14.124.100.42 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Guangdong Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	20 attempts against mh-ssh on mist	2020-07-10 03:21:17

相同子网IP讨论:

IP	类型	评论内容	时间
14.124.100.127	attack	Jun 5 11:09:55 dns-1 sshd[11036]: User r.r from 14.124.100.127 not allowed because not listed in AllowUsers Jun 5 11:09:55 dns-1 sshd[11036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.124.100.127 user=r.r Jun 5 11:09:57 dns-1 sshd[11036]: Failed password for invalid user r.r from 14.124.100.127 port 45298 ssh2 Jun 5 11:09:59 dns-1 sshd[11036]: Received disconnect from 14.124.100.127 port 45298:11: Bye Bye [preauth] Jun 5 11:09:59 dns-1 sshd[11036]: Disconnected from invalid user r.r 14.124.100.127 port 45298 [preauth] Jun 5 11:20:28 dns-1 sshd[15271]: User r.r from 14.124.100.127 not allowed because not listed in AllowUsers Jun 5 11:20:28 dns-1 sshd[15271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.124.100.127 user=r.r Jun 5 11:20:30 dns-1 sshd[15271]: Failed password for invalid user r.r from 14.124.100.127 port 39279 ssh2 Jun 5 11:20:32 dns-1 sshd[15271]: Recei........ -------------------------------	2020-06-06 12:13:50
14.124.100.127	attack	SSH bruteforce	2020-06-05 12:14:36

类型

评论内容

时间

14.124.100.127

attack

Jun  5 11:09:55 dns-1 sshd[11036]: User r.r from 14.124.100.127 not allowed because not listed in AllowUsers
Jun  5 11:09:55 dns-1 sshd[11036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.124.100.127  user=r.r
Jun  5 11:09:57 dns-1 sshd[11036]: Failed password for invalid user r.r from 14.124.100.127 port 45298 ssh2
Jun  5 11:09:59 dns-1 sshd[11036]: Received disconnect from 14.124.100.127 port 45298:11: Bye Bye [preauth]
Jun  5 11:09:59 dns-1 sshd[11036]: Disconnected from invalid user r.r 14.124.100.127 port 45298 [preauth]
Jun  5 11:20:28 dns-1 sshd[15271]: User r.r from 14.124.100.127 not allowed because not listed in AllowUsers
Jun  5 11:20:28 dns-1 sshd[15271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.124.100.127  user=r.r
Jun  5 11:20:30 dns-1 sshd[15271]: Failed password for invalid user r.r from 14.124.100.127 port 39279 ssh2
Jun  5 11:20:32 dns-1 sshd[15271]: Recei........
-------------------------------

2020-06-06 12:13:50

14.124.100.127

attack

SSH bruteforce

2020-06-05 12:14:36

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.124.100.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19325
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.124.100.42.			IN	A

;; AUTHORITY SECTION:
.			151	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020070902 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jul 10 03:21:14 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 42.100.124.14.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 42.100.124.14.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
118.122.124.78	attackspam	Oct 25 16:20:22 marvibiene sshd[55786]: Invalid user rk from 118.122.124.78 port 30592 Oct 25 16:20:22 marvibiene sshd[55786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.122.124.78 Oct 25 16:20:22 marvibiene sshd[55786]: Invalid user rk from 118.122.124.78 port 30592 Oct 25 16:20:24 marvibiene sshd[55786]: Failed password for invalid user rk from 118.122.124.78 port 30592 ssh2 ...	2019-10-26 00:26:36
54.38.241.162	attackspambots	Oct 25 16:04:40 marvibiene sshd[55545]: Invalid user murai2 from 54.38.241.162 port 36686 Oct 25 16:04:40 marvibiene sshd[55545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.241.162 Oct 25 16:04:40 marvibiene sshd[55545]: Invalid user murai2 from 54.38.241.162 port 36686 Oct 25 16:04:42 marvibiene sshd[55545]: Failed password for invalid user murai2 from 54.38.241.162 port 36686 ssh2 ...	2019-10-26 00:48:05
104.131.55.236	attackspam	2019-10-25T16:50:02.370106shield sshd\[31549\]: Invalid user easton from 104.131.55.236 port 57487 2019-10-25T16:50:02.377269shield sshd\[31549\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.55.236 2019-10-25T16:50:04.651660shield sshd\[31549\]: Failed password for invalid user easton from 104.131.55.236 port 57487 ssh2 2019-10-25T16:53:58.960780shield sshd\[32213\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.131.55.236 user=root 2019-10-25T16:54:00.301497shield sshd\[32213\]: Failed password for root from 104.131.55.236 port 48829 ssh2	2019-10-26 01:00:23
129.211.35.94	attackbots	slow and persistent scanner	2019-10-26 00:42:30
222.98.37.25	attack	Oct 25 15:26:47 ns41 sshd[5942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.98.37.25	2019-10-26 00:38:20
117.83.147.48	attackbotsspam	Oct 25 07:43:31 esmtp postfix/smtpd[30672]: lost connection after AUTH from unknown[117.83.147.48] Oct 25 07:43:33 esmtp postfix/smtpd[30673]: lost connection after AUTH from unknown[117.83.147.48] Oct 25 07:43:34 esmtp postfix/smtpd[30672]: lost connection after AUTH from unknown[117.83.147.48] Oct 25 07:43:35 esmtp postfix/smtpd[30672]: lost connection after AUTH from unknown[117.83.147.48] Oct 25 07:43:36 esmtp postfix/smtpd[30673]: lost connection after AUTH from unknown[117.83.147.48] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=117.83.147.48	2019-10-26 00:29:09
37.187.25.138	attackspambots	SSH brutforce	2019-10-26 00:49:47
188.29.164.21	attack	ENG,WP GET /wp-login.php	2019-10-26 00:43:40
191.193.89.46	attackspam	Oct 25 17:44:09 vmanager6029 sshd\[6499\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.193.89.46 user=root Oct 25 17:44:11 vmanager6029 sshd\[6499\]: Failed password for root from 191.193.89.46 port 39366 ssh2 Oct 25 17:50:14 vmanager6029 sshd\[6625\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.193.89.46 user=root	2019-10-26 00:53:49
2.184.67.141	attackbotsspam	MYH,DEF GET /wp-login.php	2019-10-26 00:32:35
178.128.107.61	attackbotsspam	SSH brutforce	2019-10-26 01:00:57
170.80.12.158	attackbotsspam	2019-10-25T14:03:55.332520MailD postfix/smtpd[10954]: NOQUEUE: reject: RCPT from static-170-80-12-158.dnsduplanet.net.br[170.80.12.158]: 554 5.7.1 Service unavailable; Client host [170.80.12.158] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?170.80.12.158; from= to= proto=ESMTP helo= 2019-10-25T14:03:55.983618MailD postfix/smtpd[10954]: NOQUEUE: reject: RCPT from static-170-80-12-158.dnsduplanet.net.br[170.80.12.158]: 554 5.7.1 Service unavailable; Client host [170.80.12.158] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?170.80.12.158; from= to= proto=ESMTP helo= 2019-10-25T14:03:56.642068MailD postfix/smtpd[10954]: NOQUEUE: reject: RCPT from static-170-80-12-158.dnsduplanet.net.br[170.80.12.158]: 554 5.7.1 Service unavailable; Client host [170.80.12.158] b	2019-10-26 00:53:23
198.108.66.80	attack	port scan and connect, tcp 8080 (http-proxy)	2019-10-26 01:05:00
49.207.183.45	attackspam	$f2bV_matches	2019-10-26 00:52:37
157.245.134.66	attackspambots	Unauthorized SSH login attempts	2019-10-26 00:28:00

最近上报的IP列表

12.70.191.211	192.232.223.67	192.185.158.209	24.54.186.8
165.227.201.25	171.216.140.240	112.49.38.5	23.57.25.114
192.169.41.162	55.48.9.36	198.11.189.243	193.252.22.84
210.188.201.187	67.117.186.104	205.139.110.221	11.179.231.109
177.153.19.155	49.212.181.221	212.227.17.8	173.231.205.150