160.20.52.22 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hong Kong

运营商(isp): 4/F Weswick Commercial Building

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Commercial

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Unauthorized connection attempt from IP address 160.20.52.22 on Port 445(SMB)	2020-02-27 17:19:11
attack	1582174625 - 02/20/2020 05:57:05 Host: 160.20.52.22/160.20.52.22 Port: 445 TCP Blocked	2020-02-20 13:21:30
attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-14 20:09:34
attack	445/tcp 445/tcp 445/tcp... [2019-11-15/2020-01-10]4pkt,1pt.(tcp)	2020-01-10 19:10:31
attack	Unauthorized connection attempt from IP address 160.20.52.22 on Port 445(SMB)	2019-09-03 23:35:55

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 160.20.52.22
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5543
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;160.20.52.22.			IN	A

;; AUTHORITY SECTION:
.			1306	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019090300 1800 900 604800 86400

;; Query time: 8 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Sep 03 23:35:42 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 22.52.20.160.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 22.52.20.160.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
165.246.16.9	attackspam	"Signature requested" spam with htm attachment	2020-06-02 21:44:13
62.210.105.116	attackbotsspam	prod6 ...	2020-06-02 21:40:10
182.76.79.36	attackspam	Jun 2 14:00:21 home sshd[26687]: Failed password for root from 182.76.79.36 port 30886 ssh2 Jun 2 14:03:59 home sshd[27112]: Failed password for root from 182.76.79.36 port 57327 ssh2 ...	2020-06-02 22:02:38
141.98.10.127	attackspambots	[2020-06-02 09:35:37] NOTICE[1156] chan_sip.c: Registration from '' failed for '141.98.10.127:58739' - Wrong password [2020-06-02 09:35:37] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-02T09:35:37.356-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="Jules",SessionID="0x7fc4440daff8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/141.98.10.127/58739",Challenge="2597d7c9",ReceivedChallenge="2597d7c9",ReceivedHash="1b2e735435e74ef906e2d288fdede305" [2020-06-02 09:35:47] NOTICE[1156] chan_sip.c: Registration from '' failed for '141.98.10.127:54160' - Wrong password [2020-06-02 09:35:47] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-02T09:35:47.867-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="dakota",SessionID="0x7fc444068078",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/141.98. ...	2020-06-02 21:51:23
222.186.42.137	attackspambots	Jun 2 07:05:35 dignus sshd[9639]: Failed password for root from 222.186.42.137 port 53242 ssh2 Jun 2 07:05:37 dignus sshd[9639]: Failed password for root from 222.186.42.137 port 53242 ssh2 Jun 2 07:05:39 dignus sshd[9639]: Failed password for root from 222.186.42.137 port 53242 ssh2 Jun 2 07:05:43 dignus sshd[9655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.137 user=root Jun 2 07:05:45 dignus sshd[9655]: Failed password for root from 222.186.42.137 port 19072 ssh2 ...	2020-06-02 22:09:33
91.204.248.42	attack	Jun 2 14:01:21 zulu412 sshd\[30543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.204.248.42 user=root Jun 2 14:01:23 zulu412 sshd\[30543\]: Failed password for root from 91.204.248.42 port 44954 ssh2 Jun 2 14:07:36 zulu412 sshd\[31104\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.204.248.42 user=root ...	2020-06-02 21:43:53
66.240.205.34	attackspam	Unauthorized connection attempt detected from IP address 66.240.205.34 to port 10134	2020-06-02 21:59:10
14.18.107.61	attack	Jun 2 12:05:18 ns3033917 sshd[18906]: Failed password for root from 14.18.107.61 port 53482 ssh2 Jun 2 12:07:27 ns3033917 sshd[18917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.18.107.61 user=root Jun 2 12:07:29 ns3033917 sshd[18917]: Failed password for root from 14.18.107.61 port 37974 ssh2 ...	2020-06-02 21:50:02
200.88.48.99	attackspam	IP blocked	2020-06-02 21:34:39
94.180.247.20	attackspambots	Jun 2 15:32:45 buvik sshd[23789]: Failed password for root from 94.180.247.20 port 49184 ssh2 Jun 2 15:36:21 buvik sshd[24269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.180.247.20 user=root Jun 2 15:36:23 buvik sshd[24269]: Failed password for root from 94.180.247.20 port 51646 ssh2 ...	2020-06-02 21:39:53
134.17.94.69	attackbotsspam	Jun 1 19:11:55 our-server-hostname sshd[17594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.17.94.69 user=r.r Jun 1 19:11:58 our-server-hostname sshd[17594]: Failed password for r.r from 134.17.94.69 port 4938 ssh2 Jun 1 19:28:11 our-server-hostname sshd[20978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.17.94.69 user=r.r Jun 1 19:28:12 our-server-hostname sshd[20978]: Failed password for r.r from 134.17.94.69 port 4939 ssh2 Jun 1 19:31:31 our-server-hostname sshd[21729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.17.94.69 user=r.r Jun 1 19:31:33 our-server-hostname sshd[21729]: Failed password for r.r from 134.17.94.69 port 4940 ssh2 Jun 1 19:34:56 our-server-hostname sshd[22329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.17.94.69 user=r.r Jun 1 19:34:58 our-server........ -------------------------------	2020-06-02 22:00:29
115.73.217.240	attack	ft-1848-basketball.de 115.73.217.240 [02/Jun/2020:14:07:52 +0200] "POST /xmlrpc.php HTTP/1.1" 200 408 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36" ft-1848-basketball.de 115.73.217.240 [02/Jun/2020:14:07:57 +0200] "POST /xmlrpc.php HTTP/1.1" 200 408 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36"	2020-06-02 21:24:25
222.186.173.183	attackspam	May 24 05:41:20 v2202003116398111542 sshd[9397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.183 user=root	2020-06-02 22:01:31
62.210.90.227	attack	2020-06-02T13:19:12.611256shield sshd\[32742\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62-210-90-227.rev.poneytelecom.eu user=root 2020-06-02T13:19:14.827703shield sshd\[32742\]: Failed password for root from 62.210.90.227 port 39226 ssh2 2020-06-02T13:22:30.146312shield sshd\[771\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62-210-90-227.rev.poneytelecom.eu user=root 2020-06-02T13:22:32.210915shield sshd\[771\]: Failed password for root from 62.210.90.227 port 38384 ssh2 2020-06-02T13:25:52.836500shield sshd\[1472\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62-210-90-227.rev.poneytelecom.eu user=root	2020-06-02 22:08:00
202.77.105.110	attackbots	Jun 2 14:03:36 melroy-server sshd[4105]: Failed password for root from 202.77.105.110 port 36388 ssh2 ...	2020-06-02 21:38:26

最近上报的IP列表

172.73.118.69	135.134.42.246	250.176.88.98	208.228.209.102
26.146.161.65	243.102.91.171	46.176.31.47	89.237.14.36
133.151.247.222	179.5.227.7	140.74.82.194	20.240.59.177
114.79.160.36	175.254.176.102	216.147.86.13	16.223.171.237
193.57.127.192	185.234.219.195	89.139.152.43	125.24.144.59