31.14.40.226 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Romania

运营商(isp): Data Room SRL

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	3478/udp 389/udp... [2019-12-19/23]6pkt,2pt.(udp)	2019-12-24 06:33:14

相同子网IP讨论:

IP	类型	评论内容	时间
31.14.40.111	attackspambots	123/udp [2020-05-30]1pkt	2020-05-30 14:56:34
31.14.40.194	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 14 - port: 389 proto: UDP cat: Misc Attack	2020-03-28 18:59:32
31.14.40.172	attack	unauthorized connection attempt	2020-02-16 15:47:28
31.14.40.172	attackspambots	Unauthorized connection attempt from IP address 31.14.40.172 on Port 445(SMB)	2020-02-15 05:01:38
31.14.40.200	attack	CloudCIX Reconnaissance Scan Detected, PTR: academicabelch.net.	2020-01-12 07:15:36
31.14.40.216	attackspambots	MultiHost/MultiPort Probe, Scan, Hack -	2019-12-25 08:39:03
31.14.40.216	attackbotsspam	Dec 24 08:17:48 debian-2gb-nbg1-2 kernel: \[824609.841104\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=31.14.40.216 DST=195.201.40.59 LEN=45 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=UDP SPT=41043 DPT=53413 LEN=25	2019-12-24 18:13:37
31.14.40.131	attack	Host Scan	2019-12-11 19:39:38
31.14.40.232	attackspambots	Excessive Port-Scanning	2019-12-01 07:40:26
31.14.40.232	attack	Malicious brute force vulnerability hacking attacks	2019-10-13 04:16:51
31.14.40.157	attackspambots	Unauthorized connection attempt from IP address 31.14.40.157 on Port 445(SMB)	2019-10-12 06:30:26

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 31.14.40.226
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65513
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;31.14.40.226.			IN	A

;; AUTHORITY SECTION:
.			278	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122302 1800 900 604800 86400

;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 24 06:33:09 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 226.40.14.31.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 100.100.2.136, trying next server
;; Got SERVFAIL reply from 100.100.2.138, trying next server
Server:		100.100.2.138
Address:	100.100.2.138#53

** server can't find 226.40.14.31.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
187.189.243.22	attack	Dovecot Invalid User Login Attempt.	2020-06-19 01:36:39
51.178.41.60	attackbots	invalid user	2020-06-19 02:10:21
63.81.93.144	attackspambots	Jun 18 12:04:37 mail.srvfarm.net postfix/smtpd[1443688]: NOQUEUE: reject: RCPT from writer.ketabaneh.com[63.81.93.144]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Jun 18 12:04:37 mail.srvfarm.net postfix/smtpd[1443692]: NOQUEUE: reject: RCPT from writer.ketabaneh.com[63.81.93.144]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Jun 18 12:04:37 mail.srvfarm.net postfix/smtpd[1431696]: NOQUEUE: reject: RCPT from writer.ketabaneh.com[63.81.93.144]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Ju	2020-06-19 01:55:37
202.6.236.174	attackbots	Jun 18 11:50:38 mail.srvfarm.net postfix/smtpd[1428176]: warning: unknown[202.6.236.174]: SASL PLAIN authentication failed: Jun 18 11:50:39 mail.srvfarm.net postfix/smtpd[1428176]: lost connection after AUTH from unknown[202.6.236.174] Jun 18 12:00:05 mail.srvfarm.net postfix/smtps/smtpd[1428330]: warning: unknown[202.6.236.174]: SASL PLAIN authentication failed: Jun 18 12:00:05 mail.srvfarm.net postfix/smtps/smtpd[1428330]: lost connection after AUTH from unknown[202.6.236.174] Jun 18 12:00:27 mail.srvfarm.net postfix/smtpd[1428455]: warning: unknown[202.6.236.174]: SASL PLAIN authentication failed:	2020-06-19 01:51:46
14.162.146.31	attackspambots	Dovecot Invalid User Login Attempt.	2020-06-19 02:06:04
189.226.58.172	attackbotsspam	Unauthorized connection attempt detected from IP address 189.226.58.172 to port 80	2020-06-19 02:05:18
117.240.172.19	attack	Jun 18 15:38:30 localhost sshd[82757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.240.172.19 user=root Jun 18 15:38:32 localhost sshd[82757]: Failed password for root from 117.240.172.19 port 59458 ssh2 Jun 18 15:43:12 localhost sshd[83252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.240.172.19 user=root Jun 18 15:43:14 localhost sshd[83252]: Failed password for root from 117.240.172.19 port 59412 ssh2 Jun 18 15:47:58 localhost sshd[83784]: Invalid user ftpuser from 117.240.172.19 port 59365 ...	2020-06-19 01:40:05
111.200.216.72	attack	TCP (SYN) 111.200.216.72:51104 -> port 8193, len 44	2020-06-19 02:04:17
41.139.60.42	attackspam	Jun 18 12:40:30 mail.srvfarm.net postfix/smtps/smtpd[1446450]: warning: unknown[41.139.60.42]: SASL PLAIN authentication failed: Jun 18 12:40:30 mail.srvfarm.net postfix/smtps/smtpd[1446450]: lost connection after AUTH from unknown[41.139.60.42] Jun 18 12:43:49 mail.srvfarm.net postfix/smtpd[1445378]: warning: unknown[41.139.60.42]: SASL PLAIN authentication failed: Jun 18 12:43:49 mail.srvfarm.net postfix/smtpd[1445378]: lost connection after AUTH from unknown[41.139.60.42] Jun 18 12:44:36 mail.srvfarm.net postfix/smtps/smtpd[1448757]: warning: unknown[41.139.60.42]: SASL PLAIN authentication failed:	2020-06-19 01:27:43
68.183.181.7	attack	Unauthorized access or intrusion attempt detected from Thor banned IP	2020-06-19 01:43:46
128.201.60.242	attack	Jun 18 12:38:32 mail.srvfarm.net postfix/smtps/smtpd[1448758]: warning: unknown[128.201.60.242]: SASL PLAIN authentication failed: Jun 18 12:38:33 mail.srvfarm.net postfix/smtps/smtpd[1448758]: lost connection after AUTH from unknown[128.201.60.242] Jun 18 12:42:40 mail.srvfarm.net postfix/smtpd[1445358]: warning: unknown[128.201.60.242]: SASL PLAIN authentication failed: Jun 18 12:42:40 mail.srvfarm.net postfix/smtpd[1445358]: lost connection after AUTH from unknown[128.201.60.242] Jun 18 12:47:39 mail.srvfarm.net postfix/smtps/smtpd[1448759]: warning: unknown[128.201.60.242]: SASL PLAIN authentication failed:	2020-06-19 01:26:37
5.160.213.184	attack	port scan and connect, tcp 80 (http)	2020-06-19 02:07:55
197.234.193.46	attack	Jun 18 13:48:32 rush sshd[24274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.234.193.46 Jun 18 13:48:34 rush sshd[24274]: Failed password for invalid user werkstatt from 197.234.193.46 port 44516 ssh2 Jun 18 13:53:00 rush sshd[24399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.234.193.46 ...	2020-06-19 01:46:20
203.130.255.2	attackspam	Jun 18 10:01:15 Tower sshd[36201]: Connection from 203.130.255.2 port 60378 on 192.168.10.220 port 22 rdomain "" Jun 18 10:01:16 Tower sshd[36201]: Invalid user sgp from 203.130.255.2 port 60378 Jun 18 10:01:16 Tower sshd[36201]: error: Could not get shadow information for NOUSER Jun 18 10:01:16 Tower sshd[36201]: Failed password for invalid user sgp from 203.130.255.2 port 60378 ssh2 Jun 18 10:01:17 Tower sshd[36201]: Received disconnect from 203.130.255.2 port 60378:11: Bye Bye [preauth] Jun 18 10:01:17 Tower sshd[36201]: Disconnected from invalid user sgp 203.130.255.2 port 60378 [preauth]	2020-06-19 01:34:55
80.48.33.160	attackbots	Jun 18 12:18:41 mail.srvfarm.net postfix/smtps/smtpd[1446443]: warning: unknown[80.48.33.160]: SASL PLAIN authentication failed: Jun 18 12:18:41 mail.srvfarm.net postfix/smtps/smtpd[1446443]: lost connection after AUTH from unknown[80.48.33.160] Jun 18 12:21:00 mail.srvfarm.net postfix/smtpd[1443482]: warning: unknown[80.48.33.160]: SASL PLAIN authentication failed: Jun 18 12:21:00 mail.srvfarm.net postfix/smtpd[1443482]: lost connection after AUTH from unknown[80.48.33.160] Jun 18 12:21:19 mail.srvfarm.net postfix/smtpd[1445379]: warning: unknown[80.48.33.160]: SASL PLAIN authentication failed:	2020-06-19 01:32:18

最近上报的IP列表

90.114.124.25	106.13.97.121	64.220.145.47	109.222.187.103
183.89.242.52	80.193.237.168	84.6.124.125	31.170.161.39
31.202.49.138	206.66.61.203	15.206.72.242	65.170.238.205
178.217.220.62	222.12.195.11	52.167.100.178	75.193.233.46
91.19.44.155	123.191.3.83	59.59.87.174	173.249.45.206