160.20.109.51 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Turkey

运营商(isp): Verinoks Teknoloji Anonim Sirketi

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Scanning	2019-11-15 23:32:42
attackbots	SASL Brute Force	2019-11-14 15:48:26

相同子网IP讨论:

IP	类型	评论内容	时间
160.20.109.31	attackbots	Nov 14 09:12:38 our-server-hostname postfix/smtpd[12941]: connect from unknown[160.20.109.31] Nov x@x Nov x@x Nov 14 09:12:41 our-server-hostname postfix/smtpd[12941]: 19CA4A4001C: client=unknown[160.20.109.31] Nov 14 09:12:41 our-server-hostname postfix/smtpd[19541]: 90F51A4008E: client=unknown[127.0.0.1], orig_client=unknown[160.20.109.31] Nov 14 09:12:41 our-server-hostname amavis[10108]: (10108-16) Passed CLEAN, [160.20.109.31] [160.20.109.31] , mail_id: KF5nzsuQvkTY, Hhostnames: -, size: 4992, queued_as: 90F51A4008E, 110 ms Nov 14 09:12:46 our-server-hostname postfix/smtpd[7332]: connect from unknown[160.20.109.31] Nov x@x Nov x@x Nov 14 09:12:46 our-server-hostname postfix/smtpd[12941]: AB71CA40042: client=unknown[160.20.109.31] Nov x@x Nov 14 09:12:47 our-server-hostname postfix/smtpd[19702]: 30EECA4008E: client=unknown[127.0.0.1], orig_client=unknown[160.20.109.31] Nov 14 09:12:47 our-server-hostname amavis[19638]: (19638-03) Passed CLEAN, [160.20.109.31] [........ -------------------------------	2019-11-14 08:06:38
160.20.109.73	attackbots	Oct 23 15:16:34 mailman postfix/smtpd[17551]: NOQUEUE: reject: RCPT from unknown[160.20.109.73]: 554 5.7.1 Service unavailable; Client host [160.20.109.73] blocked using bl.fmb.la; Netblock listed in fmb.la level 2; from= to= proto=ESMTP helo= Oct 23 15:16:35 mailman postfix/smtpd[17551]: NOQUEUE: reject: RCPT from unknown[160.20.109.73]: 554 5.7.1 Service unavailable; Client host [160.20.109.73] blocked using bl.fmb.la; Netblock listed in fmb.la level 2; from= to= proto=ESMTP helo=	2019-10-24 05:09:53
160.20.109.63	attackbotsspam	X-Barracuda-Envelope-From: appeal@gravitystem.best X-Barracuda-Effective-Source-IP: UNKNOWN[160.20.109.63] X-Barracuda-Apparent-Source-IP: 160.20.109.63 From: " Troy Harrison" Date: Wed, 23 Oct 2019 06:26:11 -0500	2019-10-23 20:15:03
160.20.109.5	attackbots	X-Barracuda-Connect: hostmaster.hostingdunyam.com.tr[160.20.109.5] X-Barracuda-Start-Time: 1570889939 X-Barracuda-URL: https://172.17.6.40:443/cgi-mod/mark.cgi X-Barracuda-BRTS-Status: 1 X-Barracuda-BRTS-Evidence: baconbrain.icu	2019-10-15 20:21:42
160.20.109.4	attack	Oct 13 00:10:08 our-server-hostname postfix/smtpd[27373]: connect from unknown[160.20.109.4] Oct x@x Oct 13 00:11:09 our-server-hostname postfix/smtpd[27373]: disconnect from unknown[160.20.109.4] Oct 13 00:14:02 our-server-hostname postfix/smtpd[26665]: connect from unknown[160.20.109.4] Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct x@x Oct 13 00:14:09 our-server-hostname postfix/smtpd[26665]: too many errors after DATA from unknown[160.20.109.4] Oct 13 00:14:09 our-server-hostname postfix/smtpd[26665]: disconnect from unknown[160.20.109.4] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=160.20.109.4	2019-10-13 04:55:14
160.20.109.141	attackbotsspam	TCP Port: 25 _ invalid blocked barracudacentral zen-spamhaus _ _ _ _ (774)	2019-08-08 09:42:30

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 160.20.109.51
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34409
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;160.20.109.51.			IN	A

;; AUTHORITY SECTION:
.			371	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111400 1800 900 604800 86400

;; Query time: 507 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Nov 14 15:48:22 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

51.109.20.160.in-addr.arpa domain name pointer hostmaster.hostingdunyam.com.tr.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
51.109.20.160.in-addr.arpa	name = hostmaster.hostingdunyam.com.tr.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
197.45.249.75	attackbotsspam	445/tcp [2019-09-29]1pkt	2019-09-30 06:27:09
179.111.200.245	attackbotsspam	Reported by AbuseIPDB proxy server.	2019-09-30 05:55:34
171.244.0.81	attackspambots	Sep 30 00:14:25 meumeu sshd[19814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.0.81 Sep 30 00:14:27 meumeu sshd[19814]: Failed password for invalid user admin from 171.244.0.81 port 58315 ssh2 Sep 30 00:18:56 meumeu sshd[20473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.244.0.81 ...	2019-09-30 06:24:36
116.52.131.205	attack	90/tcp [2019-09-29]1pkt	2019-09-30 06:23:02
121.16.60.251	attackspam	Port scan	2019-09-30 06:25:31
111.198.29.223	attackbotsspam	Sep 29 23:46:02 root sshd[26014]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.198.29.223 Sep 29 23:46:04 root sshd[26014]: Failed password for invalid user test from 111.198.29.223 port 13696 ssh2 Sep 29 23:49:43 root sshd[26052]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.198.29.223 ...	2019-09-30 06:05:45
221.226.28.244	attack	Sep 29 11:50:44 hiderm sshd\[12683\]: Invalid user wolf from 221.226.28.244 Sep 29 11:50:44 hiderm sshd\[12683\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.226.28.244 Sep 29 11:50:46 hiderm sshd\[12683\]: Failed password for invalid user wolf from 221.226.28.244 port 58982 ssh2 Sep 29 11:54:45 hiderm sshd\[13005\]: Invalid user 123456 from 221.226.28.244 Sep 29 11:54:45 hiderm sshd\[13005\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.226.28.244	2019-09-30 06:06:59
220.174.246.16	attackbots	Chat Spam	2019-09-30 06:15:53
101.181.121.254	attackspambots	23/tcp [2019-09-29]1pkt	2019-09-30 06:17:03
185.191.228.166	attackspam	Sep 29 22:51:22 h2177944 kernel: \[2666506.769922\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.191.228.166 DST=85.214.117.9 LEN=52 TOS=0x02 PREC=0x00 TTL=114 ID=6916 DF PROTO=TCP SPT=54937 DPT=20 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 Sep 29 22:51:23 h2177944 kernel: \[2666507.512711\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.191.228.166 DST=85.214.117.9 LEN=52 TOS=0x02 PREC=0x00 TTL=113 ID=6917 DF PROTO=TCP SPT=55014 DPT=40 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 Sep 29 22:51:26 h2177944 kernel: \[2666509.791362\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.191.228.166 DST=85.214.117.9 LEN=52 TOS=0x02 PREC=0x00 TTL=114 ID=6918 DF PROTO=TCP SPT=54937 DPT=20 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 Sep 29 22:51:26 h2177944 kernel: \[2666510.526110\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=185.191.228.166 DST=85.214.117.9 LEN=52 TOS=0x02 PREC=0x00 TTL=113 ID=6919 DF PROTO=TCP SPT=55014 DPT=40 WINDOW=8192 RES=0x00 CWR ECE SYN URGP=0 Sep 29 22:51:32 h2177944 kernel: \[2666515.790463\] \[UFW BLOCK\] IN=venet0 OUT=	2019-09-30 06:14:52
54.38.184.10	attack	Sep 30 03:15:32 gw1 sshd[16264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.184.10 Sep 30 03:15:34 gw1 sshd[16264]: Failed password for invalid user test from 54.38.184.10 port 46562 ssh2 ...	2019-09-30 06:18:13
103.194.242.254	attack	Brute force SMTP login attempts.	2019-09-30 05:58:34
222.186.52.107	attackspambots	2019-09-30T04:53:20.491895enmeeting.mahidol.ac.th sshd\[18326\]: User root from 222.186.52.107 not allowed because not listed in AllowUsers 2019-09-30T04:53:21.750865enmeeting.mahidol.ac.th sshd\[18326\]: Failed none for invalid user root from 222.186.52.107 port 31252 ssh2 2019-09-30T04:53:23.118924enmeeting.mahidol.ac.th sshd\[18326\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.107 user=root ...	2019-09-30 06:03:57
107.167.24.170	attack	445/tcp [2019-09-29]1pkt	2019-09-30 05:53:39
115.68.220.10	attackspam	Sep 29 21:46:38 web8 sshd\[30380\]: Invalid user wangyi from 115.68.220.10 Sep 29 21:46:38 web8 sshd\[30380\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.68.220.10 Sep 29 21:46:40 web8 sshd\[30380\]: Failed password for invalid user wangyi from 115.68.220.10 port 53774 ssh2 Sep 29 21:50:23 web8 sshd\[32223\]: Invalid user gas from 115.68.220.10 Sep 29 21:50:23 web8 sshd\[32223\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.68.220.10	2019-09-30 06:12:56

最近上报的IP列表

6.90.134.136	109.66.227.50	241.33.198.212	61.21.201.103
133.29.24.196	90.120.142.165	96.148.41.120	56.11.131.19
174.143.233.42	103.74.72.114	245.56.71.227	60.167.89.126
122.51.83.37	177.52.63.96	175.9.142.56	138.204.148.224
31.155.169.212	114.64.255.207	156.67.250.205	176.79.2.69