14.160.52.26 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Brute force attack to crack SMTP password (port 25 / 587)	2020-08-06 07:01:33
attackbotsspam	Brute force attack to crack SMTP password (port 25 / 587)	2020-06-26 08:22:22
attackspambots	Dovecot Invalid User Login Attempt.	2020-05-29 01:38:47
attack	(imapd) Failed IMAP login from 14.160.52.26 (VN/Vietnam/static.vnpt.vn): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 29 16:31:17 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 7 secs): user=, method=PLAIN, rip=14.160.52.26, lip=5.63.12.44, session=<4VYztGykXkAOoDQa>	2020-04-30 03:46:08

相同子网IP讨论:

IP	类型	评论内容	时间
14.160.52.130	attack	1602016722 - 10/06/2020 22:38:42 Host: 14.160.52.130/14.160.52.130 Port: 445 TCP Blocked ...	2020-10-08 02:34:02
14.160.52.130	attackspam	1602016722 - 10/06/2020 22:38:42 Host: 14.160.52.130/14.160.52.130 Port: 445 TCP Blocked ...	2020-10-07 18:46:54
14.160.52.58	attack	Dovecot Invalid User Login Attempt.	2020-09-06 21:56:13
14.160.52.58	attackspambots	Attempted Brute Force (dovecot)	2020-09-06 13:31:37
14.160.52.58	attackspam	Attempted Brute Force (dovecot)	2020-09-06 05:46:12
14.160.52.58	attackbotsspam	Unauthorized connection attempt from IP address 14.160.52.58	2020-07-28 00:53:59
14.160.52.58	attackspam	...	2020-06-04 01:56:32
14.160.52.54	attackbotsspam	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2020-03-05 19:34:24
14.160.52.54	attackbots	Nov 27 23:55:20 ns3042688 courier-imapd: LOGIN FAILED, method=PLAIN, ip=\[::ffff:14.160.52.54\] ...	2019-11-28 09:40:10
14.160.52.170	attack	Unauthorized connection attempt from IP address 14.160.52.170 on Port 445(SMB)	2019-11-17 04:42:08
14.160.52.170	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 10-10-2019 21:10:22.	2019-10-11 05:17:33
14.160.52.166	attackspam	445/tcp [2019-06-21]1pkt	2019-06-21 15:32:52

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.160.52.26
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54579
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.160.52.26.			IN	A

;; AUTHORITY SECTION:
.			510	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020042902 1800 900 604800 86400

;; Query time: 113 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Apr 30 03:46:04 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

26.52.160.14.in-addr.arpa domain name pointer static.vnpt.vn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
26.52.160.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
5.37.137.100	attackspam	Aug 6 23:32:08 cps sshd[18547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.37.137.100.dynamic-dsl-ip.omantel.net.om user=r.r Aug 6 23:32:11 cps sshd[18547]: Failed password for r.r from 5.37.137.100 port 46924 ssh2 Aug 6 23:32:13 cps sshd[18547]: Failed password for r.r from 5.37.137.100 port 46924 ssh2 Aug 6 23:32:16 cps sshd[18547]: Failed password for r.r from 5.37.137.100 port 46924 ssh2 Aug 6 23:32:18 cps sshd[18547]: Failed password for r.r from 5.37.137.100 port 46924 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=5.37.137.100	2019-08-07 07:26:21
134.209.199.209	attack	Aug 6 23:46:58 rpi sshd[23354]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.199.209 Aug 6 23:46:59 rpi sshd[23354]: Failed password for invalid user rex from 134.209.199.209 port 51072 ssh2	2019-08-07 07:45:18
191.53.106.21	attack	failed_logins	2019-08-07 07:05:58
27.223.89.238	attack	Aug 7 02:13:05 pkdns2 sshd\[10481\]: Invalid user cacti from 27.223.89.238Aug 7 02:13:07 pkdns2 sshd\[10481\]: Failed password for invalid user cacti from 27.223.89.238 port 58134 ssh2Aug 7 02:15:07 pkdns2 sshd\[10566\]: Failed password for root from 27.223.89.238 port 39902 ssh2Aug 7 02:19:42 pkdns2 sshd\[10714\]: Invalid user amalia from 27.223.89.238Aug 7 02:19:44 pkdns2 sshd\[10714\]: Failed password for invalid user amalia from 27.223.89.238 port 50104 ssh2Aug 7 02:21:39 pkdns2 sshd\[10842\]: Invalid user vala from 27.223.89.238 ...	2019-08-07 07:41:30
160.153.245.247	attack	xmlrpc attack	2019-08-07 07:44:06
156.198.72.252	attack	Telnet/23 MH Probe, BF, Hack -	2019-08-07 07:18:59
179.183.65.56	attackbotsspam	SSH Brute Force, server-1 sshd[3137]: Failed password for invalid user carlosfarah from 179.183.65.56 port 38056 ssh2	2019-08-07 07:34:49
129.28.75.17	attack	Aug 6 23:47:52 ArkNodeAT sshd\[21598\]: Invalid user schneider from 129.28.75.17 Aug 6 23:47:52 ArkNodeAT sshd\[21598\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.75.17 Aug 6 23:47:54 ArkNodeAT sshd\[21598\]: Failed password for invalid user schneider from 129.28.75.17 port 40820 ssh2	2019-08-07 07:22:28
51.254.39.23	attack	Automatic report - Banned IP Access	2019-08-07 07:46:05
138.197.88.135	attackspambots	Aug 6 22:51:24 ip-172-31-62-245 sshd\[3377\]: Invalid user admin from 138.197.88.135\ Aug 6 22:51:26 ip-172-31-62-245 sshd\[3377\]: Failed password for invalid user admin from 138.197.88.135 port 33358 ssh2\ Aug 6 22:55:49 ip-172-31-62-245 sshd\[3410\]: Invalid user postmaster from 138.197.88.135\ Aug 6 22:55:51 ip-172-31-62-245 sshd\[3410\]: Failed password for invalid user postmaster from 138.197.88.135 port 55980 ssh2\ Aug 6 23:00:21 ip-172-31-62-245 sshd\[3429\]: Invalid user manuel from 138.197.88.135\	2019-08-07 07:24:47
60.184.243.149	attackbotsspam	Aug 6 21:47:57 unicornsoft sshd\[27143\]: User root from 60.184.243.149 not allowed because not listed in AllowUsers Aug 6 21:47:57 unicornsoft sshd\[27143\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.184.243.149 user=root Aug 6 21:47:59 unicornsoft sshd\[27143\]: Failed password for invalid user root from 60.184.243.149 port 40088 ssh2	2019-08-07 07:19:44
109.200.128.69	attack	[portscan] Port scan	2019-08-07 07:07:24
118.200.67.32	attack	Aug 7 00:44:06 debian sshd\[27540\]: Invalid user archana from 118.200.67.32 port 43866 Aug 7 00:44:06 debian sshd\[27540\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.200.67.32 ...	2019-08-07 07:52:40
93.41.140.241	attackbots	1565133299 - 08/07/2019 06:14:59 Host: 93-41-140-241.ip81.fastwebnet.it/93.41.140.241 Port: 23 TCP Blocked ...	2019-08-07 07:27:23
213.4.33.11	attack	Aug 7 01:31:21 dedicated sshd[6103]: Invalid user neil from 213.4.33.11 port 45370	2019-08-07 07:33:32

最近上报的IP列表

162.243.142.91	191.5.66.99	162.243.144.213	162.243.142.140
162.243.138.139	200.38.225.43	173.242.100.102	162.243.144.159
113.246.49.36	183.232.65.85	162.243.136.15	171.224.181.74
200.84.192.184	51.83.70.93	222.189.82.110	94.138.75.122
89.255.231.253	27.72.90.109	181.196.89.31	125.48.101.231