20.20.200.246 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Netherlands

运营商(isp): Microsoft Corporation

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	10/12/2019-23:44:53.633373 20.20.200.246 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2019-10-13 19:13:50

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 20.20.200.246
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48044
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;20.20.200.246.			IN	A

;; AUTHORITY SECTION:
.			495	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101300 1800 900 604800 86400

;; Query time: 499 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 13 19:13:48 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 246.200.20.20.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 246.200.20.20.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
51.38.39.182	attackbots	Automatic report - Banned IP Access	2019-08-28 07:34:35
185.216.140.16	attackspam	08/27/2019-18:26:31.902281 185.216.140.16 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-08-28 07:53:27
182.74.0.162	attackspam	Unauthorized connection attempt from IP address 182.74.0.162 on Port 445(SMB)	2019-08-28 07:54:06
177.131.121.50	attackspam	2019-08-27T21:33:16.675206stark.klein-stark.info sshd\[25355\]: Invalid user cmi from 177.131.121.50 port 51798 2019-08-27T21:33:16.679136stark.klein-stark.info sshd\[25355\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177-131-121-50.acessoline.net.br 2019-08-27T21:33:18.841742stark.klein-stark.info sshd\[25355\]: Failed password for invalid user cmi from 177.131.121.50 port 51798 ssh2 ...	2019-08-28 07:30:39
218.92.0.155	attackspambots	Aug 28 01:54:09 s64-1 sshd[22597]: Failed password for root from 218.92.0.155 port 3596 ssh2 Aug 28 01:54:23 s64-1 sshd[22597]: error: maximum authentication attempts exceeded for root from 218.92.0.155 port 3596 ssh2 [preauth] Aug 28 01:54:41 s64-1 sshd[22624]: Failed password for root from 218.92.0.155 port 37538 ssh2 ...	2019-08-28 08:07:21
197.59.80.192	attack	Bruteforce on SSH Honeypot	2019-08-28 07:55:30
103.197.105.18	attackspam	Distributed brute force attack	2019-08-28 07:49:59
197.38.13.88	attackbots	Automatic report - Port Scan Attack	2019-08-28 07:29:33
81.142.80.97	attackspam	Aug 27 23:00:46 dedicated sshd[28798]: Invalid user adminit from 81.142.80.97 port 57339	2019-08-28 07:26:56
80.85.153.60	attackspambots	\[2019-08-27 19:32:33\] NOTICE\[1829\] chan_sip.c: Registration from '"4701" \' failed for '80.85.153.60:5087' - Wrong password \[2019-08-27 19:32:33\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-27T19:32:33.230-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4701",SessionID="0x7f7b30db7498",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/80.85.153.60/5087",Challenge="3d1f5c0d",ReceivedChallenge="3d1f5c0d",ReceivedHash="d52407f0f8a611a9f718db6e93775509" \[2019-08-27 19:33:04\] NOTICE\[1829\] chan_sip.c: Registration from '"3881" \' failed for '80.85.153.60:5063' - Wrong password \[2019-08-27 19:33:04\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-27T19:33:04.130-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3881",SessionID="0x7f7b30531ec8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/8	2019-08-28 07:45:34
182.176.114.244	attackspam	Unauthorized connection attempt from IP address 182.176.114.244 on Port 445(SMB)	2019-08-28 07:51:41
176.118.55.158	attack	2019-08-27 14:32:49 H=(ip-176-118-55-158.radionetwork.com.ua) [176.118.55.158]:49605 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/176.118.55.158) 2019-08-27 14:32:50 H=(ip-176-118-55-158.radionetwork.com.ua) [176.118.55.158]:49605 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/176.118.55.158) 2019-08-27 14:32:51 H=(ip-176-118-55-158.radionetwork.com.ua) [176.118.55.158]:49605 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS) ...	2019-08-28 07:47:04
122.6.215.220	attackbots	Unauthorised access (Aug 27) SRC=122.6.215.220 LEN=40 TTL=47 ID=50035 TCP DPT=8080 WINDOW=1373 SYN	2019-08-28 07:54:56
180.248.251.6	attack	Unauthorized connection attempt from IP address 180.248.251.6 on Port 445(SMB)	2019-08-28 07:44:37
181.143.157.51	attackbotsspam	Unauthorized connection attempt from IP address 181.143.157.51 on Port 445(SMB)	2019-08-28 07:47:59

最近上报的IP列表

182.119.116.6	242.148.205.207	180.148.214.181	218.92.229.154
172.16.20.40	109.234.248.83	62.210.28.186	178.212.167.184
174.138.54.109	191.6.192.115	159.89.160.91	164.243.114.106
94.73.148.47	182.155.222.219	113.160.1.70	14.211.255.69
178.66.243.36	123.16.128.162	225.193.130.174	87.197.168.27