14.160.52.26 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Brute force attack to crack SMTP password (port 25 / 587)	2020-08-06 07:01:33
attackbotsspam	Brute force attack to crack SMTP password (port 25 / 587)	2020-06-26 08:22:22
attackspambots	Dovecot Invalid User Login Attempt.	2020-05-29 01:38:47
attack	(imapd) Failed IMAP login from 14.160.52.26 (VN/Vietnam/static.vnpt.vn): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 29 16:31:17 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 7 secs): user=, method=PLAIN, rip=14.160.52.26, lip=5.63.12.44, session=<4VYztGykXkAOoDQa>	2020-04-30 03:46:08

相同子网IP讨论:

IP	类型	评论内容	时间
14.160.52.130	attack	1602016722 - 10/06/2020 22:38:42 Host: 14.160.52.130/14.160.52.130 Port: 445 TCP Blocked ...	2020-10-08 02:34:02
14.160.52.130	attackspam	1602016722 - 10/06/2020 22:38:42 Host: 14.160.52.130/14.160.52.130 Port: 445 TCP Blocked ...	2020-10-07 18:46:54
14.160.52.58	attack	Dovecot Invalid User Login Attempt.	2020-09-06 21:56:13
14.160.52.58	attackspambots	Attempted Brute Force (dovecot)	2020-09-06 13:31:37
14.160.52.58	attackspam	Attempted Brute Force (dovecot)	2020-09-06 05:46:12
14.160.52.58	attackbotsspam	Unauthorized connection attempt from IP address 14.160.52.58	2020-07-28 00:53:59
14.160.52.58	attackspam	...	2020-06-04 01:56:32
14.160.52.54	attackbotsspam	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2020-03-05 19:34:24
14.160.52.54	attackbots	Nov 27 23:55:20 ns3042688 courier-imapd: LOGIN FAILED, method=PLAIN, ip=\[::ffff:14.160.52.54\] ...	2019-11-28 09:40:10
14.160.52.170	attack	Unauthorized connection attempt from IP address 14.160.52.170 on Port 445(SMB)	2019-11-17 04:42:08
14.160.52.170	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 10-10-2019 21:10:22.	2019-10-11 05:17:33
14.160.52.166	attackspam	445/tcp [2019-06-21]1pkt	2019-06-21 15:32:52

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.160.52.26
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54579
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.160.52.26.			IN	A

;; AUTHORITY SECTION:
.			510	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020042902 1800 900 604800 86400

;; Query time: 113 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Apr 30 03:46:04 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

26.52.160.14.in-addr.arpa domain name pointer static.vnpt.vn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
26.52.160.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
128.199.170.33	attack	Aug 3 01:10:13 pixelmemory sshd[1826145]: Failed password for root from 128.199.170.33 port 42834 ssh2 Aug 3 01:14:38 pixelmemory sshd[1844780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.170.33 user=root Aug 3 01:14:41 pixelmemory sshd[1844780]: Failed password for root from 128.199.170.33 port 54004 ssh2 Aug 3 01:19:04 pixelmemory sshd[1856998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.170.33 user=root Aug 3 01:19:05 pixelmemory sshd[1856998]: Failed password for root from 128.199.170.33 port 36942 ssh2 ...	2020-08-03 18:06:55
180.76.169.198	attackspambots	Aug 2 22:39:04 pixelmemory sshd[1365027]: Failed password for root from 180.76.169.198 port 45576 ssh2 Aug 2 22:41:14 pixelmemory sshd[1370211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.169.198 user=root Aug 2 22:41:16 pixelmemory sshd[1370211]: Failed password for root from 180.76.169.198 port 35678 ssh2 Aug 2 22:42:21 pixelmemory sshd[1375802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.169.198 user=root Aug 2 22:42:23 pixelmemory sshd[1375802]: Failed password for root from 180.76.169.198 port 44850 ssh2 ...	2020-08-03 18:05:24
61.177.172.102	attackspam	Aug 3 11:31:46 santamaria sshd\[7940\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.102 user=root Aug 3 11:31:48 santamaria sshd\[7940\]: Failed password for root from 61.177.172.102 port 22768 ssh2 Aug 3 11:31:55 santamaria sshd\[7942\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.177.172.102 user=root ...	2020-08-03 17:39:11
49.233.77.12	attack	2020-08-03T08:11:08.015379vps773228.ovh.net sshd[31882]: Failed password for root from 49.233.77.12 port 60434 ssh2 2020-08-03T08:13:54.966459vps773228.ovh.net sshd[31902]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.77.12 user=root 2020-08-03T08:13:56.679345vps773228.ovh.net sshd[31902]: Failed password for root from 49.233.77.12 port 34362 ssh2 2020-08-03T08:16:49.594162vps773228.ovh.net sshd[31930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.77.12 user=root 2020-08-03T08:16:51.992938vps773228.ovh.net sshd[31930]: Failed password for root from 49.233.77.12 port 36516 ssh2 ...	2020-08-03 17:51:56
174.110.88.87	attack	2020-08-03T11:02:55.798489vps751288.ovh.net sshd\[3072\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.110.88.87 user=root 2020-08-03T11:02:57.689045vps751288.ovh.net sshd\[3072\]: Failed password for root from 174.110.88.87 port 38256 ssh2 2020-08-03T11:07:26.458376vps751288.ovh.net sshd\[3127\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.110.88.87 user=root 2020-08-03T11:07:28.218342vps751288.ovh.net sshd\[3127\]: Failed password for root from 174.110.88.87 port 50460 ssh2 2020-08-03T11:11:48.805203vps751288.ovh.net sshd\[3179\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.110.88.87 user=root	2020-08-03 17:38:27
49.233.24.148	attack	Aug 3 11:24:36 abendstille sshd\[32467\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.24.148 user=root Aug 3 11:24:38 abendstille sshd\[32467\]: Failed password for root from 49.233.24.148 port 38436 ssh2 Aug 3 11:28:30 abendstille sshd\[3706\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.24.148 user=root Aug 3 11:28:33 abendstille sshd\[3706\]: Failed password for root from 49.233.24.148 port 51284 ssh2 Aug 3 11:32:26 abendstille sshd\[7111\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.24.148 user=root ...	2020-08-03 17:59:17
141.98.9.161	attackbotsspam	Aug 3 16:35:15 webhost01 sshd[12768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.161 Aug 3 16:35:16 webhost01 sshd[12768]: Failed password for invalid user admin from 141.98.9.161 port 35109 ssh2 ...	2020-08-03 17:40:51
104.236.112.52	attack	malicious Brute-Force reported by https://www.patrick-binder.de ...	2020-08-03 17:46:49
113.190.36.238	attack	1596426661 - 08/03/2020 05:51:01 Host: 113.190.36.238/113.190.36.238 Port: 445 TCP Blocked	2020-08-03 17:41:50
157.230.230.215	attackspam	Aug 3 11:50:47 relay postfix/smtpd\[9209\]: warning: unknown\[157.230.230.215\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 3 11:50:47 relay postfix/smtpd\[4390\]: warning: unknown\[157.230.230.215\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 3 12:00:19 relay postfix/smtpd\[11632\]: warning: unknown\[157.230.230.215\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 3 12:00:19 relay postfix/smtpd\[15638\]: warning: unknown\[157.230.230.215\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 3 12:09:43 relay postfix/smtpd\[7189\]: warning: unknown\[157.230.230.215\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-08-03 18:14:46
167.114.185.237	attack	sshd jail - ssh hack attempt	2020-08-03 17:27:21
14.29.35.47	attack	Aug 3 03:42:55 vlre-nyc-1 sshd\[15760\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.35.47 user=root Aug 3 03:42:56 vlre-nyc-1 sshd\[15760\]: Failed password for root from 14.29.35.47 port 60912 ssh2 Aug 3 03:46:28 vlre-nyc-1 sshd\[15854\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.35.47 user=root Aug 3 03:46:30 vlre-nyc-1 sshd\[15854\]: Failed password for root from 14.29.35.47 port 38652 ssh2 Aug 3 03:50:09 vlre-nyc-1 sshd\[15954\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.29.35.47 user=root ...	2020-08-03 18:18:19
190.77.217.58	attack	Icarus honeypot on github	2020-08-03 17:35:03
222.186.31.83	attackspam	Unauthorized connection attempt detected from IP address 222.186.31.83 to port 22	2020-08-03 18:09:41
49.234.224.88	attackspam	Aug 3 11:36:59 minden010 sshd[4297]: Failed password for root from 49.234.224.88 port 43488 ssh2 Aug 3 11:39:43 minden010 sshd[5285]: Failed password for root from 49.234.224.88 port 49976 ssh2 ...	2020-08-03 18:06:34

最近上报的IP列表

162.243.142.91	191.5.66.99	162.243.144.213	162.243.142.140
162.243.138.139	200.38.225.43	173.242.100.102	162.243.144.159
113.246.49.36	183.232.65.85	162.243.136.15	171.224.181.74
200.84.192.184	51.83.70.93	222.189.82.110	94.138.75.122
89.255.231.253	27.72.90.109	181.196.89.31	125.48.101.231