城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 14.207.19.147 | attack | Feb 22 05:55:07 h2177944 kernel: \[5545142.819751\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=14.207.19.147 DST=85.214.117.9 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=26343 DF PROTO=TCP SPT=50813 DPT=441 WINDOW=14400 RES=0x00 SYN URGP=0 Feb 22 05:55:07 h2177944 kernel: \[5545142.819765\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=14.207.19.147 DST=85.214.117.9 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=26343 DF PROTO=TCP SPT=50813 DPT=441 WINDOW=14400 RES=0x00 SYN URGP=0 Feb 22 05:55:08 h2177944 kernel: \[5545143.816097\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=14.207.19.147 DST=85.214.117.9 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=26344 DF PROTO=TCP SPT=50813 DPT=441 WINDOW=14400 RES=0x00 SYN URGP=0 Feb 22 05:55:08 h2177944 kernel: \[5545143.816111\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=14.207.19.147 DST=85.214.117.9 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=26344 DF PROTO=TCP SPT=50813 DPT=441 WINDOW=14400 RES=0x00 SYN URGP=0 Feb 22 05:55:10 h2177944 kernel: \[5545145.813180\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=14.207.19.147 DST=85.2 |
2020-02-22 13:09:42 |
| 14.207.19.53 | attackbots | Unauthorized connection attempt detected from IP address 14.207.19.53 to port 80 |
2020-01-01 03:27:02 |
| 14.207.198.252 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:50:38. |
2019-12-21 03:35:12 |
| 14.207.199.165 | attackbotsspam | Unauthorized connection attempt from IP address 14.207.199.165 on Port 445(SMB) |
2019-12-01 04:49:53 |
| 14.207.19.2 | attack | 19/11/17@17:43:14: FAIL: IoT-Telnet address from=14.207.19.2 ... |
2019-11-18 07:43:47 |
| 14.207.196.2 | attack | Unauthorized connection attempt from IP address 14.207.196.2 on Port 445(SMB) |
2019-11-14 04:11:38 |
| 14.207.197.233 | attackbots | 54068/udp [2019-10-28]1pkt |
2019-10-29 03:05:58 |
| 14.207.198.36 | attackbots | rdp brute-force attack 2019-10-12 15:31:14 ALLOW TCP 14.207.198.36 ###.###.###.### 59844 3391 0 - 0 0 0 - - - RECEIVE |
2019-10-12 22:59:48 |
| 14.207.193.10 | attackspambots | xmlrpc attack |
2019-07-17 15:49:59 |
| 14.207.197.107 | attackbotsspam | Unauthorized connection attempt from IP address 14.207.197.107 on Port 445(SMB) |
2019-07-12 07:39:52 |
| 14.207.195.121 | attack | xmlrpc attack |
2019-07-11 08:08:12 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.207.19.72
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24500
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.207.19.72. IN A
;; AUTHORITY SECTION:
. 600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400
;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 13:27:34 CST 2022
;; MSG SIZE rcvd: 105
72.19.207.14.in-addr.arpa domain name pointer mx-ll-14.207.19-72.dynamic.3bb.in.th.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
72.19.207.14.in-addr.arpa name = mx-ll-14.207.19-72.dynamic.3bb.in.th.
Authoritative answers can be found from:
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 203.206.131.1 | attack | (sshd) Failed SSH login from 203.206.131.1 (AU/Australia/203-206-131-1.perm.iinet.net.au): 10 in the last 3600 secs |
2020-04-12 20:58:14 |
| 185.176.27.26 | attackbots | scans 13 times in preceeding hours on the ports (in chronological order) 20399 20400 20398 20494 20493 20492 20588 20695 20696 20697 20789 20791 20790 resulting in total of 79 scans from 185.176.27.0/24 block. |
2020-04-12 21:11:07 |
| 118.145.8.50 | attack | 2020-04-12T12:03:14.322270abusebot-2.cloudsearch.cf sshd[15795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.145.8.50 user=root 2020-04-12T12:03:16.153923abusebot-2.cloudsearch.cf sshd[15795]: Failed password for root from 118.145.8.50 port 42780 ssh2 2020-04-12T12:05:39.325704abusebot-2.cloudsearch.cf sshd[15925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.145.8.50 user=root 2020-04-12T12:05:41.068935abusebot-2.cloudsearch.cf sshd[15925]: Failed password for root from 118.145.8.50 port 55941 ssh2 2020-04-12T12:09:13.758541abusebot-2.cloudsearch.cf sshd[16159]: Invalid user guest from 118.145.8.50 port 47452 2020-04-12T12:09:13.764370abusebot-2.cloudsearch.cf sshd[16159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.145.8.50 2020-04-12T12:09:13.758541abusebot-2.cloudsearch.cf sshd[16159]: Invalid user guest from 118.145.8.50 port 47452 2020-0 ... |
2020-04-12 21:00:27 |
| 69.84.106.11 | attack | Honeypot attack, port: 81, PTR: d-69-84-106-11.fl.cpe.atlanticbb.net. |
2020-04-12 21:01:56 |
| 95.85.12.122 | attackbotsspam | Apr 12 15:02:24 ift sshd\[45661\]: Invalid user technical from 95.85.12.122Apr 12 15:02:26 ift sshd\[45661\]: Failed password for invalid user technical from 95.85.12.122 port 15690 ssh2Apr 12 15:05:57 ift sshd\[46324\]: Failed password for root from 95.85.12.122 port 25907 ssh2Apr 12 15:09:23 ift sshd\[46565\]: Invalid user bush from 95.85.12.122Apr 12 15:09:25 ift sshd\[46565\]: Failed password for invalid user bush from 95.85.12.122 port 36098 ssh2 ... |
2020-04-12 20:53:54 |
| 5.196.75.178 | attack | Unauthorised connection attempt detected at AUO NODE 1. System is sshd. Protected by AUO Stack Web Application Firewall (WAF) |
2020-04-12 21:12:02 |
| 106.13.139.26 | attack | Apr 12 19:40:16 webhost01 sshd[13124]: Failed password for root from 106.13.139.26 port 54720 ssh2 ... |
2020-04-12 21:10:38 |
| 49.235.77.83 | attack | Apr 12 15:13:04 ArkNodeAT sshd\[20241\]: Invalid user friend from 49.235.77.83 Apr 12 15:13:04 ArkNodeAT sshd\[20241\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.77.83 Apr 12 15:13:07 ArkNodeAT sshd\[20241\]: Failed password for invalid user friend from 49.235.77.83 port 53350 ssh2 |
2020-04-12 21:18:12 |
| 77.243.191.26 | attackbotsspam | openvas |
2020-04-12 21:32:20 |
| 37.187.195.209 | attack | Apr 12 14:09:08 sso sshd[32509]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.195.209 Apr 12 14:09:10 sso sshd[32509]: Failed password for invalid user telnet from 37.187.195.209 port 38201 ssh2 ... |
2020-04-12 21:06:43 |
| 58.109.151.204 | attack | [MK-VM4] Blocked by UFW |
2020-04-12 20:56:35 |
| 190.97.246.15 | attack | Autoban 190.97.246.15 AUTH/CONNECT |
2020-04-12 21:16:39 |
| 222.186.30.76 | attack | Apr 12 14:51:52 vmd38886 sshd\[29258\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.76 user=root Apr 12 14:51:54 vmd38886 sshd\[29258\]: Failed password for root from 222.186.30.76 port 20037 ssh2 Apr 12 14:51:57 vmd38886 sshd\[29258\]: Failed password for root from 222.186.30.76 port 20037 ssh2 |
2020-04-12 20:54:59 |
| 109.99.254.50 | attackbotsspam | Automatic report - Port Scan Attack |
2020-04-12 20:49:20 |
| 51.83.98.104 | attack | Apr 12 14:00:06 vps sshd[30042]: Failed password for root from 51.83.98.104 port 51982 ssh2 Apr 12 14:05:27 vps sshd[30492]: Failed password for root from 51.83.98.104 port 45978 ssh2 ... |
2020-04-12 20:50:22 |