179.52.254.14 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Dominican Republic

运营商(isp): Compania Dominicana de Telefonos S. A.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Attempted connection to port 445.	2020-08-02 19:37:01

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 179.52.254.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30615
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;179.52.254.14.			IN	A

;; AUTHORITY SECTION:
.			491	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020080200 1800 900 604800 86400

;; Query time: 64 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Aug 02 19:36:57 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

14.254.52.179.in-addr.arpa domain name pointer 14.254.52.179.d.dyn.claro.net.do.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
14.254.52.179.in-addr.arpa	name = 14.254.52.179.d.dyn.claro.net.do.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
207.46.13.43	attack	Automatic report - Banned IP Access	2019-08-08 04:08:54
14.162.145.16	attack	Aug 7 19:43:17 lnxded63 sshd[11331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.162.145.16	2019-08-08 03:37:17
81.45.139.249	attackspambots	Aug 6 23:56:34 srv1 sshd[25677]: Invalid user staff from 81.45.139.249 Aug 6 23:56:37 srv1 sshd[25677]: Failed password for invalid user staff from 81.45.139.249 port 38780 ssh2 Aug 6 23:56:37 srv1 sshd[25677]: Received disconnect from 81.45.139.249: 11: Bye Bye [preauth] Aug 7 00:09:19 srv1 sshd[28636]: Failed password for r.r from 81.45.139.249 port 34792 ssh2 Aug 7 00:09:19 srv1 sshd[28636]: Received disconnect from 81.45.139.249: 11: Bye Bye [preauth] Aug 7 00:14:24 srv1 sshd[30169]: Invalid user radio from 81.45.139.249 Aug 7 00:14:26 srv1 sshd[30169]: Failed password for invalid user radio from 81.45.139.249 port 62837 ssh2 Aug 7 00:14:26 srv1 sshd[30169]: Received disconnect from 81.45.139.249: 11: Bye Bye [preauth] Aug 7 00:18:58 srv1 sshd[30951]: Invalid user desktop from 81.45.139.249 Aug 7 00:19:00 srv1 sshd[30951]: Failed password for invalid user desktop from 81.45.139.249 port 57496 ssh2 Aug 7 00:19:00 srv1 sshd[30951]: Received disconnect from ........ -------------------------------	2019-08-08 03:57:58
148.70.212.241	attackspambots	Plus code sniffing: 148.70.212.241 - - [05/Aug/2019:04:08:13 +0100] "POST //plus/90sec.php HTTP/1.1" 404 584 "http://[domain]//plus/90sec.php" "Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1)"	2019-08-08 04:16:35
217.61.20.209	attack	Scanning random ports - tries to find possible vulnerable services	2019-08-08 03:44:40
80.134.28.127	attackspambots	\[2019-08-07 21:41:45\] NOTICE\[32542\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '80.134.28.127:5060' \(callid: 5C45BBA28991ADD7@80.134.28.127\) - Failed to authenticate \[2019-08-07 21:41:45\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-08-07T21:41:45.517+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="sip219222",SessionID="5C45BBA28991ADD7@80.134.28.127",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/80.134.28.127/5060",Challenge="1565205105/a0ae79e729103e7fa4110ef39512777c",Response="cc28d240e22551882b3da0981bb98f9d",ExpectedResponse="" \[2019-08-07 21:41:45\] NOTICE\[26038\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '80.134.28.127:5060' \(callid: 5C45BBA28991ADD7@80.134.28.127\) - Failed to authenticate \[2019-08-07 21:41:45\] SECURITY\[1715\] res_security_log.c: SecurityE	2019-08-08 04:23:36
23.129.64.185	attackbotsspam	[Aegis] @ 2019-08-07 20:34:47 0100 -> Maximum authentication attempts exceeded.	2019-08-08 04:03:57
111.202.106.145	attackbots	Automated report - ssh fail2ban: Aug 7 21:53:10 authentication failure Aug 7 21:53:12 wrong password, user=user, port=48684, ssh2 Aug 7 21:56:37 authentication failure	2019-08-08 04:19:41
175.23.227.5	attackbots	Aug 7 17:42:07 DDOS Attack: SRC=175.23.227.5 DST=[Masked] LEN=40 TOS=0x00 PREC=0x00 TTL=48 DF PROTO=TCP SPT=53603 DPT=80 WINDOW=0 RES=0x00 RST URGP=0	2019-08-08 04:06:44
134.73.161.243	attack	Aug 7 20:39:00 localhost sshd\[32401\]: Invalid user shoutcast from 134.73.161.243 port 55386 Aug 7 20:39:00 localhost sshd\[32401\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.161.243 Aug 7 20:39:02 localhost sshd\[32401\]: Failed password for invalid user shoutcast from 134.73.161.243 port 55386 ssh2	2019-08-08 04:17:38
202.138.248.62	attackbotsspam	Brute force attempt	2019-08-08 04:09:46
47.88.240.24	attackbots	Automatic report - Port Scan Attack	2019-08-08 03:57:42
122.70.153.229	attackspam	Automatic report - Banned IP Access	2019-08-08 03:47:15
188.120.236.44	attack	DATE:2019-08-07 20:44:12, IP:188.120.236.44, PORT:5900 VNC brute force auth on honeypot server (honey-neo-dc)	2019-08-08 03:45:27
216.218.206.72	attackbotsspam	Portscan or hack attempt detected by psad/fwsnort	2019-08-08 03:45:09

最近上报的IP列表

27.223.78.162	117.187.159.54	141.85.45.197	108.221.68.47
103.254.16.196	27.65.103.143	54.225.95.242	156.209.54.52
33.223.155.3	85.198.207.190	115.152.243.179	5.209.238.65
106.55.13.61	170.233.51.190	117.5.154.111	112.168.247.166
192.187.108.250	5.41.187.22	182.184.59.87	179.57.167.113