14.146.92.105 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Guangdong Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Mar 23 05:58:31 tuotantolaitos sshd[15835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.146.92.105 Mar 23 05:58:32 tuotantolaitos sshd[15835]: Failed password for invalid user zhubo from 14.146.92.105 port 41372 ssh2 ...	2020-03-23 12:44:13

Type

Details

Datetime

attack

Mar 23 05:58:31 tuotantolaitos sshd[15835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.146.92.105
Mar 23 05:58:32 tuotantolaitos sshd[15835]: Failed password for invalid user zhubo from 14.146.92.105 port 41372 ssh2
...

2020-03-23 12:44:13

Comments on same subnet:

IP	Type	Details	Datetime
14.146.92.154	attack	Failed password for root from 14.146.92.154 port 55128 ssh2 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.146.92.154 user=root Failed password for root from 14.146.92.154 port 48244 ssh2 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.146.92.154 user=root Failed password for root from 14.146.92.154 port 41372 ssh2	2020-08-11 16:50:22
14.146.92.207	attack	Unauthorized connection attempt from IP address 14.146.92.207 on Port 445(SMB)	2019-09-07 06:54:44
14.146.92.124	attack	[portscan] tcp/22 [SSH] *(RWIN=55896)(09011312)	2019-09-01 21:00:23
14.146.92.254	attack	2222/tcp 22/tcp... [2019-08-09/10]4pkt,2pt.(tcp)	2019-08-11 21:19:05
14.146.92.254	attackbots	Aug 11 00:23:29 MainVPS sshd[19364]: Invalid user nexthink from 14.146.92.254 port 54294 Aug 11 00:23:34 MainVPS sshd[19364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.146.92.254 Aug 11 00:23:29 MainVPS sshd[19364]: Invalid user nexthink from 14.146.92.254 port 54294 Aug 11 00:23:36 MainVPS sshd[19364]: Failed password for invalid user nexthink from 14.146.92.254 port 54294 ssh2 Aug 11 00:23:53 MainVPS sshd[19395]: Invalid user plexuser from 14.146.92.254 port 54825 ...	2019-08-11 13:00:27
14.146.92.254	attackspambots	22/tcp [2019-08-09]1pkt	2019-08-09 16:31:49

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.146.92.105
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52510
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.146.92.105.			IN	A

;; AUTHORITY SECTION:
.			553	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020032201 1800 900 604800 86400

;; Query time: 99 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 23 12:44:09 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 105.92.146.14.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 105.92.146.14.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
165.227.203.162	attack	2019-08-13T12:13:42.535817abusebot-2.cloudsearch.cf sshd\[11985\]: Invalid user card from 165.227.203.162 port 52502	2019-08-14 01:51:49
142.93.151.152	attackbotsspam	Automatic report - Banned IP Access	2019-08-14 02:09:09
18.235.94.125	attackbots	Aug 13 14:46:20 XXX sshd[53435]: Invalid user pao from 18.235.94.125 port 58066	2019-08-14 01:58:21
119.29.224.141	attackspam	Aug 13 11:52:00 game-panel sshd[16776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.224.141 Aug 13 11:52:02 game-panel sshd[16776]: Failed password for invalid user becker from 119.29.224.141 port 35430 ssh2 Aug 13 11:55:14 game-panel sshd[16872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.224.141	2019-08-14 01:22:48
218.150.220.194	attackspam	Invalid user scott from 218.150.220.194 port 55050	2019-08-14 01:42:21
114.113.221.162	attackspambots	$f2bV_matches	2019-08-14 02:16:47
185.58.53.66	attackbotsspam	Invalid user phion from 185.58.53.66 port 38082	2019-08-14 01:19:08
176.248.138.240	attackbots	Automatic report - Port Scan Attack	2019-08-14 01:57:12
142.93.198.152	attackbots	Aug 13 14:45:00 XXX sshd[53289]: Invalid user eliane from 142.93.198.152 port 44144	2019-08-14 01:52:32
34.87.125.104	attackspam	Aug 13 08:23:57 xtremcommunity sshd\[30598\]: Invalid user postgres from 34.87.125.104 port 38892 Aug 13 08:23:57 xtremcommunity sshd\[30598\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.87.125.104 Aug 13 08:23:59 xtremcommunity sshd\[30598\]: Failed password for invalid user postgres from 34.87.125.104 port 38892 ssh2 Aug 13 08:29:42 xtremcommunity sshd\[30890\]: Invalid user server from 34.87.125.104 port 33058 Aug 13 08:29:42 xtremcommunity sshd\[30890\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.87.125.104 ...	2019-08-14 02:05:57
104.248.254.222	attackspambots	Automatic report	2019-08-14 01:44:58
180.127.108.233	attackbots	Aug 13 10:24:56 elektron postfix/smtpd\[15554\]: NOQUEUE: reject: RCPT from unknown\[180.127.108.233\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[180.127.108.233\]\; from=\ to=\ proto=ESMTP helo=\ Aug 13 10:25:39 elektron postfix/smtpd\[12096\]: NOQUEUE: reject: RCPT from unknown\[180.127.108.233\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[180.127.108.233\]\; from=\ to=\ proto=ESMTP helo=\ Aug 13 10:26:22 elektron postfix/smtpd\[15554\]: NOQUEUE: reject: RCPT from unknown\[180.127.108.233\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[180.127.108.233\]\; from=\ to=\ proto=ESMTP helo=\ Aug 13 10:27:01 elektron postfix/smtpd\[12096\]: NOQUEUE: reject: RCPT from unknown\[180.127.108.233\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[180.127.108.233\]\; from=\	2019-08-14 02:02:29
183.95.84.122	attackspam	$f2bV_matches	2019-08-14 02:12:06
23.126.140.33	attackspam	Aug 13 17:24:42 MK-Soft-VM3 sshd\[4856\]: Invalid user sheri from 23.126.140.33 port 49074 Aug 13 17:24:42 MK-Soft-VM3 sshd\[4856\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.126.140.33 Aug 13 17:24:44 MK-Soft-VM3 sshd\[4856\]: Failed password for invalid user sheri from 23.126.140.33 port 49074 ssh2 ...	2019-08-14 02:04:49
106.13.4.150	attackbots	Aug 13 13:14:40 mail sshd\[10869\]: Failed password for invalid user tweety from 106.13.4.150 port 29530 ssh2 Aug 13 13:31:38 mail sshd\[11359\]: Invalid user harold from 106.13.4.150 port 24722 Aug 13 13:31:38 mail sshd\[11359\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.4.150 ...	2019-08-14 01:34:15

Recently Reported IPs

110.235.245.131	83.7.172.194	81.214.127.93	35.154.196.154
117.2.49.239	171.227.210.191	191.96.145.141	92.87.96.36
116.96.32.176	91.238.9.107	14.187.6.1	113.172.135.59
121.141.237.207	14.186.184.33	171.6.204.20	110.137.33.43
191.54.230.178	47.247.89.110	47.247.55.76	103.92.44.194