160.20.253.6 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): South Africa

运营商(isp): Aeonova360 Management Services (Pty) Ltd

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspambots	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-28 15:13:33
attackbotsspam	SMB Server BruteForce Attack	2019-08-26 14:18:06

相同子网IP讨论:

IP	类型	评论内容	时间
160.20.253.49	attackspam	Brute forcing RDP port 3389	2020-07-09 14:47:21
160.20.253.18	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-07-06 01:33:06
160.20.253.64	attackbots	firewall-block, port(s): 1433/tcp	2020-05-07 17:52:34
160.20.253.19	attackbots	Unauthorized connection attempt detected from IP address 160.20.253.19 to port 1433 [J]	2020-01-25 17:42:45
160.20.253.41	attack	1433/tcp [2019-12-13]1pkt	2019-12-14 00:27:13
160.20.253.23	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2019-12-10 13:40:19

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 160.20.253.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21786
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;160.20.253.6.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082501 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Aug 26 14:18:00 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 6.253.20.160.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 6.253.20.160.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
200.10.71.5	attackbotsspam	Unauthorized connection attempt detected from IP address 200.10.71.5 to port 9090 [T]	2020-05-09 04:33:04
109.116.119.16	attackspambots	Unauthorized connection attempt detected from IP address 109.116.119.16 to port 80 [T]	2020-05-09 04:49:08
185.234.218.249	attackspambots	May 08 22:27:24 pop3-login: Info: Disconnected: Inactivity \(auth failed, 1 attempts in 180 secs\): user=\, method=PLAIN, rip=185.234.218.249, lip=192.168.100.101, session=\\ May 08 22:55:36 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=185.234.218.249, lip=192.168.100.101, session=\\ May 08 22:55:41 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=185.234.218.249, lip=192.168.100.101, session=\\ May 08 22:55:43 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=185.234.218.249, lip=192.168.100.101, session=\<7EQaOCml5gC56tr5\>\ May 08 22:55:44 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=185.234.218.249, lip=192.168.100.101, session=\	2020-05-09 04:57:12
171.38.194.250	attackbots	[Block] Port Scanning \| Rate: 10 hits/1hr	2020-05-09 04:38:10
116.132.6.182	attackspambots	Unauthorized connection attempt detected from IP address 116.132.6.182 to port 10015 [T]	2020-05-09 04:44:47
188.130.243.122	attackspam	Unauthorized connection attempt detected from IP address 188.130.243.122 to port 81 [T]	2020-05-09 04:34:49
139.186.74.64	attackspam	srv02 Mass scanning activity detected Target: 18841 ..	2020-05-09 05:03:34
220.201.111.48	attackspam	Unauthorized connection attempt detected from IP address 220.201.111.48 to port 23 [T]	2020-05-09 04:30:11
64.225.110.186	attack	/wp-login.php IP address is infected with Ransomware TCP connection from "64.225.110.186" on port "51934" going to IP address "192.42.119.41" botnet command and control domain for this connection was "ftrjhmnvtercxg.info"	2020-05-09 05:04:41
37.59.224.39	attackbotsspam	May 8 22:44:26 PorscheCustomer sshd[5530]: Failed password for root from 37.59.224.39 port 58624 ssh2 May 8 22:47:51 PorscheCustomer sshd[5679]: Failed password for root from 37.59.224.39 port 34602 ssh2 ...	2020-05-09 04:54:01
68.37.92.238	attackspambots	May 8 23:02:16 PorscheCustomer sshd[6189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.37.92.238 May 8 23:02:18 PorscheCustomer sshd[6189]: Failed password for invalid user donne from 68.37.92.238 port 47618 ssh2 May 8 23:07:56 PorscheCustomer sshd[6442]: Failed password for root from 68.37.92.238 port 37272 ssh2 ...	2020-05-09 05:09:27
110.184.224.91	attack	Unauthorized connection attempt detected from IP address 110.184.224.91 to port 1433 [T]	2020-05-09 04:47:21
178.147.13.168	attackspambots	TCP Port Scanning	2020-05-09 05:00:45
78.85.69.76	attackspam	Unauthorized connection attempt detected from IP address 78.85.69.76 to port 445 [T]	2020-05-09 04:51:53
196.2.9.178	attack	Unauthorized connection attempt detected from IP address 196.2.9.178 to port 8080 [T]	2020-05-09 04:33:54

最近上报的IP列表

109.230.235.116	49.232.18.45	211.180.229.2	36.13.9.5
157.13.182.86	197.226.92.98	30.220.149.49	38.21.176.120
184.217.13.21	186.212.146.46	141.155.90.212	113.19.223.227
87.3.98.159	32.9.137.90	149.190.227.35	178.123.28.103
75.146.149.69	240.155.42.129	185.27.212.160	119.44.15.34