202.29.52.220 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Thailand

运营商(isp): Uninet

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Unauthorized connection attempt from IP address 202.29.52.220 on Port 445(SMB)	2020-01-28 01:07:50
attack	445/tcp 445/tcp 445/tcp... [2019-08-04/09-30]4pkt,1pt.(tcp)	2019-09-30 22:15:51

相同子网IP讨论:

IP	类型	评论内容	时间
202.29.52.49	attackbots	2020-05-05T09:14:21.876572shield sshd\[4481\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.52.49 user=root 2020-05-05T09:14:24.242959shield sshd\[4481\]: Failed password for root from 202.29.52.49 port 60788 ssh2 2020-05-05T09:14:26.603742shield sshd\[4507\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.52.49 user=root 2020-05-05T09:14:28.322857shield sshd\[4507\]: Failed password for root from 202.29.52.49 port 32890 ssh2 2020-05-05T09:14:30.730372shield sshd\[4546\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.52.49 user=root	2020-05-06 01:36:02

类型

评论内容

时间

202.29.52.49

attackbots

2020-05-05T09:14:21.876572shield sshd\[4481\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.52.49  user=root
2020-05-05T09:14:24.242959shield sshd\[4481\]: Failed password for root from 202.29.52.49 port 60788 ssh2
2020-05-05T09:14:26.603742shield sshd\[4507\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.52.49  user=root
2020-05-05T09:14:28.322857shield sshd\[4507\]: Failed password for root from 202.29.52.49 port 32890 ssh2
2020-05-05T09:14:30.730372shield sshd\[4546\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.52.49  user=root

2020-05-06 01:36:02

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 202.29.52.220
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19240
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;202.29.52.220.			IN	A

;; AUTHORITY SECTION:
.			428	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019093000 1800 900 604800 86400

;; Query time: 140 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Sep 30 22:15:46 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 220.52.29.202.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 220.52.29.202.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
98.4.160.39	attack	$f2bV_matches	2019-09-25 18:11:45
139.155.69.51	attackbotsspam	Sep 25 12:35:34 server sshd\[20895\]: Invalid user uy from 139.155.69.51 port 38390 Sep 25 12:35:34 server sshd\[20895\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.69.51 Sep 25 12:35:36 server sshd\[20895\]: Failed password for invalid user uy from 139.155.69.51 port 38390 ssh2 Sep 25 12:40:50 server sshd\[2220\]: Invalid user weblogic from 139.155.69.51 port 49480 Sep 25 12:40:50 server sshd\[2220\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.69.51	2019-09-25 17:59:16
180.243.8.132	attack	Unauthorised access (Sep 25) SRC=180.243.8.132 LEN=52 TTL=115 ID=14618 DF TCP DPT=445 WINDOW=8192 SYN	2019-09-25 18:01:08
46.29.8.150	attackspam	Invalid user raju from 46.29.8.150 port 47568	2019-09-25 18:15:16
178.62.71.94	attackspambots	Automatic report - Banned IP Access	2019-09-25 17:55:09
36.112.137.55	attackspambots	Sep 25 09:17:20 venus sshd\[7945\]: Invalid user pi from 36.112.137.55 port 53311 Sep 25 09:17:20 venus sshd\[7945\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.112.137.55 Sep 25 09:17:23 venus sshd\[7945\]: Failed password for invalid user pi from 36.112.137.55 port 53311 ssh2 ...	2019-09-25 18:26:15
106.52.174.139	attack	$f2bV_matches	2019-09-25 18:06:52
180.127.77.94	attackbots	Sep 25 05:48:15 server postfix/smtpd[32696]: NOQUEUE: reject: RCPT from unknown[180.127.77.94]: 554 5.7.1 Service unavailable; Client host [180.127.77.94] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/180.127.77.94 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=	2019-09-25 18:18:46
219.223.234.4	attackbotsspam	SSH/22 MH Probe, BF, Hack -	2019-09-25 18:20:25
172.94.53.139	attackbots	Sep 25 10:59:50 www4 sshd\[63352\]: Invalid user ny from 172.94.53.139 Sep 25 10:59:50 www4 sshd\[63352\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.94.53.139 Sep 25 10:59:52 www4 sshd\[63352\]: Failed password for invalid user ny from 172.94.53.139 port 35632 ssh2 ...	2019-09-25 17:58:47
111.230.228.183	attackbotsspam	Sep 25 07:08:40 tuotantolaitos sshd[8885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.228.183 Sep 25 07:08:42 tuotantolaitos sshd[8885]: Failed password for invalid user 123456 from 111.230.228.183 port 49054 ssh2 ...	2019-09-25 18:30:47
177.40.36.82	attackspam	port scan and connect, tcp 80 (http)	2019-09-25 17:55:52
163.47.39.70	attack	Sep 25 05:53:21 TORMINT sshd\[9252\]: Invalid user ubnt from 163.47.39.70 Sep 25 05:53:21 TORMINT sshd\[9252\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.47.39.70 Sep 25 05:53:23 TORMINT sshd\[9252\]: Failed password for invalid user ubnt from 163.47.39.70 port 21956 ssh2 ...	2019-09-25 17:54:17
183.181.98.53	attackbotsspam	Scanning and Vuln Attempts	2019-09-25 18:06:11
202.73.9.76	attack	Sep 25 12:10:36 MK-Soft-Root2 sshd[13474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.73.9.76 Sep 25 12:10:38 MK-Soft-Root2 sshd[13474]: Failed password for invalid user alex from 202.73.9.76 port 39208 ssh2 ...	2019-09-25 18:23:44

最近上报的IP列表

218.161.112.40	14.154.179.16	217.93.98.17	140.52.106.169
159.89.148.68	188.29.86.130	130.111.238.72	223.44.241.196
236.85.188.15	167.137.2.205	46.166.0.54	35.26.144.18
102.102.126.241	36.110.2.67	228.216.180.167	142.135.196.221
135.174.244.213	12.5.28.161	241.75.242.156	157.230.248.74