200.52.6.66 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Mexico

运营商(isp): Axtel S.A.B. de C.V.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Automatic report - Port Scan Attack	2020-05-13 20:46:14

相同子网IP讨论:

IP	类型	评论内容	时间
200.52.60.192	attack	Sep 28 22:38:03 mellenthin postfix/smtpd[9356]: NOQUEUE: reject: RCPT from unknown[200.52.60.192]: 554 5.7.1 Service unavailable; Client host [200.52.60.192] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/200.52.60.192; from= to= proto=ESMTP helo=	2020-09-29 22:51:59
200.52.60.192	attackbots	Sep 28 22:38:03 mellenthin postfix/smtpd[9356]: NOQUEUE: reject: RCPT from unknown[200.52.60.192]: 554 5.7.1 Service unavailable; Client host [200.52.60.192] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/200.52.60.192; from= to= proto=ESMTP helo=	2020-09-29 15:09:40
200.52.67.82	attack	Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-09-19 03:19:02
200.52.61.134	attackspambots	Automatic report - Port Scan Attack	2020-05-10 14:45:49
200.52.66.6	attackspambots	2019-07-09 04:52:33 1hkgF6-00044J-3m SMTP connection from \(6.66.52.200.in-addr.arpa\) \[200.52.66.6\]:61643 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-09 04:52:48 1hkgFK-00044b-M9 SMTP connection from \(6.66.52.200.in-addr.arpa\) \[200.52.66.6\]:43974 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-09 04:52:57 1hkgFU-00044s-Ct SMTP connection from \(6.66.52.200.in-addr.arpa\) \[200.52.66.6\]:53102 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-01-30 00:00:52
200.52.61.232	attack	unauthorized connection attempt	2020-01-28 19:41:30
200.52.61.16	attack	Unauthorized connection attempt detected from IP address 200.52.61.16 to port 23 [J]	2020-01-27 15:00:47
200.52.61.180	attackbotsspam	Port Scan detected from 200.52.61.180 (MX/Mexico/aol-dial-200-52-61-180.zone-0.ip.static-ftth.axtel.net.mx). 4 hits in the last 150 seconds	2020-01-22 14:29:55
200.52.60.193	attack	Automatic report - Port Scan Attack	2019-10-09 02:53:37
200.52.60.241	attackbots	Automatic report - Port Scan Attack	2019-09-14 16:57:43
200.52.60.227	attackbotsspam	Automatic report - Port Scan Attack	2019-07-25 05:24:56

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 200.52.6.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53201
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;200.52.6.66.			IN	A

;; AUTHORITY SECTION:
.			377	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020051300 1800 900 604800 86400

;; Query time: 109 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed May 13 20:46:04 CST 2020
;; MSG SIZE  rcvd: 115

HOST信息:

66.6.52.200.in-addr.arpa domain name pointer as5-200-52-6-66.mtyxl.static.axtel.net.
66.6.52.200.in-addr.arpa domain name pointer as5-200-52-6-66.mtyxl.axtel.net.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
66.6.52.200.in-addr.arpa	name = as5-200-52-6-66.mtyxl.axtel.net.
66.6.52.200.in-addr.arpa	name = as5-200-52-6-66.mtyxl.static.axtel.net.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
92.51.31.232	attackspam	[portscan] Port scan	2019-07-06 17:37:43
217.133.99.111	attackspambots	Jul 6 08:47:38 www sshd\[23636\]: Invalid user lan from 217.133.99.111 port 49700 ...	2019-07-06 17:36:10
134.73.161.252	attack	/var/log/messages:Jul 6 03:23:11 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1562383391.022:2856): pid=727 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=728 suid=74 rport=54330 laddr=104.167.106.93 lport=23 exe="/usr/sbin/sshd" hostname=? addr=134.73.161.252 terminal=? res=success' /var/log/messages:Jul 6 03:23:11 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1562383391.025:2857): pid=727 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=ecdh-sha2-nistp256 spid=728 suid=74 rport=54330 laddr=104.167.106.93 lport=23 exe="/usr/sbin/sshd" hostname=? addr=134.73.161.252 terminal=? res=success' /var/log/messages:Jul 6 03:23:11 sanyalnet-cloud-vps fail2ban.filter[5252]: INFO [sshd] Found 134.73......... -------------------------------	2019-07-06 17:48:30
23.88.167.250	attack	19/7/5@23:44:08: FAIL: Alarm-Intrusion address from=23.88.167.250 ...	2019-07-06 16:59:19
85.31.177.238	attackspambots	[portscan] Port scan	2019-07-06 16:54:57
181.13.23.34	attackbots	2019-07-06 05:24:13 H=host34.181-13-23.telecom.net.ar (hostnameiotyi.com) [181.13.23.34]:34305 I=[10.100.18.25]:25 sender verify fail for : Unrouteable address 2019-07-06 x@x 2019-07-06 05:24:14 unexpected disconnection while reading SMTP command from host34.181-13-23.telecom.net.ar (hostnameiotyi.com) [181.13.23.34]:34305 I=[10.100.18.25]:25 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=181.13.23.34	2019-07-06 17:50:03
167.99.46.145	attackspambots	2019-07-06T10:48:56.261781stark.klein-stark.info sshd\[8500\]: Invalid user dominic from 167.99.46.145 port 41438 2019-07-06T10:48:56.268356stark.klein-stark.info sshd\[8500\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.46.145 2019-07-06T10:48:58.190978stark.klein-stark.info sshd\[8500\]: Failed password for invalid user dominic from 167.99.46.145 port 41438 ssh2 ...	2019-07-06 16:57:04
95.70.224.77	attackspambots	Telnetd brute force attack detected by fail2ban	2019-07-06 17:46:02
207.46.13.35	attackbotsspam	Automatic report - Web App Attack	2019-07-06 17:34:56
177.190.85.174	attack	Jul 6 06:43:14 srv-4 sshd\[5204\]: Invalid user admin from 177.190.85.174 Jul 6 06:43:14 srv-4 sshd\[5204\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.190.85.174 Jul 6 06:43:16 srv-4 sshd\[5204\]: Failed password for invalid user admin from 177.190.85.174 port 58304 ssh2 ...	2019-07-06 17:18:03
217.29.21.66	attack	Invalid user miner from 217.29.21.66 port 57372	2019-07-06 17:18:35
196.46.36.144	attackbots	Invalid user ih from 196.46.36.144 port 39091 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.46.36.144 Failed password for invalid user ih from 196.46.36.144 port 39091 ssh2 Invalid user teacher from 196.46.36.144 port 51198 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.46.36.144	2019-07-06 17:25:06
185.13.76.222	attackspambots	Jul 6 05:44:31 dedicated sshd[10949]: Invalid user html from 185.13.76.222 port 33472	2019-07-06 16:50:12
71.237.171.150	attackspam	Jul 6 11:18:00 amit sshd\[6448\]: Invalid user minecraft from 71.237.171.150 Jul 6 11:18:00 amit sshd\[6448\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=71.237.171.150 Jul 6 11:18:02 amit sshd\[6448\]: Failed password for invalid user minecraft from 71.237.171.150 port 54126 ssh2 ...	2019-07-06 17:49:28
45.121.121.162	attack	TCP port 23 (Telnet) attempt blocked by firewall. [2019-07-06 05:42:12]	2019-07-06 17:12:51

最近上报的IP列表

79.106.125.14	5.196.171.101	2.135.39.134	176.119.28.196
34.72.16.199	2.134.183.238	103.129.220.94	74.6.134.125
183.89.212.244	36.79.255.85	47.107.43.232	134.122.14.226
36.48.144.158	178.62.234.124	1.55.154.239	189.213.158.198
218.166.99.248	148.251.135.249	114.217.58.52	114.226.52.55

基本信息:

用户上报:

相同子网IP讨论:

WHOIS信息:

DIG信息:

HOST信息:

NSLOOKUP信息:

相关IP信息:

最新评论:

最近上报的IP列表