City: unknown
Region: Ningxia Hui Autonomous Region
Country: China
Internet Service Provider: ChinaNet Ningxia Province Network
Hostname: unknown
Organization: No.31,Jin-rong Street
Usage Type: unknown
| Type | Details | Datetime |
|---|---|---|
| attack | Jan 16 15:03:36 h2177944 kernel: \[2381818.916329\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=14.135.120.3 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=241 ID=15761 PROTO=TCP SPT=52968 DPT=8086 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 16 15:03:36 h2177944 kernel: \[2381818.916346\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=14.135.120.3 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=241 ID=15761 PROTO=TCP SPT=52968 DPT=8086 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 16 15:04:42 h2177944 kernel: \[2381884.952236\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=14.135.120.3 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=241 ID=32679 PROTO=TCP SPT=49266 DPT=8087 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 16 15:04:42 h2177944 kernel: \[2381884.952248\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=14.135.120.3 DST=85.214.117.9 LEN=52 TOS=0x00 PREC=0x00 TTL=241 ID=32679 PROTO=TCP SPT=49266 DPT=8087 WINDOW=1024 RES=0x00 SYN URGP=0 Jan 16 15:05:34 h2177944 kernel: \[2381936.382048\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=14.135.120.3 DST=85.214.117.9 LEN= |
2020-01-16 22:47:42 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 14.135.120.4 | attack | Aug 3 14:28:35 debian-2gb-nbg1-2 kernel: \[18716185.879263\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=14.135.120.4 DST=195.201.40.59 LEN=52 TOS=0x00 PREC=0x00 TTL=236 ID=17100 PROTO=TCP SPT=56064 DPT=9595 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-08-03 20:37:05 |
| 14.135.120.19 | attackbots | [Fri Apr 24 23:22:17 2020] - DDoS Attack From IP: 14.135.120.19 Port: 61310 |
2020-04-25 17:20:13 |
| 14.135.120.5 | attackspam | Automatic report - Port Scan Attack |
2020-04-02 06:43:33 |
| 14.135.120.4 | attack | MultiHost/MultiPort Probe, Scan, Hack - |
2020-02-03 18:20:42 |
| 14.135.120.4 | attackbots | 01/19/2020-08:39:55.107580 14.135.120.4 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-01-20 03:45:26 |
| 14.135.120.111 | attackbots | Unauthorized connection attempt detected from IP address 14.135.120.111 to port 3389 [T] |
2020-01-09 02:50:29 |
| 14.135.120.4 | attackspam | Oct 27 06:08:37 mc1 kernel: \[3439252.113431\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=14.135.120.4 DST=159.69.205.51 LEN=52 TOS=0x00 PREC=0x00 TTL=236 ID=33938 PROTO=TCP SPT=54052 DPT=9869 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 27 06:09:14 mc1 kernel: \[3439288.199609\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=14.135.120.4 DST=159.69.205.51 LEN=52 TOS=0x00 PREC=0x00 TTL=235 ID=21466 PROTO=TCP SPT=59212 DPT=9943 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 27 06:10:21 mc1 kernel: \[3439356.036983\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=14.135.120.4 DST=159.69.205.51 LEN=52 TOS=0x00 PREC=0x00 TTL=238 ID=61304 PROTO=TCP SPT=60597 DPT=9944 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-10-27 13:12:07 |
| 14.135.120.12 | attackbotsspam | UTC: 2019-10-21 pkts: 3(2, 1) ports(tcp): 102, 502 port (udp): 161 |
2019-10-22 15:58:42 |
| 14.135.120.4 | attackspambots | Automatic report - Port Scan |
2019-10-17 20:52:47 |
| 14.135.120.21 | attack | Jul 23 02:25:07 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:5a:1a:41:08:00 SRC=14.135.120.21 DST=109.74.200.221 LEN=76 TOS=0x00 PREC=0x00 TTL=243 ID=57695 PROTO=UDP SPT=61815 DPT=123 LEN=56 ... |
2019-09-11 06:03:39 |
| 14.135.120.64 | attack | 6000/tcp 6000/tcp [2019-08-23]2pkt |
2019-08-24 07:47:01 |
| 14.135.120.20 | attackbotsspam | Unauthorized connection attempt from IP address 14.135.120.20 on Port 3389(RDP) |
2019-07-19 12:49:45 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.135.120.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44223
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.135.120.3. IN A
;; AUTHORITY SECTION:
. 976 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019052600 1800 900 604800 86400
;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun May 26 20:45:37 CST 2019
;; MSG SIZE rcvd: 116
Host 3.120.135.14.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 3.120.135.14.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 51.195.229.192 | spamattackproxy | Malicious IP |
2025-01-03 13:57:07 |
| 2001:0002:14:5:1:2:bf35:2610 | spambotsattackproxynormal | Saber información sobre la IP de pantalla |
2024-12-18 16:48:48 |
| 190.162.172.223 | normal | It's a normal IP, because it doesn't seem too much to get into the same place as the first time in London is the only thing that I could have done, is the first thing we can do with the other thing I can find out the door and I will have to get it done before the end of the week and then I don't want to be in the same place in the house. |
2025-01-01 09:09:11 |
| 100.255.250.33 | attackproxy | Data |
2025-01-15 01:02:54 |
| 213.166.129.146 | spambotsattackproxynormal | Test |
2025-01-09 20:09:55 |
| 113.195.224.160 | spam | https://dcshop.biz Heya i'm for the first time here. I found this board and I find It really useful & it helped me out much. I hope to give something back and help others like you helped me. |
2024-12-12 22:05:56 |
| 93.123.85.18 | attackproxy | Malicious IP |
2024-12-05 13:59:16 |
| 213.230.76.188 | spambotsattackproxynormal | Spam |
2025-01-13 04:44:26 |
| 64.62.197.63 | attackproxy | Vulnerability Scanner |
2025-01-23 14:03:04 |
| 113.78.76.125 | normal | 中国电信网络，广东省，深圳市，龙华区 |
2024-11-24 09:47:03 |
| 172.81.130.245 | attack | Scammer logged into one of our user's email accounts from this IP address |
2025-01-04 05:03:31 |
| 141.98.11.35 | botsattackproxy | Vulnerability Scanner |
2025-01-23 13:58:46 |
| 2408:8207:2421:4750:8ee:885d:832:2788 | normal | 联通服务器动态获取 |
2025-01-23 16:15:51 |
| 176.29.123.2 | spambotsattackproxynormal | Jo |
2025-01-08 04:38:10 |
| 184.105.247.244 | botsproxy | Compromised IP |
2025-01-23 13:49:23 |