14.160.52.26 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Brute force attack to crack SMTP password (port 25 / 587)	2020-08-06 07:01:33
attackbotsspam	Brute force attack to crack SMTP password (port 25 / 587)	2020-06-26 08:22:22
attackspambots	Dovecot Invalid User Login Attempt.	2020-05-29 01:38:47
attack	(imapd) Failed IMAP login from 14.160.52.26 (VN/Vietnam/static.vnpt.vn): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 29 16:31:17 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 7 secs): user=, method=PLAIN, rip=14.160.52.26, lip=5.63.12.44, session=<4VYztGykXkAOoDQa>	2020-04-30 03:46:08

相同子网IP讨论:

IP	类型	评论内容	时间
14.160.52.130	attack	1602016722 - 10/06/2020 22:38:42 Host: 14.160.52.130/14.160.52.130 Port: 445 TCP Blocked ...	2020-10-08 02:34:02
14.160.52.130	attackspam	1602016722 - 10/06/2020 22:38:42 Host: 14.160.52.130/14.160.52.130 Port: 445 TCP Blocked ...	2020-10-07 18:46:54
14.160.52.58	attack	Dovecot Invalid User Login Attempt.	2020-09-06 21:56:13
14.160.52.58	attackspambots	Attempted Brute Force (dovecot)	2020-09-06 13:31:37
14.160.52.58	attackspam	Attempted Brute Force (dovecot)	2020-09-06 05:46:12
14.160.52.58	attackbotsspam	Unauthorized connection attempt from IP address 14.160.52.58	2020-07-28 00:53:59
14.160.52.58	attackspam	...	2020-06-04 01:56:32
14.160.52.54	attackbotsspam	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2020-03-05 19:34:24
14.160.52.54	attackbots	Nov 27 23:55:20 ns3042688 courier-imapd: LOGIN FAILED, method=PLAIN, ip=\[::ffff:14.160.52.54\] ...	2019-11-28 09:40:10
14.160.52.170	attack	Unauthorized connection attempt from IP address 14.160.52.170 on Port 445(SMB)	2019-11-17 04:42:08
14.160.52.170	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 10-10-2019 21:10:22.	2019-10-11 05:17:33
14.160.52.166	attackspam	445/tcp [2019-06-21]1pkt	2019-06-21 15:32:52

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 14.160.52.26
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54579
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;14.160.52.26.			IN	A

;; AUTHORITY SECTION:
.			510	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020042902 1800 900 604800 86400

;; Query time: 113 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Apr 30 03:46:04 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

26.52.160.14.in-addr.arpa domain name pointer static.vnpt.vn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
26.52.160.14.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
159.203.74.227	attackbots	Unauthorized connection attempt detected from IP address 159.203.74.227 to port 2220 [J]	2020-01-13 07:27:56
193.29.15.169	attack	12.01.2020 21:25:34 Recursive DNS scan	2020-01-13 07:26:32
217.218.21.242	attackspambots	Unauthorized connection attempt detected from IP address 217.218.21.242 to port 2220 [J]	2020-01-13 07:27:41
132.248.96.3	attack	Dec 21 03:37:54 vtv3 sshd[1628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.248.96.3 Dec 21 03:37:56 vtv3 sshd[1628]: Failed password for invalid user takis from 132.248.96.3 port 39852 ssh2 Dec 21 03:49:08 vtv3 sshd[6601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.248.96.3 Dec 21 03:49:10 vtv3 sshd[6601]: Failed password for invalid user mcelvy from 132.248.96.3 port 53044 ssh2 Dec 21 03:54:50 vtv3 sshd[9028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.248.96.3 Jan 12 22:16:01 vtv3 sshd[25685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.248.96.3 Jan 12 22:16:03 vtv3 sshd[25685]: Failed password for invalid user germania from 132.248.96.3 port 36806 ssh2 Jan 12 22:23:28 vtv3 sshd[29127]: Failed password for root from 132.248.96.3 port 51016 ssh2 Jan 12 22:34:12 vtv3 sshd[2202]: pam_unix(sshd:auth): authenticatio	2020-01-13 07:23:36
34.92.20.114	attackspambots	Jan 13 00:44:10 mout sshd[3897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.92.20.114 user=root Jan 13 00:44:12 mout sshd[3897]: Failed password for root from 34.92.20.114 port 42470 ssh2	2020-01-13 07:56:43
134.209.175.243	attackbots	Lines containing failures of 134.209.175.243 (max 1000) Jan 12 19:25:36 localhost sshd[23603]: Invalid user artifactory from 134.209.175.243 port 53016 Jan 12 19:25:36 localhost sshd[23603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.175.243 Jan 12 19:25:39 localhost sshd[23603]: Failed password for invalid user artifactory from 134.209.175.243 port 53016 ssh2 Jan 12 19:25:41 localhost sshd[23603]: Received disconnect from 134.209.175.243 port 53016:11: Bye Bye [preauth] Jan 12 19:25:41 localhost sshd[23603]: Disconnected from invalid user artifactory 134.209.175.243 port 53016 [preauth] Jan 12 19:35:40 localhost sshd[25581]: Invalid user ken from 134.209.175.243 port 58320 Jan 12 19:35:40 localhost sshd[25581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.175.243 Jan 12 19:35:41 localhost sshd[25581]: Failed password for invalid user ken from 134.209.175.243 port 58........ ------------------------------	2020-01-13 07:34:35
197.156.73.170	attackspambots	20/1/12@16:25:25: FAIL: Alarm-Network address from=197.156.73.170 ...	2020-01-13 07:33:23
49.88.112.114	attack	Jan 12 13:28:32 php1 sshd\[5513\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114 user=root Jan 12 13:28:34 php1 sshd\[5513\]: Failed password for root from 49.88.112.114 port 32502 ssh2 Jan 12 13:29:36 php1 sshd\[5584\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114 user=root Jan 12 13:29:38 php1 sshd\[5584\]: Failed password for root from 49.88.112.114 port 39607 ssh2 Jan 12 13:30:36 php1 sshd\[5669\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114 user=root	2020-01-13 07:39:14
122.51.248.146	attackspam	2020-01-10T21:05:20.6490821495-001 sshd[400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.248.146 user=r.r 2020-01-10T21:05:22.4753561495-001 sshd[400]: Failed password for r.r from 122.51.248.146 port 43566 ssh2 2020-01-10T21:13:08.3130331495-001 sshd[772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.248.146 user=r.r 2020-01-10T21:13:10.7217191495-001 sshd[772]: Failed password for r.r from 122.51.248.146 port 56590 ssh2 2020-01-10T21:18:37.3314161495-001 sshd[1036]: Invalid user test6 from 122.51.248.146 port 46748 2020-01-10T21:18:37.3399501495-001 sshd[1036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.248.146 2020-01-10T21:18:37.3314161495-001 sshd[1036]: Invalid user test6 from 122.51.248.146 port 46748 2020-01-10T21:18:39.2469761495-001 sshd[1036]: Failed password for invalid user test6 from 122.51.248.146 port ........ ------------------------------	2020-01-13 07:41:34
222.186.190.92	attackbotsspam	Jan 13 00:22:19 sd-53420 sshd\[23013\]: User root from 222.186.190.92 not allowed because none of user's groups are listed in AllowGroups Jan 13 00:22:19 sd-53420 sshd\[23013\]: Failed none for invalid user root from 222.186.190.92 port 33612 ssh2 Jan 13 00:22:19 sd-53420 sshd\[23013\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.92 user=root Jan 13 00:22:22 sd-53420 sshd\[23013\]: Failed password for invalid user root from 222.186.190.92 port 33612 ssh2 Jan 13 00:22:38 sd-53420 sshd\[23030\]: User root from 222.186.190.92 not allowed because none of user's groups are listed in AllowGroups ...	2020-01-13 07:26:57
222.186.52.189	attackbots	Jan 13 00:41:30 MK-Soft-Root1 sshd[14687]: Failed password for root from 222.186.52.189 port 41726 ssh2 Jan 13 00:41:33 MK-Soft-Root1 sshd[14687]: Failed password for root from 222.186.52.189 port 41726 ssh2 ...	2020-01-13 07:43:29
222.186.180.130	attack	Jan 12 18:49:12 plusreed sshd[22937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.130 user=root Jan 12 18:49:14 plusreed sshd[22937]: Failed password for root from 222.186.180.130 port 61704 ssh2 ...	2020-01-13 07:50:19
222.186.173.215	attackspambots	Jan 12 23:21:13 hcbbdb sshd\[28624\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.215 user=root Jan 12 23:21:15 hcbbdb sshd\[28624\]: Failed password for root from 222.186.173.215 port 38584 ssh2 Jan 12 23:21:30 hcbbdb sshd\[28636\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.215 user=root Jan 12 23:21:31 hcbbdb sshd\[28636\]: Failed password for root from 222.186.173.215 port 22144 ssh2 Jan 12 23:21:45 hcbbdb sshd\[28636\]: Failed password for root from 222.186.173.215 port 22144 ssh2	2020-01-13 07:34:04
198.108.66.27	attackspambots	12.01.2020 21:25:34 Recursive DNS scan	2020-01-13 07:25:07
85.93.20.10	attackbots	Unauthorized connection attempt detected from IP address 85.93.20.10 to port 3307	2020-01-13 07:28:32

最近上报的IP列表

162.243.142.91	191.5.66.99	162.243.144.213	162.243.142.140
162.243.138.139	200.38.225.43	173.242.100.102	162.243.144.159
113.246.49.36	183.232.65.85	162.243.136.15	171.224.181.74
200.84.192.184	51.83.70.93	222.189.82.110	94.138.75.122
89.255.231.253	27.72.90.109	181.196.89.31	125.48.101.231