城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 14.207.19.147 | attack | Feb 22 05:55:07 h2177944 kernel: \[5545142.819751\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=14.207.19.147 DST=85.214.117.9 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=26343 DF PROTO=TCP SPT=50813 DPT=441 WINDOW=14400 RES=0x00 SYN URGP=0 Feb 22 05:55:07 h2177944 kernel: \[5545142.819765\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=14.207.19.147 DST=85.214.117.9 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=26343 DF PROTO=TCP SPT=50813 DPT=441 WINDOW=14400 RES=0x00 SYN URGP=0 Feb 22 05:55:08 h2177944 kernel: \[5545143.816097\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=14.207.19.147 DST=85.214.117.9 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=26344 DF PROTO=TCP SPT=50813 DPT=441 WINDOW=14400 RES=0x00 SYN URGP=0 Feb 22 05:55:08 h2177944 kernel: \[5545143.816111\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=14.207.19.147 DST=85.214.117.9 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=26344 DF PROTO=TCP SPT=50813 DPT=441 WINDOW=14400 RES=0x00 SYN URGP=0 Feb 22 05:55:10 h2177944 kernel: \[5545145.813180\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=14.207.19.147 DST=85.2 |
2020-02-22 13:09:42 |
| 14.207.19.53 | attackbots | Unauthorized connection attempt detected from IP address 14.207.19.53 to port 80 |
2020-01-01 03:27:02 |
| 14.207.198.252 | attackspambots | Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:50:38. |
2019-12-21 03:35:12 |
| 14.207.199.165 | attackbotsspam | Unauthorized connection attempt from IP address 14.207.199.165 on Port 445(SMB) |
2019-12-01 04:49:53 |
| 14.207.19.2 | attack | 19/11/17@17:43:14: FAIL: IoT-Telnet address from=14.207.19.2 ... |
2019-11-18 07:43:47 |
| 14.207.196.2 | attack | Unauthorized connection attempt from IP address 14.207.196.2 on Port 445(SMB) |
2019-11-14 04:11:38 |
| 14.207.197.233 | attackbots | 54068/udp [2019-10-28]1pkt |
2019-10-29 03:05:58 |
| 14.207.198.36 | attackbots | rdp brute-force attack 2019-10-12 15:31:14 ALLOW TCP 14.207.198.36 ###.###.###.### 59844 3391 0 - 0 0 0 - - - RECEIVE |
2019-10-12 22:59:48 |
| 14.207.193.10 | attackspambots | xmlrpc attack |
2019-07-17 15:49:59 |
| 14.207.197.107 | attackbotsspam | Unauthorized connection attempt from IP address 14.207.197.107 on Port 445(SMB) |
2019-07-12 07:39:52 |
| 14.207.195.121 | attack | xmlrpc attack |
2019-07-11 08:08:12 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.207.19.76
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8834
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;14.207.19.76. IN A
;; AUTHORITY SECTION:
. 599 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400
;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 13:27:35 CST 2022
;; MSG SIZE rcvd: 10576.19.207.14.in-addr.arpa domain name pointer mx-ll-14.207.19-76.dynamic.3bb.in.th.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
76.19.207.14.in-addr.arpa name = mx-ll-14.207.19-76.dynamic.3bb.in.th.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 120.1.176.229 | attackspambots | Unauthorised access (Oct 9) SRC=120.1.176.229 LEN=40 TTL=49 ID=60228 TCP DPT=8080 WINDOW=40138 SYN Unauthorised access (Oct 9) SRC=120.1.176.229 LEN=40 TTL=49 ID=59051 TCP DPT=8080 WINDOW=43868 SYN Unauthorised access (Oct 8) SRC=120.1.176.229 LEN=40 TTL=49 ID=58762 TCP DPT=8080 WINDOW=43868 SYN Unauthorised access (Oct 6) SRC=120.1.176.229 LEN=40 TTL=49 ID=30336 TCP DPT=8080 WINDOW=40138 SYN |
2019-10-10 00:05:21 |
| 37.58.110.150 | attack | 37.58.110.150 - - [09/Oct/2019:15:40:25 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 37.58.110.150 - - [09/Oct/2019:15:40:26 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 37.58.110.150 - - [09/Oct/2019:15:40:26 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 37.58.110.150 - - [09/Oct/2019:15:40:27 +0200] "POST /wp-login.php HTTP/1.1" 200 1489 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 37.58.110.150 - - [09/Oct/2019:15:40:27 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 37.58.110.150 - - [09/Oct/2019:15:40:28 +0200] "POST /wp-login.php HTTP/1.1" 200 1491 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2019-10-10 00:11:04 |
| 222.252.45.194 | attackspambots | Unauthorized connection attempt from IP address 222.252.45.194 on Port 445(SMB) |
2019-10-10 00:44:45 |
| 122.53.103.130 | attackspambots | Honeypot hit. |
2019-10-10 00:23:04 |
| 192.241.183.220 | attackspam | Oct 9 17:10:20 tux-35-217 sshd\[21550\]: Invalid user 1QAZXSW23EDC from 192.241.183.220 port 33644 Oct 9 17:10:20 tux-35-217 sshd\[21550\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.183.220 Oct 9 17:10:22 tux-35-217 sshd\[21550\]: Failed password for invalid user 1QAZXSW23EDC from 192.241.183.220 port 33644 ssh2 Oct 9 17:14:31 tux-35-217 sshd\[21572\]: Invalid user SaoPaolo@123 from 192.241.183.220 port 41037 Oct 9 17:14:31 tux-35-217 sshd\[21572\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.183.220 ... |
2019-10-10 00:09:53 |
| 171.114.170.175 | attackbotsspam | $f2bV_matches |
2019-10-10 00:04:27 |
| 49.235.7.47 | attack | Oct 9 17:30:28 tuxlinux sshd[46526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.7.47 user=root Oct 9 17:30:30 tuxlinux sshd[46526]: Failed password for root from 49.235.7.47 port 53314 ssh2 Oct 9 17:30:28 tuxlinux sshd[46526]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.7.47 user=root Oct 9 17:30:30 tuxlinux sshd[46526]: Failed password for root from 49.235.7.47 port 53314 ssh2 Oct 9 17:49:01 tuxlinux sshd[46824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.7.47 user=root ... |
2019-10-10 00:05:41 |
| 218.146.168.239 | attack | Oct 8 20:06:18 Ubuntu-1404-trusty-64-minimal sshd\[23693\]: Invalid user zabbix from 218.146.168.239 Oct 8 20:06:18 Ubuntu-1404-trusty-64-minimal sshd\[23693\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.146.168.239 Oct 8 20:06:20 Ubuntu-1404-trusty-64-minimal sshd\[23693\]: Failed password for invalid user zabbix from 218.146.168.239 port 54550 ssh2 Oct 9 16:07:35 Ubuntu-1404-trusty-64-minimal sshd\[12741\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.146.168.239 user=nobody Oct 9 16:07:37 Ubuntu-1404-trusty-64-minimal sshd\[12741\]: Failed password for nobody from 218.146.168.239 port 59838 ssh2 |
2019-10-10 00:14:01 |
| 198.108.67.79 | attackbotsspam | 10/09/2019-07:33:10.980098 198.108.67.79 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-10-10 00:35:43 |
| 118.27.39.224 | attack | Oct 9 17:55:14 MK-Soft-VM6 sshd[19882]: Failed password for root from 118.27.39.224 port 54696 ssh2 ... |
2019-10-10 00:13:25 |
| 189.120.135.242 | attackspambots | 2019-10-09T16:07:05.109894abusebot-5.cloudsearch.cf sshd\[19087\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.120.135.242 user=root |
2019-10-10 00:28:12 |
| 67.207.91.133 | attackbotsspam | Oct 9 12:41:26 ny01 sshd[2538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.207.91.133 Oct 9 12:41:29 ny01 sshd[2538]: Failed password for invalid user Original@2017 from 67.207.91.133 port 37328 ssh2 Oct 9 12:45:59 ny01 sshd[2946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.207.91.133 |
2019-10-10 00:47:13 |
| 118.25.97.93 | attackbotsspam | Fail2Ban - SSH Bruteforce Attempt |
2019-10-10 00:41:12 |
| 190.217.71.15 | attack | Oct 9 12:36:12 venus sshd\[31703\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.217.71.15 user=root Oct 9 12:36:14 venus sshd\[31703\]: Failed password for root from 190.217.71.15 port 54053 ssh2 Oct 9 12:40:29 venus sshd\[31742\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.217.71.15 user=root ... |
2019-10-10 00:45:32 |
| 86.105.53.166 | attack | $f2bV_matches |
2019-10-10 00:32:53 |