城市(city): unknown
省份(region): unknown
国家(country): United States
运营商(isp): Corporate Colocation Inc.
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): Data Center/Web Hosting/Transit
| 类型 | 评论内容 | 时间 |
|---|---|---|
| attack | [N10.H2.VM2] Port Scanner Detected Blocked by UFW |
2020-09-25 11:34:32 |
| attack | " " |
2020-08-18 17:54:11 |
| attack | Unauthorized connection attempt detected from IP address 66.117.12.196 to port 3728 |
2020-07-14 01:40:24 |
| attack | Jul 6 23:03:15 debian-2gb-nbg1-2 kernel: \[16328002.085917\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=66.117.12.196 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=33053 PROTO=TCP SPT=50070 DPT=22195 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-07-07 05:15:23 |
| attackbotsspam | scans 2 times in preceeding hours on the ports (in chronological order) 7132 7132 |
2020-07-06 23:31:05 |
| attackspambots | Unauthorized connection attempt detected from IP address 66.117.12.196 to port 889 |
2020-06-24 23:47:55 |
| attackspambots | Jun 19 22:39:05 debian-2gb-nbg1-2 kernel: \[14857832.725492\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=66.117.12.196 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=14988 PROTO=TCP SPT=56887 DPT=20285 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-06-20 05:44:08 |
| attackbotsspam | *Port Scan* detected from 66.117.12.196 (US/United States/California/Los Angeles (Silver Lake)/-). 4 hits in the last 255 seconds |
2020-06-14 13:10:36 |
| attack | firewall-block, port(s): 8088/tcp |
2020-05-31 22:59:20 |
| attackspam | Multiport scan 47 ports : 395 2107 2186 2483 4012 4943 5047 6595 7261 7679 7998 8657 9035 10445 10519 11339 13291 13533 13667 13808 15248 15284 15647 15788 15995 16006 17328 17908 18494 20311 21519 22680 22706 23272 23875 23972 24982 25211 25394 26200 26482 27171 28141 28514 29865 29938 32354 |
2020-05-12 08:46:17 |
| attackspam | scans 2 times in preceeding hours on the ports (in chronological order) 16006 16006 |
2020-05-01 21:06:25 |
| attack | 04/26/2020-23:59:54.234228 66.117.12.196 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-04-27 12:15:20 |
| attack | scans 2 times in preceeding hours on the ports (in chronological order) 29865 29865 |
2020-04-19 00:28:13 |
| attackbots | 15248/tcp 32354/tcp 2107/tcp... [2020-04-04/12]28pkt,10pt.(tcp) |
2020-04-13 05:19:41 |
| attack | Mar 20 09:52:12 vpn sshd[29783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.117.12.196 Mar 20 09:52:15 vpn sshd[29783]: Failed password for invalid user www from 66.117.12.196 port 37980 ssh2 Mar 20 10:00:15 vpn sshd[29834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.117.12.196 |
2020-01-05 18:22:01 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 66.117.12.196
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36785
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;66.117.12.196. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019061002 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Jun 11 07:14:56 CST 2019
;; MSG SIZE rcvd: 117
Host 196.12.117.66.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 196.12.117.66.in-addr.arpa: NXDOMAIN
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 200.233.186.57 | attackbots | $f2bV_matches |
2020-10-03 15:52:43 |
| 189.7.129.60 | attack | Oct 3 07:34:50 scw-gallant-ride sshd[8936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.7.129.60 |
2020-10-03 15:51:46 |
| 31.170.235.6 | attack | 445/tcp [2020-10-02]1pkt |
2020-10-03 15:52:14 |
| 142.93.47.124 | attack | 8986/tcp 32222/tcp 7000/tcp... [2020-08-07/10-02]177pkt,96pt.(tcp) |
2020-10-03 15:28:31 |
| 119.29.216.238 | attackspambots | SSH login attempts. |
2020-10-03 15:49:30 |
| 190.204.179.80 | attack | 445/tcp 445/tcp [2020-10-02]2pkt |
2020-10-03 15:37:16 |
| 189.109.203.222 | attackbotsspam | 445/tcp 445/tcp 445/tcp... [2020-08-06/10-02]5pkt,1pt.(tcp) |
2020-10-03 15:11:36 |
| 180.211.158.26 | attack | DATE:2020-10-03 05:43:02, IP:180.211.158.26, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc) |
2020-10-03 15:37:49 |
| 181.115.237.12 | attackspam | 445/tcp [2020-10-02]1pkt |
2020-10-03 15:39:49 |
| 89.26.250.41 | attackbotsspam | Invalid user tmp from 89.26.250.41 port 37479 |
2020-10-03 15:43:59 |
| 182.119.204.93 | attack | 1023/tcp [2020-10-02]1pkt |
2020-10-03 15:41:11 |
| 122.51.206.41 | attackbotsspam | Invalid user furukawa from 122.51.206.41 port 32954 |
2020-10-03 15:15:04 |
| 36.89.155.166 | attackspambots | Oct 3 05:46:03 host sshd[971]: Invalid user alan from 36.89.155.166 port 10419 ... |
2020-10-03 15:55:04 |
| 43.226.148.89 | attack | $f2bV_matches |
2020-10-03 15:35:09 |
| 185.43.254.190 | attackbots | 445/tcp [2020-10-02]1pkt |
2020-10-03 15:47:35 |