
  6H - 3 
 12H - 5 
 24H - 8 
 
 DateTime : 2019-10-27 04:50:40 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

2019-10-27 16:35:45

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.49.199.118
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 32661
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.49.199.118.			IN	A

;; AUTHORITY SECTION:
.			533	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100401 1800 900 604800 86400

;; Query time: 323 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 05 02:55:28 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 118.199.49.14.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 118.199.49.14.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
91.99.29.206	attackbotsspam	3389BruteforceFW23	2020-02-02 13:59:31
45.134.179.20	attack	Type Date/Time Event Description info Feb 1 21:47:08 IN=br1 MAC=94:c1:50:cd:6f:b4 SRC=45.134.179.20 DST=XXX.XXX.XXX.XXX LEN=52 TTL=108 PROTO=TCP DPT=5900 Accessing Pinhole	2020-02-02 14:51:15
198.98.61.24	attackbots	Invalid user deployer from 198.98.61.24 port 56150	2020-02-02 14:11:22
222.186.173.226	attackbotsspam	Feb 2 00:45:07 mail sshd\[26430\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.226 user=root ...	2020-02-02 13:59:04
184.75.211.132	attackspam	0,80-00/01 [bc01/m41] PostRequest-Spammer scoring: madrid	2020-02-02 14:10:16
113.172.65.102	attackspambots	Feb 2 04:58:04 work-partkepr sshd\[32203\]: Invalid user admin from 113.172.65.102 port 59266 Feb 2 04:58:04 work-partkepr sshd\[32203\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.172.65.102 ...	2020-02-02 13:53:19
42.231.162.14	attackspambots	Feb 2 05:56:58 grey postfix/smtpd\[22281\]: NOQUEUE: reject: RCPT from unknown\[42.231.162.14\]: 554 5.7.1 Service unavailable\; Client host \[42.231.162.14\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[42.231.162.14\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-02 14:23:22
180.241.98.132	attackspambots	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-02 14:25:57
82.117.190.170	attackbots	Invalid user udadhisuta from 82.117.190.170 port 43402	2020-02-02 14:27:14
64.225.121.111	attack	RDP Bruteforce	2020-02-02 13:55:16
103.54.219.106	attack	unauthorized connection attempt	2020-02-02 15:03:42
222.127.101.155	attackspambots	Invalid user vaijayantika from 222.127.101.155 port 23776	2020-02-02 15:01:29
106.13.181.147	attack	2020-02-02T06:24:03.644813struts4.enskede.local sshd\[19244\]: Invalid user jenkins from 106.13.181.147 port 49752 2020-02-02T06:24:03.655227struts4.enskede.local sshd\[19244\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.181.147 2020-02-02T06:24:05.726748struts4.enskede.local sshd\[19244\]: Failed password for invalid user jenkins from 106.13.181.147 port 49752 ssh2 2020-02-02T06:25:46.220898struts4.enskede.local sshd\[19247\]: Invalid user ftpuser from 106.13.181.147 port 35258 2020-02-02T06:25:46.227598struts4.enskede.local sshd\[19247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.181.147 ...	2020-02-02 15:08:29
51.178.28.196	attack	2020-2-2 6:27:16 AM: failed ssh attempt	2020-02-02 14:15:39
113.31.102.157	attackspam	SSH Brute Force, server-1 sshd[22846]: Failed password for invalid user user from 113.31.102.157 port 48954 ssh2	2020-02-02 15:02:32

最近上报的IP列表

167.142.223.209	182.253.168.206	99.228.197.151	113.95.173.168
155.163.100.108	156.194.72.65	165.252.191.41	144.220.52.57
171.221.199.187	46.176.8.153	171.82.67.29	105.169.172.23
92.108.165.182	60.248.50.41	54.224.142.109	144.206.251.131
58.18.165.4	148.136.170.142	80.170.56.226	99.61.109.134