城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 14.207.19.147 | attack | Feb 22 05:55:07 h2177944 kernel: \[5545142.819751\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=14.207.19.147 DST=85.214.117.9 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=26343 DF PROTO=TCP SPT=50813 DPT=441 WINDOW=14400 RES=0x00 SYN URGP=0 Feb 22 05:55:07 h2177944 kernel: \[5545142.819765\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=14.207.19.147 DST=85.214.117.9 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=26343 DF PROTO=TCP SPT=50813 DPT=441 WINDOW=14400 RES=0x00 SYN URGP=0 Feb 22 05:55:08 h2177944 kernel: \[5545143.816097\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=14.207.19.147 DST=85.214.117.9 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=26344 DF PROTO=TCP SPT=50813 DPT=441 WINDOW=14400 RES=0x00 SYN URGP=0 Feb 22 05:55:08 h2177944 kernel: \[5545143.816111\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=14.207.19.147 DST=85.214.117.9 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=26344 DF PROTO=TCP SPT=50813 DPT=441 WINDOW=14400 RES=0x00 SYN URGP=0 Feb 22 05:55:10 h2177944 kernel: \[5545145.813180\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=14.207.19.147 DST=85.2 |
2020-02-22 13:09:42 |
| 14.207.19.53 | attackbots | Unauthorized connection attempt detected from IP address 14.207.19.53 to port 80 |
2020-01-01 03:27:02 |
| 14.207.198.252 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:50:38. |
2019-12-21 03:35:12 |
| 14.207.199.165 | attackbotsspam | Unauthorized connection attempt from IP address 14.207.199.165 on Port 445(SMB) |
2019-12-01 04:49:53 |
| 14.207.19.2 | attack | 19/11/17@17:43:14: FAIL: IoT-Telnet address from=14.207.19.2 ... |
2019-11-18 07:43:47 |
| 14.207.196.2 | attack | Unauthorized connection attempt from IP address 14.207.196.2 on Port 445(SMB) |
2019-11-14 04:11:38 |
| 14.207.197.233 | attackbots | 54068/udp [2019-10-28]1pkt |
2019-10-29 03:05:58 |
| 14.207.198.36 | attackbots | rdp brute-force attack 2019-10-12 15:31:14 ALLOW TCP 14.207.198.36 ###.###.###.### 59844 3391 0 - 0 0 0 - - - RECEIVE |
2019-10-12 22:59:48 |
| 14.207.193.10 | attackspambots | xmlrpc attack |
2019-07-17 15:49:59 |
| 14.207.197.107 | attackbotsspam | Unauthorized connection attempt from IP address 14.207.197.107 on Port 445(SMB) |
2019-07-12 07:39:52 |
| 14.207.195.121 | attack | xmlrpc attack |
2019-07-11 08:08:12 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.207.19.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42176
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.207.19.107. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400
;; Query time: 71 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 13:27:17 CST 2022
;; MSG SIZE rcvd: 106
107.19.207.14.in-addr.arpa domain name pointer mx-ll-14.207.19-107.dynamic.3bb.in.th.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
107.19.207.14.in-addr.arpa name = mx-ll-14.207.19-107.dynamic.3bb.in.th.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 196.52.43.123 | attackbots | " " |
2019-06-21 18:48:23 |
| 14.184.111.172 | attack | Jun 21 11:14:01 riskplan-s sshd[20135]: Address 14.184.111.172 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Jun 21 11:14:01 riskplan-s sshd[20135]: Invalid user admin from 14.184.111.172 Jun 21 11:14:01 riskplan-s sshd[20135]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.184.111.172 Jun 21 11:14:03 riskplan-s sshd[20135]: Failed password for invalid user admin from 14.184.111.172 port 53699 ssh2 Jun 21 11:14:04 riskplan-s sshd[20135]: Connection closed by 14.184.111.172 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.184.111.172 |
2019-06-21 18:59:22 |
| 82.221.105.6 | attackbots | 21.06.2019 09:21:30 Connection to port 1777 blocked by firewall |
2019-06-21 19:23:59 |
| 203.95.212.41 | attackbots | Automatic report - Web App Attack |
2019-06-21 18:32:56 |
| 183.189.200.98 | attackspam | Jun 21 11:20:43 Ubuntu-1404-trusty-64-minimal sshd\[1984\]: Invalid user admin from 183.189.200.98 Jun 21 11:20:43 Ubuntu-1404-trusty-64-minimal sshd\[1984\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.189.200.98 Jun 21 11:20:45 Ubuntu-1404-trusty-64-minimal sshd\[1984\]: Failed password for invalid user admin from 183.189.200.98 port 54843 ssh2 Jun 21 11:20:47 Ubuntu-1404-trusty-64-minimal sshd\[1984\]: Failed password for invalid user admin from 183.189.200.98 port 54843 ssh2 Jun 21 11:20:50 Ubuntu-1404-trusty-64-minimal sshd\[1984\]: Failed password for invalid user admin from 183.189.200.98 port 54843 ssh2 |
2019-06-21 19:21:03 |
| 106.12.17.243 | attack | Jun 21 11:21:50 nextcloud sshd\[2938\]: Invalid user tmpuser from 106.12.17.243 Jun 21 11:21:50 nextcloud sshd\[2938\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.17.243 Jun 21 11:21:52 nextcloud sshd\[2938\]: Failed password for invalid user tmpuser from 106.12.17.243 port 42308 ssh2 ... |
2019-06-21 19:02:59 |
| 113.176.89.116 | attackbots | Jun 21 11:21:23 MainVPS sshd[18127]: Invalid user csadmin from 113.176.89.116 port 33682 Jun 21 11:21:23 MainVPS sshd[18127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.176.89.116 Jun 21 11:21:23 MainVPS sshd[18127]: Invalid user csadmin from 113.176.89.116 port 33682 Jun 21 11:21:25 MainVPS sshd[18127]: Failed password for invalid user csadmin from 113.176.89.116 port 33682 ssh2 Jun 21 11:23:38 MainVPS sshd[18275]: Invalid user pi from 113.176.89.116 port 56042 ... |
2019-06-21 18:29:30 |
| 117.1.94.77 | attackspam | Automatic report - SSH Brute-Force Attack |
2019-06-21 18:45:16 |
| 91.221.137.200 | attack | Wordpress attack |
2019-06-21 18:33:44 |
| 185.254.120.6 | attack | Jun 21 12:46:01 mail sshd\[26577\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.254.120.6 user=root Jun 21 12:46:03 mail sshd\[26577\]: Failed password for root from 185.254.120.6 port 39604 ssh2 Jun 21 12:46:06 mail sshd\[26697\]: Invalid user admin from 185.254.120.6 port 40829 Jun 21 12:46:06 mail sshd\[26697\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.254.120.6 Jun 21 12:46:08 mail sshd\[26697\]: Failed password for invalid user admin from 185.254.120.6 port 40829 ssh2 ... |
2019-06-21 18:52:36 |
| 178.128.79.169 | attackbots | Jun 21 11:21:38 MK-Soft-Root2 sshd\[15030\]: Invalid user test from 178.128.79.169 port 46522 Jun 21 11:21:38 MK-Soft-Root2 sshd\[15030\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.79.169 Jun 21 11:21:39 MK-Soft-Root2 sshd\[15030\]: Failed password for invalid user test from 178.128.79.169 port 46522 ssh2 ... |
2019-06-21 19:07:47 |
| 185.220.102.4 | attackbotsspam | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.102.4 user=root Failed password for root from 185.220.102.4 port 42387 ssh2 Failed password for root from 185.220.102.4 port 42387 ssh2 Failed password for root from 185.220.102.4 port 42387 ssh2 Failed password for root from 185.220.102.4 port 42387 ssh2 |
2019-06-21 19:11:31 |
| 111.21.99.227 | attackspambots | Automatic report - Web App Attack |
2019-06-21 19:23:07 |
| 197.43.153.236 | attack | Jun 21 12:21:34 srv-4 sshd\[10418\]: Invalid user admin from 197.43.153.236 Jun 21 12:21:34 srv-4 sshd\[10418\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.43.153.236 Jun 21 12:21:36 srv-4 sshd\[10418\]: Failed password for invalid user admin from 197.43.153.236 port 51116 ssh2 ... |
2019-06-21 19:08:14 |
| 115.159.185.205 | attackspam | Jun 21 11:02:35 Ubuntu-1404-trusty-64-minimal sshd\[21223\]: Invalid user tomcat from 115.159.185.205 Jun 21 11:02:35 Ubuntu-1404-trusty-64-minimal sshd\[21223\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.185.205 Jun 21 11:02:37 Ubuntu-1404-trusty-64-minimal sshd\[21223\]: Failed password for invalid user tomcat from 115.159.185.205 port 57408 ssh2 Jun 21 11:20:50 Ubuntu-1404-trusty-64-minimal sshd\[2031\]: Invalid user demo from 115.159.185.205 Jun 21 11:20:50 Ubuntu-1404-trusty-64-minimal sshd\[2031\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.185.205 |
2019-06-21 19:21:34 |