31.14.40.131 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Romania

运营商(isp): Data Room SRL

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Host Scan	2019-12-11 19:39:38

相同子网IP讨论:

IP	类型	评论内容	时间
31.14.40.111	attackspambots	123/udp [2020-05-30]1pkt	2020-05-30 14:56:34
31.14.40.194	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 14 - port: 389 proto: UDP cat: Misc Attack	2020-03-28 18:59:32
31.14.40.172	attack	unauthorized connection attempt	2020-02-16 15:47:28
31.14.40.172	attackspambots	Unauthorized connection attempt from IP address 31.14.40.172 on Port 445(SMB)	2020-02-15 05:01:38
31.14.40.200	attack	CloudCIX Reconnaissance Scan Detected, PTR: academicabelch.net.	2020-01-12 07:15:36
31.14.40.216	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2019-12-25 08:39:03
31.14.40.216	attackbotsspam	Dec 24 08:17:48 debian-2gb-nbg1-2 kernel: \[824609.841104\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=31.14.40.216 DST=195.201.40.59 LEN=45 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=UDP SPT=41043 DPT=53413 LEN=25	2019-12-24 18:13:37
31.14.40.226	attack	3478/udp 389/udp... [2019-12-19/23]6pkt,2pt.(udp)	2019-12-24 06:33:14
31.14.40.232	attackspambots	Excessive Port-Scanning	2019-12-01 07:40:26
31.14.40.232	attack	Malicious brute force vulnerability hacking attacks	2019-10-13 04:16:51
31.14.40.157	attackspambots	Unauthorized connection attempt from IP address 31.14.40.157 on Port 445(SMB)	2019-10-12 06:30:26

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 31.14.40.131
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29928
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;31.14.40.131.			IN	A

;; AUTHORITY SECTION:
.			387	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121100 1800 900 604800 86400

;; Query time: 104 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Dec 11 19:39:34 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 131.40.14.31.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 131.40.14.31.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
104.248.246.4	attackspam	no	2020-07-04 11:18:42
141.98.81.208	attackspambots	SSH Brute-Force attacks	2020-07-04 11:23:18
42.116.148.235	attackbotsspam	1593818105 - 07/04/2020 01:15:05 Host: 42.116.148.235/42.116.148.235 Port: 445 TCP Blocked	2020-07-04 10:56:03
37.150.116.106	attackspambots	Honeypot attack, port: 5555, PTR: 37.150.116.106.megaline.telecom.kz.	2020-07-04 11:16:48
54.38.139.210	attack	2020-07-04T05:10:17.765600ks3355764 sshd[6889]: Invalid user xuyf from 54.38.139.210 port 54740 2020-07-04T05:10:19.589490ks3355764 sshd[6889]: Failed password for invalid user xuyf from 54.38.139.210 port 54740 ssh2 ...	2020-07-04 11:15:18
51.144.73.114	attackspam	diesunddas.net 51.144.73.114 [04/Jul/2020:04:22:08 +0200] "POST /wp-login.php HTTP/1.1" 200 8449 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" diesunddas.net 51.144.73.114 [04/Jul/2020:04:22:08 +0200] "POST /wp-login.php HTTP/1.1" 200 8449 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-07-04 11:01:03
36.46.142.80	attackbotsspam	Scanned 3 times in the last 24 hours on port 22	2020-07-04 10:47:15
89.155.39.33	attackbotsspam	20 attempts against mh-ssh on float	2020-07-04 11:27:22
182.61.1.31	attackbots	Jul 4 03:34:22 vpn01 sshd[1681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.1.31 Jul 4 03:34:24 vpn01 sshd[1681]: Failed password for invalid user ubuntu from 182.61.1.31 port 56728 ssh2 ...	2020-07-04 11:25:39
104.168.171.163	attackbotsspam	detected by Fail2Ban	2020-07-04 11:06:28
45.141.84.110	attack	Jul 4 04:56:32 debian-2gb-nbg1-2 kernel: \[16090013.058180\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.141.84.110 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=41821 PROTO=TCP SPT=55780 DPT=8243 WINDOW=1024 RES=0x00 SYN URGP=0	2020-07-04 10:58:24
198.181.45.215	attackspambots	(sshd) Failed SSH login from 198.181.45.215 (US/United States/198.181.45.215.16clouds.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 4 00:58:05 amsweb01 sshd[6013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.181.45.215 user=root Jul 4 00:58:07 amsweb01 sshd[6013]: Failed password for root from 198.181.45.215 port 48988 ssh2 Jul 4 01:08:11 amsweb01 sshd[7950]: Invalid user jh from 198.181.45.215 port 54676 Jul 4 01:08:13 amsweb01 sshd[7950]: Failed password for invalid user jh from 198.181.45.215 port 54676 ssh2 Jul 4 01:14:55 amsweb01 sshd[9164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.181.45.215 user=root	2020-07-04 11:02:54
49.213.186.136	attackspambots	From CCTV User Interface Log ...::ffff:49.213.186.136 - - [03/Jul/2020:19:14:37 +0000] "GET / HTTP/1.1" 200 960 ...	2020-07-04 11:21:40
195.154.184.196	attackspam	SSH Brute-Force reported by Fail2Ban	2020-07-04 11:04:50
37.49.224.224	attackbotsspam	TCP (SYN) 37.49.224.224:33467 -> port 22, len 40	2020-07-04 10:48:11

最近上报的IP列表

183.88.226.176	192.227.144.220	40.77.167.16	200.194.11.205
177.128.78.143	131.216.162.173	14.232.40.110	190.37.192.245
113.2.171.5	106.13.57.216	220.191.237.44	113.170.22.253
58.84.21.136	202.61.85.33	170.81.56.114	1.4.198.252
121.7.25.238	61.7.147.107	61.133.7.239	137.226.113.56