45.67.14.164 - IPInfo

基本信息:

城市(city): London

省份(region): England

国家(country): United Kingdom

运营商(isp): Net Stack Ltd

主机名(hostname): unknown

机构(organization): Wxz Networks Solutions Limited

使用类型(Usage Type): Commercial

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Bruteforce on SSH Honeypot	2020-01-15 08:44:57
attackspambots	Dec 5 07:29:21 XXX sshd[7298]: Invalid user ubnt from 45.67.14.164 port 59074	2019-12-05 22:09:36
attackspam	Nov 20 07:58:58 mintao sshd\[13029\]: Invalid user ubnt from 45.67.14.164\ Nov 20 07:58:58 mintao sshd\[13033\]: Invalid user admin from 45.67.14.164\	2019-11-20 17:24:02
attackspam	/var/log/messages:Jun 27 22:21:42 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1561674102.166:42936): pid=12154 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aexxxxxxx28-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=12155 suid=74 rport=40210 laddr=104.167.106.93 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.67.14.164 terminal=? res=success' /var/log/messages:Jun 27 22:21:42 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1561674102.170:42937): pid=12154 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aexxxxxxx28-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=12155 suid=74 rport=40210 laddr=104.167.106.93 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.67.14.164 terminal=? res=success' /var/log/messages:Jun 27 22:21:46 sanyalne........ -------------------------------	2019-06-30 05:29:18

相同子网IP讨论:

IP	类型	评论内容	时间
45.67.14.22	attackbotsspam	2020-09-16T19:01[Censored Hostname] sshd[13895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.67.14.22 2020-09-16T19:01[Censored Hostname] sshd[13895]: Invalid user admin from 45.67.14.22 port 42056 2020-09-16T19:01[Censored Hostname] sshd[13895]: Failed password for invalid user admin from 45.67.14.22 port 42056 ssh2[...]	2020-09-17 20:54:29
45.67.14.22	attackspam	2020-09-16T19:01[Censored Hostname] sshd[13895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.67.14.22 2020-09-16T19:01[Censored Hostname] sshd[13895]: Invalid user admin from 45.67.14.22 port 42056 2020-09-16T19:01[Censored Hostname] sshd[13895]: Failed password for invalid user admin from 45.67.14.22 port 42056 ssh2[...]	2020-09-17 13:05:50
45.67.14.22	attackspambots	2020-09-16T19:01[Censored Hostname] sshd[13895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.67.14.22 2020-09-16T19:01[Censored Hostname] sshd[13895]: Invalid user admin from 45.67.14.22 port 42056 2020-09-16T19:01[Censored Hostname] sshd[13895]: Failed password for invalid user admin from 45.67.14.22 port 42056 ssh2[...]	2020-09-17 04:12:34
45.67.14.22	attackbotsspam	2020-09-14T17:07:16.428140vps1033 sshd[15806]: Failed password for invalid user admin from 45.67.14.22 port 40492 ssh2 2020-09-14T17:07:17.462668vps1033 sshd[15829]: Invalid user ubnt from 45.67.14.22 port 48098 2020-09-14T17:07:17.469850vps1033 sshd[15829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.67.14.22 2020-09-14T17:07:17.462668vps1033 sshd[15829]: Invalid user ubnt from 45.67.14.22 port 48098 2020-09-14T17:07:19.444136vps1033 sshd[15829]: Failed password for invalid user ubnt from 45.67.14.22 port 48098 ssh2 ...	2020-09-16 01:19:41
45.67.14.22	attackbotsspam	2020-09-14T17:07:16.428140vps1033 sshd[15806]: Failed password for invalid user admin from 45.67.14.22 port 40492 ssh2 2020-09-14T17:07:17.462668vps1033 sshd[15829]: Invalid user ubnt from 45.67.14.22 port 48098 2020-09-14T17:07:17.469850vps1033 sshd[15829]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.67.14.22 2020-09-14T17:07:17.462668vps1033 sshd[15829]: Invalid user ubnt from 45.67.14.22 port 48098 2020-09-14T17:07:19.444136vps1033 sshd[15829]: Failed password for invalid user ubnt from 45.67.14.22 port 48098 ssh2 ...	2020-09-15 17:10:48
45.67.14.21	attackbots	pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.67.14.21 Invalid user ubnt from 45.67.14.21 port 57126 Failed password for invalid user ubnt from 45.67.14.21 port 57126 ssh2 pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.67.14.21 user=root Failed password for root from 45.67.14.21 port 49360 ssh2	2020-08-25 17:41:22
45.67.14.20	attackbots	Aug 25 03:40:40 XXX sshd[50043]: Invalid user ubnt from 45.67.14.20 port 39940	2020-08-25 12:12:11
45.67.14.21	attackbots	2020-08-16T20:38:41.486404server.espacesoutien.com sshd[4966]: Invalid user ubnt from 45.67.14.21 port 54928 2020-08-16T20:38:41.497812server.espacesoutien.com sshd[4966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.67.14.21 2020-08-16T20:38:41.486404server.espacesoutien.com sshd[4966]: Invalid user ubnt from 45.67.14.21 port 54928 2020-08-16T20:38:43.515921server.espacesoutien.com sshd[4966]: Failed password for invalid user ubnt from 45.67.14.21 port 54928 ssh2 ...	2020-08-17 05:19:29
45.67.14.20	attackspam	TCP (SYN) 45.67.14.20:60205 -> port 22, len 44	2020-07-07 08:34:48
45.67.14.21	attackspambots	Jul 5 23:52:03 django-0 sshd[5358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.67.14.21 user=root Jul 5 23:52:05 django-0 sshd[5358]: Failed password for root from 45.67.14.21 port 41090 ssh2 ...	2020-07-06 07:54:30
45.67.14.21	attackbots	22/tcp 22/tcp 22/tcp... [2020-05-06/07-04]13pkt,1pt.(tcp)	2020-07-04 23:23:37
45.67.14.20	attack	2020-05-23T15:30:28.033150struts4.enskede.local sshd\[11208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.67.14.20 user=root 2020-05-23T15:30:30.820467struts4.enskede.local sshd\[11208\]: Failed password for root from 45.67.14.20 port 44886 ssh2 2020-05-23T15:30:31.186404struts4.enskede.local sshd\[11211\]: Invalid user ubnt from 45.67.14.20 port 55446 2020-05-23T15:30:31.193697struts4.enskede.local sshd\[11211\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.67.14.20 2020-05-23T15:30:33.100051struts4.enskede.local sshd\[11211\]: Failed password for invalid user ubnt from 45.67.14.20 port 55446 ssh2 ...	2020-05-23 21:50:00
45.67.14.20	attackbots	468. On May 17 2020 experienced a Brute Force SSH login attempt -> 3 unique times by 45.67.14.20.	2020-05-20 20:59:54
45.67.14.22	attackspambots	52869/tcp 22/tcp... [2020-04-04/05-07]36pkt,2pt.(tcp)	2020-05-07 17:41:32
45.67.14.20	attackbots	May 7 06:51:43 nginx sshd[83929]: Connection from 45.67.14.20 port 37018 on 10.23.102.80 port 22 May 7 06:51:43 nginx sshd[83929]: Received disconnect from 45.67.14.20 port 37018:11: Bye Bye [preauth]	2020-05-07 16:15:37

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.67.14.164
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14417
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.67.14.164.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062900 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jun 29 15:27:54 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 164.14.67.45.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 164.14.67.45.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
14.241.248.57	attack	SSH Brute-Force. Ports scanning.	2020-05-28 19:19:31
182.180.113.54	attackbotsspam	182.180.113.54 - - [28/May/2020:05:52:17 0200] "GET /TP/public/index.php HTTP/1.1" 404 457 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 182.180.113.54 - - [28/May/2020:05:52:18 0200] "GET /TP/index.php HTTP/1.1" 404 457 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 182.180.113.54 - - [28/May/2020:05:52:18 0200] "GET /thinkphp/html/public/index.php HTTP/1.1" 404 457 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 182.180.113.54 - - [28/May/2020:05:52:18 0200] "GET /html/public/index.php HTTP/1.1" 404 457 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 182.180.113.54 - - [28/May/2020:05:52:19 0200] "GET /public/index.php HTTP/1.1" 404 457 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0;en-US; rv:1.9.2) Gecko/20100115 Firefox/3.6)" 182.180.113.54 - - [28/May/2020:05:52:19 0200] "GET /TP/html/public/index.php HTTP/1.1" 404 457 "-[...]	2020-05-28 19:04:02
124.121.148.106	attackspambots	SSH login attempts.	2020-05-28 19:04:50
120.237.123.242	attack	May 28 09:49:55 server sshd[53664]: Failed password for invalid user r00t0 from 120.237.123.242 port 30516 ssh2 May 28 09:59:04 server sshd[61147]: Failed password for invalid user liverpoo from 120.237.123.242 port 26274 ssh2 May 28 10:05:44 server sshd[1665]: Failed password for invalid user pc01 from 120.237.123.242 port 6603 ssh2	2020-05-28 19:05:37
85.209.0.100	attack	Total attacks: 6	2020-05-28 19:12:28
204.191.245.129	attackspambots	SSH login attempts.	2020-05-28 19:05:20
157.230.133.15	attack	May 28 11:55:05 debian-2gb-nbg1-2 kernel: \[12918495.353715\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=157.230.133.15 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=54233 PROTO=TCP SPT=41094 DPT=31211 WINDOW=1024 RES=0x00 SYN URGP=0	2020-05-28 18:50:52
51.91.159.46	attackspambots	May 28 10:42:42 * sshd[424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.159.46 May 28 10:42:44 * sshd[424]: Failed password for invalid user kids from 51.91.159.46 port 45450 ssh2	2020-05-28 18:46:03
92.154.121.54	attack	Brute-force attempt banned	2020-05-28 19:18:55
106.13.228.21	attackbots	May 28 07:14:36 electroncash sshd[1248]: Failed password for invalid user admin from 106.13.228.21 port 56164 ssh2 May 28 07:17:18 electroncash sshd[2038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.228.21 user=root May 28 07:17:20 electroncash sshd[2038]: Failed password for root from 106.13.228.21 port 58090 ssh2 May 28 07:19:44 electroncash sshd[2689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.228.21 user=root May 28 07:19:46 electroncash sshd[2689]: Failed password for root from 106.13.228.21 port 60000 ssh2 ...	2020-05-28 19:25:52
162.243.145.46	attackbots	IP 162.243.145.46 attacked honeypot on port: 1080 at 5/28/2020 4:52:30 AM	2020-05-28 18:49:06
222.186.175.215	attackbotsspam	May 28 12:17:20 combo sshd[7462]: Failed password for root from 222.186.175.215 port 62426 ssh2 May 28 12:17:23 combo sshd[7462]: Failed password for root from 222.186.175.215 port 62426 ssh2 May 28 12:17:27 combo sshd[7462]: Failed password for root from 222.186.175.215 port 62426 ssh2 ...	2020-05-28 19:19:15
140.143.241.178	attackbotsspam	20 attempts against mh-ssh on cloud	2020-05-28 19:24:18
201.203.21.239	attackbots	May 28 06:31:45 master sshd[30893]: Failed password for root from 201.203.21.239 port 46596 ssh2 May 28 06:41:31 master sshd[30920]: Failed password for root from 201.203.21.239 port 54184 ssh2 May 28 06:45:20 master sshd[30945]: Failed password for invalid user admin from 201.203.21.239 port 57423 ssh2 May 28 06:49:09 master sshd[30955]: Failed password for root from 201.203.21.239 port 60658 ssh2 May 28 06:52:50 master sshd[30963]: Failed password for root from 201.203.21.239 port 35652 ssh2 May 28 06:56:42 master sshd[30975]: Failed password for invalid user hat from 201.203.21.239 port 38884 ssh2 May 28 07:00:27 master sshd[31001]: Failed password for invalid user guest from 201.203.21.239 port 42141 ssh2 May 28 07:04:16 master sshd[31014]: Failed password for root from 201.203.21.239 port 45373 ssh2 May 28 07:08:02 master sshd[31024]: Failed password for invalid user taddio from 201.203.21.239 port 48603 ssh2	2020-05-28 18:59:59
14.18.109.164	attackbots	May 28 13:08:37 sip sshd[438186]: Failed password for invalid user santiu from 14.18.109.164 port 44676 ssh2 May 28 13:16:36 sip sshd[438250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.18.109.164 user=root May 28 13:16:38 sip sshd[438250]: Failed password for root from 14.18.109.164 port 42964 ssh2 ...	2020-05-28 19:21:27

最近上报的IP列表

183.89.82.33	175.153.218.218	23.93.116.80	222.172.44.32
89.40.115.49	114.156.99.246	157.121.195.17	113.73.155.137
119.142.35.208	206.75.110.216	238.134.102.237	101.170.180.139
136.231.209.21	113.172.22.123	56.120.19.239	26.35.209.168
222.52.99.28	181.127.141.145	165.22.203.186	32.108.65.34