222.73.52.214 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Shanghai Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbotsspam	Port Scan: TCP/445	2019-08-24 15:41:43
attack	445/tcp 445/tcp 445/tcp... [2019-06-10/07-29]8pkt,1pt.(tcp)	2019-07-30 18:37:05
attack	[SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(06240931)	2019-06-25 05:08:34

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 222.73.52.214
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18699
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;222.73.52.214.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019051601 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri May 17 11:01:41 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 214.52.73.222.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.82.98
Address:	183.60.82.98#53

Non-authoritative answer:
*** Can't find 214.52.73.222.in-addr.arpa.: No answer

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
5.11.166.233	attack	Honeypot attack, port: 81, PTR: PTR record not found	2020-03-07 02:38:56
5.196.70.107	attack	Mar 6 07:52:34 web1 sshd\[1997\]: Invalid user boserver from 5.196.70.107 Mar 6 07:52:34 web1 sshd\[1997\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.70.107 Mar 6 07:52:36 web1 sshd\[1997\]: Failed password for invalid user boserver from 5.196.70.107 port 58082 ssh2 Mar 6 07:59:33 web1 sshd\[2642\]: Invalid user oracle from 5.196.70.107 Mar 6 07:59:33 web1 sshd\[2642\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.70.107	2020-03-07 02:18:44
115.72.240.137	attack	Honeypot attack, port: 81, PTR: adsl.viettel.vn.	2020-03-07 02:27:31
89.34.92.171	attackbots	CMS (WordPress or Joomla) login attempt.	2020-03-07 02:25:14
89.144.47.246	attack	Port 3389 (MS RDP) access denied	2020-03-07 02:47:20
183.146.209.68	attack	suspicious action Fri, 06 Mar 2020 10:30:22 -0300	2020-03-07 02:21:50
45.82.33.176	attack	Mar 6 14:05:59 mail.srvfarm.net postfix/smtpd[2128698]: NOQUEUE: reject: RCPT from unknown[45.82.33.176]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 6 14:06:44 mail.srvfarm.net postfix/smtpd[2118200]: NOQUEUE: reject: RCPT from unknown[45.82.33.176]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 6 14:08:01 mail.srvfarm.net postfix/smtpd[2116260]: NOQUEUE: reject: RCPT from unknown[45.82.33.176]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 6 14:08:24 mail.srvfarm.net postfix/smtpd[2116260]: NOQUEUE: reject: RCPT from unkno	2020-03-07 02:15:59
192.241.216.109	attackspambots	Automatic report - Port Scan Attack	2020-03-07 02:22:46
185.143.223.164	attackbotsspam	Mar 6 14:10:45 mail.srvfarm.net postfix/smtpd[2116265]: NOQUEUE: reject: RCPT from unknown[185.143.223.164]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo=<[185.143.223.170]> Mar 6 14:10:45 mail.srvfarm.net postfix/smtpd[2116265]: NOQUEUE: reject: RCPT from unknown[185.143.223.164]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo=<[185.143.223.170]> Mar 6 14:10:45 mail.srvfarm.net postfix/smtpd[2116255]: NOQUEUE: reject: RCPT from unknown[185.143.223.164]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo=<[185.143.223.170]> Mar 6 14:10:45 mail.srvfarm.net postfix/smtpd[2116265]: NOQUEUE: reject: RCPT from unknown[185.143.223.164]: 554 5.7.1 : Relay access denied; from=	2020-03-07 02:07:53
114.33.113.68	attack	firewall-block, port(s): 4567/tcp	2020-03-07 02:29:48
185.100.87.246	attackspambots	404 NOT FOUND	2020-03-07 02:33:42
179.222.96.70	attackbots	Mar 6 03:25:34 tdfoods sshd\[22877\]: Invalid user piotr from 179.222.96.70 Mar 6 03:25:34 tdfoods sshd\[22877\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.222.96.70 Mar 6 03:25:35 tdfoods sshd\[22877\]: Failed password for invalid user piotr from 179.222.96.70 port 41330 ssh2 Mar 6 03:30:24 tdfoods sshd\[23258\]: Invalid user wangxx from 179.222.96.70 Mar 6 03:30:24 tdfoods sshd\[23258\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.222.96.70	2020-03-07 02:17:48
5.236.19.149	attack	IP: 5.236.19.149 Ports affected World Wide Web HTTP (80) Abuse Confidence rating 41% Found in DNSBL('s) ASN Details AS58224 Iran Telecommunication Company PJS Iran (IR) CIDR 5.236.0.0/17 Log Date: 6/03/2020 1:12:15 PM UTC	2020-03-07 02:43:49
116.97.209.212	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 06-03-2020 13:30:11.	2020-03-07 02:40:08
51.68.38.228	attackspam	Mar 6 15:07:06 Ubuntu-1404-trusty-64-minimal sshd\[7331\]: Invalid user admin from 51.68.38.228 Mar 6 15:07:06 Ubuntu-1404-trusty-64-minimal sshd\[7331\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.38.228 Mar 6 15:07:08 Ubuntu-1404-trusty-64-minimal sshd\[7331\]: Failed password for invalid user admin from 51.68.38.228 port 40720 ssh2 Mar 6 15:12:59 Ubuntu-1404-trusty-64-minimal sshd\[11460\]: Invalid user kevin from 51.68.38.228 Mar 6 15:12:59 Ubuntu-1404-trusty-64-minimal sshd\[11460\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.38.228	2020-03-07 02:18:11

最近上报的IP列表

89.28.252.214	59.124.36.104	60.246.1.74	121.78.147.194
59.124.13.72	117.4.90.95	41.65.3.130	118.70.178.121
175.111.142.116	238.156.199.81	213.14.88.82	195.9.186.139
193.227.50.220	180.216.206.243	189.211.188.47	115.74.250.176
113.176.84.72	115.84.113.200	103.16.169.19	180.183.246.210