14.160.52.26 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Brute force attack to crack SMTP password (port 25 / 587)	2020-08-06 07:01:33
attackbotsspam	Brute force attack to crack SMTP password (port 25 / 587)	2020-06-26 08:22:22
attackspambots	Dovecot Invalid User Login Attempt.	2020-05-29 01:38:47
attack	(imapd) Failed IMAP login from 14.160.52.26 (VN/Vietnam/static.vnpt.vn): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 29 16:31:17 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 7 secs): user=, method=PLAIN, rip=14.160.52.26, lip=5.63.12.44, session=<4VYztGykXkAOoDQa>	2020-04-30 03:46:08

相同子网IP讨论:

IP	类型	评论内容	时间
14.160.52.130	attack	1602016722 - 10/06/2020 22:38:42 Host: 14.160.52.130/14.160.52.130 Port: 445 TCP Blocked ...	2020-10-08 02:34:02
14.160.52.130	attackspam	1602016722 - 10/06/2020 22:38:42 Host: 14.160.52.130/14.160.52.130 Port: 445 TCP Blocked ...	2020-10-07 18:46:54
14.160.52.58	attack	Dovecot Invalid User Login Attempt.	2020-09-06 21:56:13
14.160.52.58	attackspambots	Attempted Brute Force (dovecot)	2020-09-06 13:31:37
14.160.52.58	attackspam	Attempted Brute Force (dovecot)	2020-09-06 05:46:12
14.160.52.58	attackbotsspam	Unauthorized connection attempt from IP address 14.160.52.58	2020-07-28 00:53:59
14.160.52.58	attackspam	...	2020-06-04 01:56:32
14.160.52.54	attackbotsspam	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2020-03-05 19:34:24
14.160.52.54	attackbots	Nov 27 23:55:20 ns3042688 courier-imapd: LOGIN FAILED, method=PLAIN, ip=\[::ffff:14.160.52.54\] ...	2019-11-28 09:40:10
14.160.52.170	attack	Unauthorized connection attempt from IP address 14.160.52.170 on Port 445(SMB)	2019-11-17 04:42:08
14.160.52.170	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 10-10-2019 21:10:22.	2019-10-11 05:17:33
14.160.52.166	attackspam	445/tcp [2019-06-21]1pkt	2019-06-21 15:32:52

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.160.52.26
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54579
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.160.52.26.			IN	A

;; AUTHORITY SECTION:
.			510	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020042902 1800 900 604800 86400

;; Query time: 113 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Apr 30 03:46:04 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

26.52.160.14.in-addr.arpa domain name pointer static.vnpt.vn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
26.52.160.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
51.79.85.154	attack	51.79.85.154 - - [29/Sep/2020:20:36:28 +0000] "POST /wp-login.php HTTP/1.1" 200 2077 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 51.79.85.154 - - [29/Sep/2020:20:36:30 +0000] "POST /wp-login.php HTTP/1.1" 200 2076 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 51.79.85.154 - - [29/Sep/2020:20:36:32 +0000] "POST /wp-login.php HTTP/1.1" 200 2070 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 51.79.85.154 - - [29/Sep/2020:20:36:34 +0000] "POST /wp-login.php HTTP/1.1" 200 2072 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-" 51.79.85.154 - - [29/Sep/2020:20:36:36 +0000] "POST /xmlrpc.php HTTP/1.1" 200 236 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-"	2020-10-01 00:41:04
49.234.126.83	attackbots	$f2bV_matches	2020-10-01 00:45:48
51.83.104.120	attack	Invalid user larry from 51.83.104.120 port 56724	2020-10-01 01:07:55
165.22.138.106	attackspambots	165.22.138.106 is unauthorized and has been banned by fail2ban	2020-10-01 01:03:06
45.156.84.56	attackbotsspam	[2020-09-30 13:03:55] NOTICE[1159] chan_sip.c: Registration from '' failed for '45.156.84.56:50157' - Wrong password [2020-09-30 13:03:55] SECURITY[1198] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-30T13:03:55.173-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="Colton",SessionID="0x7fcaa04d8d08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.156.84.56/50157",Challenge="5898d4cd",ReceivedChallenge="5898d4cd",ReceivedHash="4b3700ff1929cff69d1900e9bd8dbec4" [2020-09-30 13:04:19] NOTICE[1159] chan_sip.c: Registration from '' failed for '45.156.84.56:52342' - Wrong password [2020-09-30 13:04:19] SECURITY[1198] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-30T13:04:19.383-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="Belle",SessionID="0x7fcaa03c7fb8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.156.84. ...	2020-10-01 01:05:21
189.213.108.215	attackbotsspam	Automatic report - Port Scan Attack	2020-10-01 00:32:29
199.89.53.81	attack	Sep 29 21:17:48 er4gw sshd[19059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.89.53.81 user=root	2020-10-01 00:55:32
210.245.89.247	attackbots	TCP (SYN) 210.245.89.247:55406 -> port 8443, len 44	2020-10-01 01:03:29
223.171.46.146	attackspam	Invalid user mapr from 223.171.46.146 port 54679	2020-10-01 01:10:01
51.178.182.35	attackspambots	(sshd) Failed SSH login from 51.178.182.35 (FR/France/35.ip-51-178-182.eu): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 30 10:27:50 optimus sshd[8080]: Invalid user netdump from 51.178.182.35 Sep 30 10:27:50 optimus sshd[8080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.182.35 Sep 30 10:27:52 optimus sshd[8080]: Failed password for invalid user netdump from 51.178.182.35 port 41774 ssh2 Sep 30 10:32:48 optimus sshd[9606]: Invalid user master from 51.178.182.35 Sep 30 10:32:48 optimus sshd[9606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.178.182.35	2020-10-01 00:35:25
206.189.132.8	attackspam	Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-10-01 01:06:56
41.33.250.219	attackbots	RDPBrutePap24	2020-10-01 01:06:24
176.43.171.173	attackbotsspam	Unauthorised access (Sep 29) SRC=176.43.171.173 LEN=52 TTL=116 ID=187 DF TCP DPT=445 WINDOW=8192 SYN	2020-10-01 00:54:24
124.158.108.79	attackbots	Port probing on unauthorized port 8291	2020-10-01 01:01:33
190.217.26.154	attack	Sep 29 22:35:59 ip106 sshd[27688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.217.26.154 Sep 29 22:36:00 ip106 sshd[27688]: Failed password for invalid user dircreate from 190.217.26.154 port 52238 ssh2 ...	2020-10-01 01:00:05

最近上报的IP列表

162.243.142.91	191.5.66.99	162.243.144.213	162.243.142.140
162.243.138.139	200.38.225.43	173.242.100.102	162.243.144.159
113.246.49.36	183.232.65.85	162.243.136.15	171.224.181.74
200.84.192.184	51.83.70.93	222.189.82.110	94.138.75.122
89.255.231.253	27.72.90.109	181.196.89.31	125.48.101.231