157.52.252.112

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States of America

运营商(isp): Global Frag Networks

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	5900/tcp 3389/tcp... [2020-05-19/07-18]27pkt,2pt.(tcp)	2020-07-20 06:15:04
attackspambots	Port Scan detected from 157.52.252.112 (US/United States/California/Los Angeles/goleaving.net). 4 hits in the last 0 seconds	2020-06-14 13:13:27

相同子网IP讨论:

IP	类型	评论内容	时间
157.52.252.13	attackbotsspam	scan z	2020-05-09 03:24:44
157.52.252.128	attackbotsspam	Port Scan detected from 157.52.252.128 (US/United States/California/Los Angeles (Central LA)/-). 4 hits in the last 140 seconds	2020-04-28 03:43:43
157.52.252.156	attackspam	157.52.252.156 has been banned for [spam] ...	2020-03-20 21:16:22
157.52.252.154	attack	Automatic report - Port Scan Attack	2020-01-13 06:08:51
157.52.252.203	attackbotsspam	helo=	2019-08-19 19:31:58
157.52.252.204	attackspambots	helo=	2019-08-19 19:15:39

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 157.52.252.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42130
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;157.52.252.112.			IN	A

;; AUTHORITY SECTION:
.			447	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020061301 1800 900 604800 86400

;; Query time: 55 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jun 14 13:13:11 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

112.252.52.157.in-addr.arpa domain name pointer goleaving.net.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
112.252.52.157.in-addr.arpa	name = goleaving.net.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
1.175.87.181	attack	Telnetd brute force attack detected by fail2ban	2019-09-23 21:31:13
163.179.32.23	attackspambots	SS5,WP GET /wp-login.php	2019-09-23 21:30:58
106.13.140.52	attackbots	Sep 23 03:23:59 hpm sshd\[30611\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.140.52 user=root Sep 23 03:24:01 hpm sshd\[30611\]: Failed password for root from 106.13.140.52 port 55694 ssh2 Sep 23 03:29:30 hpm sshd\[31081\]: Invalid user enisa from 106.13.140.52 Sep 23 03:29:30 hpm sshd\[31081\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.140.52 Sep 23 03:29:32 hpm sshd\[31081\]: Failed password for invalid user enisa from 106.13.140.52 port 37984 ssh2	2019-09-23 21:33:40
104.229.105.140	attackbots	Automatic report - Banned IP Access	2019-09-23 21:38:34
45.136.109.194	attackbotsspam	Port Scan: TCP/1021	2019-09-23 21:26:31
201.53.220.200	attackbots	Autoban 201.53.220.200 AUTH/CONNECT	2019-09-23 21:28:40
150.95.24.185	attackspambots	Sep 23 15:19:31 ns3110291 sshd\[3942\]: Invalid user express from 150.95.24.185 Sep 23 15:19:33 ns3110291 sshd\[3942\]: Failed password for invalid user express from 150.95.24.185 port 63949 ssh2 Sep 23 15:24:19 ns3110291 sshd\[4228\]: Invalid user tester from 150.95.24.185 Sep 23 15:24:21 ns3110291 sshd\[4228\]: Failed password for invalid user tester from 150.95.24.185 port 48396 ssh2 Sep 23 15:29:11 ns3110291 sshd\[4449\]: Failed password for nobody from 150.95.24.185 port 32841 ssh2 ...	2019-09-23 21:31:46
36.227.78.223	attackbots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/36.227.78.223/ TW - 1H : (2838) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : TW NAME ASN : ASN3462 IP : 36.227.78.223 CIDR : 36.227.0.0/16 PREFIX COUNT : 390 UNIQUE IP COUNT : 12267520 WYKRYTE ATAKI Z ASN3462 : 1H - 274 3H - 1101 6H - 2228 12H - 2740 24H - 2749 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-09-23 21:30:33
212.83.134.27	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2019-09-23 21:57:41
45.146.202.60	attack	Sep 23 14:41:07 smtp postfix/smtpd[41554]: NOQUEUE: reject: RCPT from puzzling.krcsf.com[45.146.202.60]: 554 5.7.1 Service unavailable; Client host [45.146.202.60] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo= ...	2019-09-23 21:43:00
185.94.111.1	attackbotsspam	23.09.2019 13:03:32 Recursive DNS scan	2019-09-23 22:07:05
167.71.175.204	attackspambots	schuetzenmusikanten.de 167.71.175.204 \[23/Sep/2019:14:40:43 +0200\] "POST /wp-login.php HTTP/1.1" 200 5648 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" schuetzenmusikanten.de 167.71.175.204 \[23/Sep/2019:14:40:48 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4112 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2019-09-23 21:53:42
201.18.75.178	attackspam	Unauthorised access (Sep 23) SRC=201.18.75.178 LEN=52 TTL=109 ID=6054 DF TCP DPT=445 WINDOW=8192 SYN	2019-09-23 21:27:03
148.72.207.248	attackspam	Sep 23 08:46:40 aat-srv002 sshd[12926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.72.207.248 Sep 23 08:46:42 aat-srv002 sshd[12926]: Failed password for invalid user test from 148.72.207.248 port 42824 ssh2 Sep 23 08:51:29 aat-srv002 sshd[13049]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.72.207.248 Sep 23 08:51:31 aat-srv002 sshd[13049]: Failed password for invalid user db2admin from 148.72.207.248 port 56520 ssh2 ...	2019-09-23 21:56:36
68.61.28.196	attackspam	09/23/2019-08:54:01.523065 68.61.28.196 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 69	2019-09-23 21:23:41

最近上报的IP列表

131.135.239.158	55.87.210.170	66.165.119.145	50.232.149.231
235.207.160.139	91.111.116.187	189.86.15.212	218.122.138.148
43.197.212.104	137.112.83.81	194.33.235.69	84.202.52.129
36.57.40.106	238.96.203.91	102.83.8.216	183.136.141.113
109.94.53.87	37.202.89.25	116.233.83.228	3.135.228.103