14.31.159.137 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Guangdong Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	" "	2019-08-02 16:36:28

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.31.159.137
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59958
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.31.159.137.			IN	A

;; AUTHORITY SECTION:
.			1738	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080200 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Aug 02 16:36:22 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 137.159.31.14.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 137.159.31.14.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
177.204.128.255	attackspam	Unauthorized connection attempt from IP address 177.204.128.255 on Port 445(SMB)	2020-08-31 08:26:29
218.92.0.190	attack	Aug 31 02:36:42 dcd-gentoo sshd[32547]: User root from 218.92.0.190 not allowed because none of user's groups are listed in AllowGroups Aug 31 02:36:44 dcd-gentoo sshd[32547]: error: PAM: Authentication failure for illegal user root from 218.92.0.190 Aug 31 02:36:44 dcd-gentoo sshd[32547]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.190 port 12232 ssh2 ...	2020-08-31 08:49:49
182.30.39.101	attack	Unauthorized connection attempt from IP address 182.30.39.101 on Port 445(SMB)	2020-08-31 08:43:50
190.4.201.35	attackspam	Unauthorized connection attempt from IP address 190.4.201.35 on Port 445(SMB)	2020-08-31 08:48:15
122.155.17.174	attack	(sshd) Failed SSH login from 122.155.17.174 (TH/Thailand/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Aug 30 18:12:22 mail sshd[17599]: Failed password for invalid user steam from 122.155.17.174 port 58254 ssh2 Aug 30 18:13:30 mail sshd[19356]: Invalid user ljq from 122.155.17.174 Aug 30 18:13:30 mail sshd[19356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.155.17.174 Aug 30 18:13:33 mail sshd[19356]: Failed password for invalid user ljq from 122.155.17.174 port 9389 ssh2 Aug 30 18:16:04 mail sshd[30895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.155.17.174 user=root	2020-08-31 08:24:28
167.172.68.76	attack	167.172.68.76 - - [31/Aug/2020:02:02:34 +0200] "GET /wp-login.php HTTP/1.1" 200 1689 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.172.68.76 - - [31/Aug/2020:02:02:35 +0200] "POST /wp-login.php HTTP/1.1" 200 1811 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.172.68.76 - - [31/Aug/2020:02:02:36 +0200] "GET /wp-login.php HTTP/1.1" 200 1689 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.172.68.76 - - [31/Aug/2020:02:02:37 +0200] "POST /wp-login.php HTTP/1.1" 200 1790 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.172.68.76 - - [31/Aug/2020:02:02:38 +0200] "GET /wp-login.php HTTP/1.1" 200 1689 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 167.172.68.76 - - [31/Aug/2020:02:02:39 +0200] "POST /wp-login.php HTTP/1.1" 200 1790 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Fir ...	2020-08-31 08:38:39
106.12.84.33	attackspam	2020-08-30T16:28:45.844205linuxbox-skyline sshd[42616]: Invalid user ddd from 106.12.84.33 port 59476 ...	2020-08-31 08:38:56
190.205.122.242	attackspam	Unauthorized connection attempt from IP address 190.205.122.242 on Port 445(SMB)	2020-08-31 08:36:32
49.235.240.105	attack	Aug 30 22:39:56 jumpserver sshd[117383]: Failed password for invalid user filip from 49.235.240.105 port 38800 ssh2 Aug 30 22:45:07 jumpserver sshd[117413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.240.105 user=root Aug 30 22:45:09 jumpserver sshd[117413]: Failed password for root from 49.235.240.105 port 42734 ssh2 ...	2020-08-31 08:53:54
106.12.133.225	attack	Aug 31 00:31:55 web sshd[222399]: Failed password for invalid user vyos from 106.12.133.225 port 37196 ssh2 Aug 31 00:49:13 web sshd[222516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.133.225 user=root Aug 31 00:49:15 web sshd[222516]: Failed password for root from 106.12.133.225 port 51530 ssh2 ...	2020-08-31 08:30:57
3.129.238.85	attackspambots	Automatic report - Banned IP Access	2020-08-31 08:30:01
121.101.132.241	attackbots	Aug 31 00:54:39 ip40 sshd[10245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.101.132.241 Aug 31 00:54:40 ip40 sshd[10245]: Failed password for invalid user www from 121.101.132.241 port 52612 ssh2 ...	2020-08-31 08:29:40
90.207.196.115	attackbotsspam	IP attempted unauthorised action	2020-08-31 08:28:26
104.168.14.122	attack	TCP (SYN) 104.168.14.122:41260 -> port 22, len 44	2020-08-31 08:30:32
186.94.120.160	attackbotsspam	Unauthorized connection attempt from IP address 186.94.120.160 on Port 445(SMB)	2020-08-31 09:00:27

Recently Reported IPs

187.19.200.154	154.126.132.130	45.71.58.39	114.125.54.202
77.42.73.143	177.130.160.172	77.87.77.38	94.15.184.55
90.150.233.38	140.143.162.170	187.113.46.137	113.128.148.180
191.240.69.119	171.251.251.87	27.66.228.13	2a0b:7280:100:0:4e9:6eff:fe00:2161
42.159.92.147	2409:4053:2184:7875:e114:eaa:147a:f7c1	165.22.72.226	191.242.76.147