14.207.207.49 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Thailand

运营商(isp): Triple T Internet PCL

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Attempt to attack host OS, exploiting network vulnerabilities, on 18-12-2019 14:35:09.	2019-12-19 01:32:25

相同子网IP讨论:

IP	类型	评论内容	时间
14.207.207.181	attackspam	Unauthorized connection attempt from IP address 14.207.207.181 on Port 445(SMB)	2020-08-21 03:40:37
14.207.207.191	attackbotsspam	May 11 13:47:03 vbuntu sshd[29020]: warning: /etc/hosts.allow, line 11: can't verify hostname: getaddrinfo(mx-ll-14.207.207-191.dynamic.3bb.in.th, AF_INET) failed May 11 13:47:03 vbuntu sshd[29020]: refused connect from 14.207.207.191 (14.207.207.191) May 11 13:47:05 vbuntu sshd[29026]: warning: /etc/hosts.allow, line 11: can't verify hostname: getaddrinfo(mx-ll-14.207.207-191.dynamic.3bb.in.th, AF_INET) failed May 11 13:47:05 vbuntu sshd[29026]: refused connect from 14.207.207.191 (14.207.207.191) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=14.207.207.191	2020-05-12 01:21:04
14.207.207.12	attackspambots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/14.207.207.12/ TH - 1H : (18) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : TH NAME ASN : ASN45758 IP : 14.207.207.12 CIDR : 14.207.0.0/16 PREFIX COUNT : 64 UNIQUE IP COUNT : 1069568 ATTACKS DETECTED ASN45758 : 1H - 1 3H - 2 6H - 2 12H - 2 24H - 6 DateTime : 2019-11-05 07:28:48 INFO : Server 403 - Looking for resource vulnerabilities Detected and Blocked by ADMIN - data recovery	2019-11-05 15:55:47

类型

评论内容

时间

14.207.207.181

attackspam

Unauthorized connection attempt from IP address 14.207.207.181 on Port 445(SMB)

2020-08-21 03:40:37

14.207.207.191

attackbotsspam

May 11 13:47:03 vbuntu sshd[29020]: warning: /etc/hosts.allow, line 11: can't verify hostname: getaddrinfo(mx-ll-14.207.207-191.dynamic.3bb.in.th, AF_INET) failed
May 11 13:47:03 vbuntu sshd[29020]: refused connect from 14.207.207.191 (14.207.207.191)
May 11 13:47:05 vbuntu sshd[29026]: warning: /etc/hosts.allow, line 11: can't verify hostname: getaddrinfo(mx-ll-14.207.207-191.dynamic.3bb.in.th, AF_INET) failed
May 11 13:47:05 vbuntu sshd[29026]: refused connect from 14.207.207.191 (14.207.207.191)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=14.207.207.191

2020-05-12 01:21:04

14.207.207.12

attackspambots

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/14.207.207.12/ 
 
 TH - 1H : (18)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : TH 
 NAME ASN : ASN45758 
 
 IP : 14.207.207.12 
 
 CIDR : 14.207.0.0/16 
 
 PREFIX COUNT : 64 
 
 UNIQUE IP COUNT : 1069568 
 
 
 ATTACKS DETECTED ASN45758 :  
  1H - 1 
  3H - 2 
  6H - 2 
 12H - 2 
 24H - 6 
 
 DateTime : 2019-11-05 07:28:48 
 
 INFO : Server 403 - Looking for resource vulnerabilities Detected and Blocked by ADMIN  - data recovery

2019-11-05 15:55:47

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.207.207.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26286
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.207.207.49.			IN	A

;; AUTHORITY SECTION:
.			445	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121800 1800 900 604800 86400

;; Query time: 114 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Dec 19 01:32:22 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

49.207.207.14.in-addr.arpa domain name pointer mx-ll-14.207.207-49.dynamic.3bb.in.th.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
49.207.207.14.in-addr.arpa	name = mx-ll-14.207.207-49.dynamic.3bb.in.th.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
71.6.167.142	attackbotsspam	Dec 21 20:07:20 debian-2gb-nbg1-2 kernel: \[607995.363412\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=71.6.167.142 DST=195.201.40.59 LEN=44 TOS=0x10 PREC=0x00 TTL=110 ID=5791 PROTO=TCP SPT=29011 DPT=8112 WINDOW=17903 RES=0x00 SYN URGP=0	2019-12-22 05:55:30
46.101.224.184	attackbots	2019-12-21T18:15:20.869111shield sshd\[4313\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.224.184 user=root 2019-12-21T18:15:22.689650shield sshd\[4313\]: Failed password for root from 46.101.224.184 port 53920 ssh2 2019-12-21T18:20:25.579724shield sshd\[6464\]: Invalid user Liebert from 46.101.224.184 port 57980 2019-12-21T18:20:25.585004shield sshd\[6464\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.224.184 2019-12-21T18:20:27.279481shield sshd\[6464\]: Failed password for invalid user Liebert from 46.101.224.184 port 57980 ssh2	2019-12-22 06:26:09
106.75.113.55	attackspambots	SIPVicious Scanner Detection	2019-12-22 06:04:54
222.186.169.192	attackbots	$f2bV_matches	2019-12-22 05:53:52
42.112.155.95	attackbotsspam	Dec 21 15:47:49 arianus sshd\[8004\]: Invalid user Administrator from 42.112.155.95 port 33952 ...	2019-12-22 06:08:56
106.12.92.65	attackspambots	Dec 21 22:45:29 cp sshd[13823]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.92.65	2019-12-22 05:52:17
190.147.159.34	attack	Dec 21 01:36:51 * sshd[12773]: Failed password for invalid user mcnay from 190.147.159.34 port 60949 ssh2 Dec 21 01:55:09 * sshd[17391]: Failed password for invalid user qd from 190.147.159.34 port 44584 ssh2 Dec 21 02:01:00 * sshd[17519]: Failed password for invalid user cn from 190.147.159.34 port 48657 ssh2 Dec 21 02:07:24 * sshd[17636]: Failed password for invalid user $$$$ from 190.147.159.34 port 52812 ssh2 Dec 21 02:14:20 * sshd[17862]: Failed password for invalid user champagne123 from 190.147.159.34 port 56899 ssh2 Dec 21 02:20:29 * sshd[18140]: Failed password for invalid user user from 190.147.159.34 port 32882 ssh2 Dec 21 02:26:42 * sshd[18232]: Failed password for invalid user goose from 190.147.159.34 port 36988 ssh2 Dec 21 02:33:09 * sshd[18342]: Failed password for invalid user 123456 from 190.147.159.34 port 41010 ssh2 Dec 21 02:39:21 * sshd[18501]: Failed password for invalid user Qazwsxg from 190.147.159.34 port 45179 ssh2 Dec 21 02:45:39 * sshd[18609]: Failed password f	2019-12-22 06:10:29
61.8.69.98	attackspam	Dec 21 15:05:39 ny01 sshd[27856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.8.69.98 Dec 21 15:05:41 ny01 sshd[27856]: Failed password for invalid user !!! from 61.8.69.98 port 53264 ssh2 Dec 21 15:11:58 ny01 sshd[28448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.8.69.98	2019-12-22 06:10:54
110.42.4.3	attack	Dec 21 22:39:56 h2812830 sshd[10618]: Invalid user murai from 110.42.4.3 port 43666 Dec 21 22:39:56 h2812830 sshd[10618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.42.4.3 Dec 21 22:39:56 h2812830 sshd[10618]: Invalid user murai from 110.42.4.3 port 43666 Dec 21 22:39:57 h2812830 sshd[10618]: Failed password for invalid user murai from 110.42.4.3 port 43666 ssh2 Dec 21 22:56:58 h2812830 sshd[10823]: Invalid user praveen from 110.42.4.3 port 48064 ...	2019-12-22 06:16:31
51.91.101.222	attack	$f2bV_matches	2019-12-22 06:25:04
123.140.114.252	attack	Repeated brute force against a port	2019-12-22 06:16:02
222.168.65.42	attack	Dec 21 15:47:22 icecube postfix/smtpd[2390]: NOQUEUE: reject: RCPT from mail.rdc.faw.com.cn[222.168.65.42]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo=	2019-12-22 06:29:57
106.12.176.17	attack	[ssh] SSH attack	2019-12-22 06:30:33
159.203.201.29	attackspam	Unauthorized connection attempt detected from IP address 159.203.201.29 to port 8443	2019-12-22 06:01:58
182.214.170.72	attack	Dec 21 12:26:05 tdfoods sshd\[875\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.214.170.72 user=backup Dec 21 12:26:07 tdfoods sshd\[875\]: Failed password for backup from 182.214.170.72 port 53254 ssh2 Dec 21 12:32:02 tdfoods sshd\[1411\]: Invalid user bausch from 182.214.170.72 Dec 21 12:32:02 tdfoods sshd\[1411\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.214.170.72 Dec 21 12:32:03 tdfoods sshd\[1411\]: Failed password for invalid user bausch from 182.214.170.72 port 58144 ssh2	2019-12-22 06:33:29

最近上报的IP列表

71.254.33.3	141.43.65.124	202.233.96.182	124.208.215.53
62.244.101.128	2.62.118.229	61.89.70.128	86.97.110.54
8.13.98.21	29.44.196.114	121.170.78.217	62.119.201.105
42.80.245.243	64.74.247.163	40.92.253.78	224.107.197.208
123.185.9.104	103.132.244.215	45.226.2.54	167.172.42.210