117.14.145.214

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
117.14.145.176	attackbots	The IP has triggered Cloudflare WAF. CF-Ray: 5413fd94bec1ebc1 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: api.skk.moe \| User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:27:49

Type

Details

Datetime

117.14.145.176

attackbots

The IP has triggered Cloudflare WAF. CF-Ray: 5413fd94bec1ebc1 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: api.skk.moe | User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Mobile Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 06:27:49

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.14.145.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44797
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;117.14.145.214.			IN	A

;; AUTHORITY SECTION:
.			236	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 17:31:56 CST 2022
;; MSG SIZE  rcvd: 107

Host info

214.145.14.117.in-addr.arpa domain name pointer dns214.online.tj.cn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
214.145.14.117.in-addr.arpa	name = dns214.online.tj.cn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
80.234.50.75	attackspam	445/tcp [2020-04-04]1pkt	2020-04-05 05:42:29
190.47.136.120	attackbotsspam	SSH Invalid Login	2020-04-05 05:53:08
50.127.71.5	attack	Apr 4 21:42:56 *** sshd[17116]: User root from 50.127.71.5 not allowed because not listed in AllowUsers	2020-04-05 06:00:15
35.186.147.101	attackbots	35.186.147.101 - - \[04/Apr/2020:15:33:42 +0200\] "POST /wp-login.php HTTP/1.1" 200 9653 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 35.186.147.101 - - \[04/Apr/2020:15:33:45 +0200\] "POST /wp-login.php HTTP/1.1" 200 9522 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" ...	2020-04-05 05:47:10
204.48.27.62	attack	SASL PLAIN auth failed: ruser=...	2020-04-05 06:15:36
103.48.192.48	attackbotsspam	Apr 4 19:09:19 ws19vmsma01 sshd[146577]: Failed password for root from 103.48.192.48 port 33156 ssh2 ...	2020-04-05 06:18:48
165.227.212.156	attackbots	Apr 4 18:30:33 sso sshd[21732]: Failed password for root from 165.227.212.156 port 40074 ssh2 ...	2020-04-05 05:44:35
212.64.29.79	attackspam	Apr 4 22:41:34 ns382633 sshd\[30276\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.29.79 user=root Apr 4 22:41:37 ns382633 sshd\[30276\]: Failed password for root from 212.64.29.79 port 57586 ssh2 Apr 4 22:45:30 ns382633 sshd\[31093\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.29.79 user=root Apr 4 22:45:32 ns382633 sshd\[31093\]: Failed password for root from 212.64.29.79 port 43200 ssh2 Apr 4 22:47:14 ns382633 sshd\[31307\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.29.79 user=root	2020-04-05 06:17:17
101.71.28.72	attackbots	$f2bV_matches	2020-04-05 06:19:06
168.232.198.246	attack	Apr 4 23:56:22 vps647732 sshd[6694]: Failed password for root from 168.232.198.246 port 54612 ssh2 ...	2020-04-05 06:03:15
185.161.210.130	attackbots	" "	2020-04-05 05:46:32
63.81.87.144	attackspambots	Apr 4 15:20:30 mail.srvfarm.net postfix/smtpd[3301977]: NOQUEUE: reject: RCPT from unknown[63.81.87.144]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Apr 4 15:24:30 mail.srvfarm.net postfix/smtpd[3318077]: NOQUEUE: reject: RCPT from unknown[63.81.87.144]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Apr 4 15:25:55 mail.srvfarm.net postfix/smtpd[3314744]: NOQUEUE: reject: RCPT from unknown[63.81.87.144]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Apr 4 15:26:40 mail.srvfarm.net postfix/smtpd[3301977]: NOQUEUE: reject: RCPT from unknown[63.81.87.144]: 450 4.1.8 :	2020-04-05 05:42:47
46.229.168.140	attackbots	Too many 404s, searching for vulnerabilities	2020-04-05 06:09:49
106.13.232.184	attack	SSH brute force attempt	2020-04-05 05:59:12
156.221.13.197	attackbots	23/tcp [2020-04-04]1pkt	2020-04-05 05:44:55

Recently Reported IPs

162.158.90.116	156.208.106.161	197.61.25.75	190.2.131.201
43.154.9.190	195.181.149.4	47.97.251.30	246.192.239.216
64.94.208.198	138.204.132.226	83.3.249.17	14.155.221.101
185.59.220.198	129.226.34.3	77.247.110.218	103.10.231.2
152.242.88.164	34.139.37.61	45.80.107.210	14.237.128.125