40.92.41.14 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Microsoft Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Dec 18 01:27:06 debian-2gb-vpn-nbg1-1 kernel: [999992.144869] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.41.14 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=40630 DF PROTO=TCP SPT=7777 DPT=25 WINDOW=0 RES=0x00 ACK RST URGP=0	2019-12-18 06:37:53

类型

评论内容

时间

attack

Dec 18 01:27:06 debian-2gb-vpn-nbg1-1 kernel: [999992.144869] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.41.14 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=40630 DF PROTO=TCP SPT=7777 DPT=25 WINDOW=0 RES=0x00 ACK RST URGP=0

2019-12-18 06:37:53

相同子网IP讨论:

IP	类型	评论内容	时间
40.92.41.13	spamnormal	Ask cost for a private tour in Greece	2021-03-13 20:43:54
40.92.41.81	attackbots	black mailing me asking for $2000.00 to be sent to him electronically and in fact nothing of what he is claiming is true but it bother me .	2020-04-17 18:46:42
40.92.41.56	spam	From: Clim Muir Sent: Friday, April 10, 2020 12:22 PM To: osmon503@msn.com Subject: osmon503 : jager503 I'mkaware,wjager503,Nisnyourypassword.KYouGmayjnotJknowume,JandAyouwareOmostrlikelyjwonderingYwhyYyou'rergettingLthisimail,dright?O Overview: IiinstalledmaVmalwarenonZthegadultzvidsz(sexhsites)zsite,wandnthere'sAmore,iyourvisitedUthisIsiteTtoqhaveNfunC(youUknowHwhatFIrmean).fOncebyoutwereptherehonitheXwebsite,TmypmalwareVtookmcontrolBofMyourhbrowser.wItQstartedroperatingsasaaUkeyloggerEandJremoteMdesktopRprotocolqwhichxgaveRmemaccessvtoEyourlwebcam.CImmediatelyYafterWthat,AmyxsoftwarencollectedayourUcompletexcontactsOfromsyourRMessenger,oFB,Handvemail.GWIscreatedxaedouble-screenhvideo.hFirstjparthshowsxtheavideoNyouWweretwatchingh(youEhaveDaGgoodstastenlolG.D.p.),eandLtheHsecondQpartqdisplaysgtheBrecordingQofoyourrwebcam.E PreciselyHwhatsshouldQyouxdo? Well,nIJbelieve,M$1900ZisJaMfairPpriceKforBourGlittlersecret.pYoucwillmmakexthecpaymentZthroughdBitcoinE(ifJyoufdon'tgknowPthis,qsearchq"howVtolbuyAbitcoin"MinqGoogle).U BTCGAddress:g bc1q5hlwwkp395vn783g0zettcxxgew0n7u3q757uv (ItnisQcaseAsensitive,BsoQcopymandjpasteait) Note: YouOhaveioneVdayltoemakeCtheJpayment.c(I'vezaOspecificKpixelVwithinuthisOmessage,pandPnowjIgknowzthatsyouWhaveEreadZthroughQthisBemail).kIfFIndoNnotWreceiveCtheEpayment,tIswillgsendLyourKvideorrecordingAtonallXofHyourgcontacts,XincludingHyourdrelatives,Fandfcolleagues.sHowever,wifLITdoegetTpaid,BtheivideokwillObeKdestroyeddimmediately.iIfxyouwneedAevidence,Ireplyxwiths"Yes!"qandIIwdefinitelyawillTsendMyourLvideoirecordingytoYyoura10Lcontacts.iThispisqaonon-negotiableOoffer.fPleaseudon'tZwastezmySpersonalxtimeFandSyoursAbyjreplyingJtocthisqemail. Clim	2020-04-11 04:50:24
40.92.41.102	attackspambots	Dec 20 17:48:39 debian-2gb-vpn-nbg1-1 kernel: [1231678.183366] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.41.102 DST=78.46.192.101 LEN=52 TOS=0x02 PREC=0x00 TTL=104 ID=12536 DF PROTO=TCP SPT=6409 DPT=25 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0	2019-12-21 05:14:33
40.92.41.28	attack	Dec 20 17:48:52 debian-2gb-vpn-nbg1-1 kernel: [1231691.682901] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.41.28 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=64527 DF PROTO=TCP SPT=51649 DPT=25 WINDOW=0 RES=0x00 ACK RST URGP=0	2019-12-21 05:06:17
40.92.41.45	attackbots	Dec 20 09:27:50 debian-2gb-vpn-nbg1-1 kernel: [1201630.000731] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.41.45 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=65241 DF PROTO=TCP SPT=6305 DPT=25 WINDOW=0 RES=0x00 ACK RST URGP=0	2019-12-20 17:28:52
40.92.41.56	attack	Dec 18 01:26:52 debian-2gb-vpn-nbg1-1 kernel: [999978.645880] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.41.56 DST=78.46.192.101 LEN=52 TOS=0x02 PREC=0x00 TTL=104 ID=32101 DF PROTO=TCP SPT=33441 DPT=25 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0	2019-12-18 06:48:30
40.92.41.12	attackbotsspam	Dec 17 17:23:04 debian-2gb-vpn-nbg1-1 kernel: [970951.226968] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.41.12 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=28433 DF PROTO=TCP SPT=18912 DPT=25 WINDOW=0 RES=0x00 ACK RST URGP=0	2019-12-18 02:31:14
40.92.41.89	attack	Dec 17 17:25:24 debian-2gb-vpn-nbg1-1 kernel: [971091.357858] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.41.89 DST=78.46.192.101 LEN=52 TOS=0x02 PREC=0x00 TTL=104 ID=15542 DF PROTO=TCP SPT=31776 DPT=25 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0	2019-12-18 00:03:58
40.92.41.42	attack	Dec 17 17:26:44 debian-2gb-vpn-nbg1-1 kernel: [971171.287874] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.41.42 DST=78.46.192.101 LEN=48 TOS=0x00 PREC=0x00 TTL=104 ID=18934 DF PROTO=TCP SPT=6327 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0	2019-12-17 22:33:06
40.92.41.84	attack	Dec 17 17:26:44 debian-2gb-vpn-nbg1-1 kernel: [971170.787463] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.41.84 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=36901 DF PROTO=TCP SPT=6327 DPT=25 WINDOW=0 RES=0x00 ACK RST URGP=0	2019-12-17 22:32:37
40.92.41.67	attackspam	Dec 16 17:42:06 debian-2gb-vpn-nbg1-1 kernel: [885695.255066] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.41.67 DST=78.46.192.101 LEN=52 TOS=0x02 PREC=0x00 TTL=104 ID=23341 DF PROTO=TCP SPT=55233 DPT=25 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0	2019-12-17 03:29:40
40.92.41.56	attackspambots	Dec 16 20:01:24 debian-2gb-vpn-nbg1-1 kernel: [894053.899479] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.41.56 DST=78.46.192.101 LEN=52 TOS=0x02 PREC=0x00 TTL=104 ID=9530 DF PROTO=TCP SPT=6554 DPT=25 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0	2019-12-17 01:09:50
40.92.41.40	attackbots	Dec 16 09:28:04 debian-2gb-vpn-nbg1-1 kernel: [856054.699281] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.41.40 DST=78.46.192.101 LEN=52 TOS=0x02 PREC=0x00 TTL=104 ID=430 DF PROTO=TCP SPT=44576 DPT=25 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0	2019-12-16 16:47:36

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 40.92.41.14
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34362
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;40.92.41.14.			IN	A

;; AUTHORITY SECTION:
.			575	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121702 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Dec 18 06:37:50 CST 2019
;; MSG SIZE  rcvd: 115

HOST信息:

14.41.92.40.in-addr.arpa domain name pointer mail-dm6nam10olkn2014.outbound.protection.outlook.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
14.41.92.40.in-addr.arpa	name = mail-dm6nam10olkn2014.outbound.protection.outlook.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
41.138.88.3	attackspambots	Invalid user andy from 41.138.88.3 port 37536	2019-09-01 10:27:49
121.204.185.106	attackspam	Sep 1 03:27:54 mail sshd\[15366\]: Failed password for invalid user meteo from 121.204.185.106 port 38951 ssh2 Sep 1 03:31:54 mail sshd\[15977\]: Invalid user john from 121.204.185.106 port 57179 Sep 1 03:31:54 mail sshd\[15977\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.204.185.106 Sep 1 03:31:56 mail sshd\[15977\]: Failed password for invalid user john from 121.204.185.106 port 57179 ssh2 Sep 1 03:35:55 mail sshd\[16495\]: Invalid user admin from 121.204.185.106 port 47172	2019-09-01 09:41:01
89.40.217.96	attackbots	Fail2Ban Ban Triggered	2019-09-01 10:21:01
118.122.191.187	attackspam	Invalid user testftp from 118.122.191.187 port 55104	2019-09-01 10:06:57
104.248.183.0	attack	Aug 31 16:16:41 eddieflores sshd\[15432\]: Invalid user squid from 104.248.183.0 Aug 31 16:16:41 eddieflores sshd\[15432\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.183.0 Aug 31 16:16:42 eddieflores sshd\[15432\]: Failed password for invalid user squid from 104.248.183.0 port 43234 ssh2 Aug 31 16:20:32 eddieflores sshd\[15828\]: Invalid user instrume from 104.248.183.0 Aug 31 16:20:32 eddieflores sshd\[15828\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.183.0	2019-09-01 10:23:16
203.113.167.209	attackspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-31 21:48:04,292 INFO [shellcode_manager] (203.113.167.209) no match, writing hexdump (5af1e181fef810fc4f0ebd581e889a86 :1851490) - SMB (Unknown)	2019-09-01 09:42:57
168.90.89.35	attack	Invalid user lsx from 168.90.89.35 port 45781	2019-09-01 09:54:15
153.36.236.35	attackspam	Sep 1 03:50:02 vps647732 sshd[27986]: Failed password for root from 153.36.236.35 port 45149 ssh2 ...	2019-09-01 09:57:23
66.57.41.229	attackbotsspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-31 19:54:55,746 INFO [amun_request_handler] PortScan Detected on Port: 445 (66.57.41.229)	2019-09-01 09:57:57
202.88.241.107	attack	2019-08-23T18:32:59.758657wiz-ks3 sshd[5668]: Invalid user cforziati from 202.88.241.107 port 40318 2019-08-23T18:32:59.760676wiz-ks3 sshd[5668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.88.241.107 2019-08-23T18:32:59.758657wiz-ks3 sshd[5668]: Invalid user cforziati from 202.88.241.107 port 40318 2019-08-23T18:33:02.039409wiz-ks3 sshd[5668]: Failed password for invalid user cforziati from 202.88.241.107 port 40318 ssh2 2019-08-23T18:39:01.785003wiz-ks3 sshd[5760]: Invalid user interalt from 202.88.241.107 port 55618 2019-08-23T18:39:01.786989wiz-ks3 sshd[5760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.88.241.107 2019-08-23T18:39:01.785003wiz-ks3 sshd[5760]: Invalid user interalt from 202.88.241.107 port 55618 2019-08-23T18:39:04.093891wiz-ks3 sshd[5760]: Failed password for invalid user interalt from 202.88.241.107 port 55618 ssh2 2019-08-23T18:46:12.159126wiz-ks3 sshd[5921]: Invalid user cardini from 202.88.	2019-09-01 10:10:32
60.248.28.105	attack	Invalid user m from 60.248.28.105 port 49126	2019-09-01 09:51:43
31.221.14.41	attack	Aug 31 23:20:25 mail sshd[24143]: Invalid user admin from 31.221.14.41 Aug 31 23:20:27 mail sshd[24143]: Failed password for invalid user admin from 31.221.14.41 port 59634 ssh2 Aug 31 23:20:37 mail sshd[24145]: Failed password for r.r from 31.221.14.41 port 59644 ssh2 Aug 31 23:20:49 mail sshd[24151]: Invalid user guest from 31.221.14.41 Aug 31 23:20:51 mail sshd[24151]: Failed password for invalid user guest from 31.221.14.41 port 59731 ssh2 Aug 31 23:20:54 mail sshd[24153]: Invalid user admin from 31.221.14.41 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=31.221.14.41	2019-09-01 10:19:25
37.109.33.203	attackspam	Lines containing failures of 37.109.33.203 Aug 31 23:19:46 server01 postfix/smtpd[19797]: connect from unknown[37.109.33.203] Aug x@x Aug x@x Aug 31 23:19:47 server01 postfix/policy-spf[19805]: : Policy action=PREPEND Received-SPF: none (srs.in.th: No applicable sender policy available) receiver=x@x Aug x@x Aug 31 23:19:48 server01 postfix/smtpd[19797]: lost connection after DATA from unknown[37.109.33.203] Aug 31 23:19:48 server01 postfix/smtpd[19797]: disconnect from unknown[37.109.33.203] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=37.109.33.203	2019-09-01 09:47:26
183.249.241.212	attackbots	Aug 31 22:56:14 MK-Soft-VM6 sshd\[9347\]: Invalid user gregg from 183.249.241.212 port 59480 Aug 31 22:56:14 MK-Soft-VM6 sshd\[9347\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.249.241.212 Aug 31 22:56:16 MK-Soft-VM6 sshd\[9347\]: Failed password for invalid user gregg from 183.249.241.212 port 59480 ssh2 ...	2019-09-01 09:58:53
107.170.227.141	attackbotsspam	Aug 31 16:03:54 lcdev sshd\[16586\]: Invalid user rabbitmq from 107.170.227.141 Aug 31 16:03:54 lcdev sshd\[16586\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.227.141 Aug 31 16:03:57 lcdev sshd\[16586\]: Failed password for invalid user rabbitmq from 107.170.227.141 port 33310 ssh2 Aug 31 16:08:01 lcdev sshd\[16907\]: Invalid user akhan from 107.170.227.141 Aug 31 16:08:01 lcdev sshd\[16907\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.227.141	2019-09-01 10:13:45

最近上报的IP列表

101.109.115.27	111.198.152.82	5.135.181.53	223.211.43.20
201.97.250.111	40.92.254.43	125.161.136.26	85.159.144.89
125.165.176.72	119.123.221.128	117.2.139.91	8.84.46.55
24.50.216.104	40.92.4.98	93.90.75.196	82.117.169.176
154.8.232.221	213.160.73.92	103.28.149.198	77.42.87.31