206.214.12.112

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Antigua and Barbuda

运营商(isp): Cable & Wireless Antigua and Barbuda Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	(pop3d) Failed POP3 login from 206.214.12.112 (AG/Antigua and Barbuda/206-214-12-112.candw.ag): 1 in the last 3600 secs	2019-07-20 10:31:32

相同子网IP讨论:

IP	类型	评论内容	时间
206.214.12.43	attackspambots	(eximsyntax) Exim syntax errors from 206.214.12.43 (AG/Antigua and Barbuda/206-214-12-43.candw.ag): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-04-10 16:37:17 SMTP call from [206.214.12.43] dropped: too many syntax or protocol errors (last command was "?\034?\032?\027?\031?\034?\033?\030?\032?\026?\016?\r?\v?\f? ?")	2020-04-11 00:54:01
206.214.12.30	attackspambots	Invalid user admin from 206.214.12.30 port 34098	2020-01-19 02:58:11
206.214.12.30	attackspam	Unauthorized connection attempt detected from IP address 206.214.12.30 to port 22 [J]	2020-01-18 04:52:55
206.214.12.43	attack	Jan 1 07:18:27 pl2server sshd[29283]: reveeclipse mapping checking getaddrinfo for 206-214-12-43.candw.ag [206.214.12.43] failed - POSSIBLE BREAK-IN ATTEMPT! Jan 1 07:18:27 pl2server sshd[29283]: Invalid user admin from 206.214.12.43 Jan 1 07:18:30 pl2server sshd[29283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.214.12.43 Jan 1 07:18:32 pl2server sshd[29283]: Failed password for invalid user admin from 206.214.12.43 port 60553 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=206.214.12.43	2020-01-01 22:51:31

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 206.214.12.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30973
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;206.214.12.112.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071902 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jul 20 10:31:25 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

112.12.214.206.in-addr.arpa domain name pointer 206-214-12-112.candw.ag.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
112.12.214.206.in-addr.arpa	name = 206-214-12-112.candw.ag.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
114.152.43.232	attack	Port probing on unauthorized port 22	2020-06-28 12:34:31
103.78.215.150	attackspambots	$f2bV_matches	2020-06-28 12:29:52
85.209.0.247	attackspam	Jun 28 05:56:20 hell sshd[3029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.209.0.247 ...	2020-06-28 12:30:26
107.172.249.134	attack	Fail2Ban Ban Triggered	2020-06-28 12:37:12
137.117.13.132	attack	2020-06-28T04:19:53.208994vps773228.ovh.net sshd[11348]: Failed password for root from 137.117.13.132 port 5623 ssh2 2020-06-28T04:26:44.286467vps773228.ovh.net sshd[11424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.117.13.132 user=root 2020-06-28T04:26:46.751996vps773228.ovh.net sshd[11424]: Failed password for root from 137.117.13.132 port 63794 ssh2 2020-06-28T06:27:11.075732vps773228.ovh.net sshd[12423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.117.13.132 user=root 2020-06-28T06:27:13.349568vps773228.ovh.net sshd[12423]: Failed password for root from 137.117.13.132 port 57985 ssh2 ...	2020-06-28 12:40:51
91.90.36.174	attack	(sshd) Failed SSH login from 91.90.36.174 (RU/Russia/Omskaya Oblast/Omsk/174-36-90-91.omsk.mts.mkc-omsk.ru/[AS41771 MTS PJSC]): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jun 28 03:56:44 host01 sshd[17866]: Invalid user use from 91.90.36.174 port 47414	2020-06-28 12:30:43
222.186.173.142	attackspambots	Jun 28 05:56:57 sso sshd[25590]: Failed password for root from 222.186.173.142 port 5668 ssh2 Jun 28 05:57:07 sso sshd[25590]: Failed password for root from 222.186.173.142 port 5668 ssh2 ...	2020-06-28 12:14:49
200.133.39.24	attackbots	2020-06-28T03:53:26.325103shield sshd\[20682\]: Invalid user celia from 200.133.39.24 port 46112 2020-06-28T03:53:26.329040shield sshd\[20682\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200-133-39-24.compute.rnp.br 2020-06-28T03:53:28.286028shield sshd\[20682\]: Failed password for invalid user celia from 200.133.39.24 port 46112 ssh2 2020-06-28T03:57:14.643195shield sshd\[22128\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200-133-39-24.compute.rnp.br user=root 2020-06-28T03:57:16.227826shield sshd\[22128\]: Failed password for root from 200.133.39.24 port 45238 ssh2	2020-06-28 12:09:30
51.38.225.124	attackbotsspam	Jun 28 05:56:45 debian-2gb-nbg1-2 kernel: \[15575254.618225\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=51.38.225.124 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=49750 PROTO=TCP SPT=48296 DPT=8827 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-28 12:31:09
212.47.229.4	attack	Jun 28 05:57:11 vmd48417 sshd[23052]: Failed password for root from 212.47.229.4 port 57738 ssh2	2020-06-28 12:11:12
193.169.252.21	attack	SmallBizIT.US 3 packets to udp(30120,37810)	2020-06-28 12:03:48
85.138.240.40	attack	Jun 28 05:57:13 ns382633 sshd\[19045\]: Invalid user pi from 85.138.240.40 port 57632 Jun 28 05:57:13 ns382633 sshd\[19046\]: Invalid user pi from 85.138.240.40 port 57634 Jun 28 05:57:13 ns382633 sshd\[19045\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.138.240.40 Jun 28 05:57:13 ns382633 sshd\[19046\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.138.240.40 Jun 28 05:57:15 ns382633 sshd\[19045\]: Failed password for invalid user pi from 85.138.240.40 port 57632 ssh2 Jun 28 05:57:15 ns382633 sshd\[19046\]: Failed password for invalid user pi from 85.138.240.40 port 57634 ssh2	2020-06-28 12:09:17
91.232.96.122	attackspambots	2020-06-28T05:56:52+02:00 exim[2919]: [1\47] 1jpOR1-0000l5-4J H=impress.kumsoft.com (impress.chocualo.com) [91.232.96.122] F= rejected after DATA: This message scored 101.1 spam points.	2020-06-28 12:16:56
189.59.5.81	attackbots	Brute forcing email accounts	2020-06-28 12:33:29
62.33.211.129	attackbots	Dovecot Invalid User Login Attempt.	2020-06-28 12:15:46

最近上报的IP列表

136.60.94.102	126.82.97.113	58.186.177.96	92.11.85.58
15.158.138.97	37.187.74.146	87.31.134.115	95.79.81.206
221.173.26.166	34.141.54.184	123.253.143.106	228.213.17.9
98.255.18.1	202.71.92.146	25.139.32.61	106.19.98.164
201.77.138.198	134.209.20.2	104.254.90.251	185.143.221.55