66.42.52.160 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Singapore

运营商(isp): Choopa LLC

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Automatic report - XMLRPC Attack	2020-04-22 19:05:09
attackspambots	ENG,WP GET /wp-login.php	2020-04-22 03:58:45

相同子网IP讨论:

IP	类型	评论内容	时间
66.42.52.214	attackbots	[Aegis] @ 2019-07-26 05:30:25 0100 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack	2020-04-29 20:22:51
66.42.52.9	attack	Registration form abuse	2020-02-21 03:05:27
66.42.52.214	attack	2019-08-16T17:50:03.932960abusebot-7.cloudsearch.cf sshd\[26708\]: Invalid user system from 66.42.52.214 port 59328	2019-08-17 01:54:13
66.42.52.214	attackbotsspam	Aug 2 05:45:54 raspberrypi sshd\[2123\]: Invalid user dropbox from 66.42.52.214 port 58892 Aug 2 05:45:54 raspberrypi sshd\[2123\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.42.52.214 Aug 2 05:45:56 raspberrypi sshd\[2123\]: Failed password for invalid user dropbox from 66.42.52.214 port 58892 ssh2 Aug 2 05:50:44 raspberrypi sshd\[2132\]: Invalid user gnuworld from 66.42.52.214 port 52236 Aug 2 05:50:45 raspberrypi sshd\[2132\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.42.52.214 ...	2019-08-02 12:46:55

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 66.42.52.160
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16566
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;66.42.52.160.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020042101 1800 900 604800 86400

;; Query time: 910 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Apr 22 03:58:41 CST 2020
;; MSG SIZE  rcvd: 116

HOST信息:

160.52.42.66.in-addr.arpa domain name pointer 66.42.52.160.vultr.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
160.52.42.66.in-addr.arpa	name = 66.42.52.160.vultr.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
178.19.247.25	attack	Nov 29 05:56:55 exim[32666]: [1\32] 1iaYKr-0008Us-89 H=(luss.it) [178.19.247.25] F= rejected after DATA: This message scored 103.5 spam points.	2019-11-29 14:06:52
109.131.11.246	attackbotsspam	Nov 25 15:05:44 zulu1842 sshd[30997]: reveeclipse mapping checking getaddrinfo for 246.11-131-109.adsl-dyn.isp.belgacom.be [109.131.11.246] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 25 15:05:44 zulu1842 sshd[30997]: Invalid user nauenberg from 109.131.11.246 Nov 25 15:05:44 zulu1842 sshd[30997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.131.11.246 Nov 25 15:05:46 zulu1842 sshd[30997]: Failed password for invalid user nauenberg from 109.131.11.246 port 57392 ssh2 Nov 25 15:05:46 zulu1842 sshd[30997]: Received disconnect from 109.131.11.246: 11: Bye Bye [preauth] Nov 25 15:05:58 zulu1842 sshd[31021]: reveeclipse mapping checking getaddrinfo for 246.11-131-109.adsl-dyn.isp.belgacom.be [109.131.11.246] failed - POSSIBLE BREAK-IN ATTEMPT! Nov 25 15:05:58 zulu1842 sshd[31021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.131.11.246 user=games Nov 25 15:05:59 zulu1842 sshd[31021]: ........ -------------------------------	2019-11-29 14:01:50
217.218.83.23	attack	Nov 29 07:30:44 dedicated sshd[30053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.218.83.23 user=root Nov 29 07:30:46 dedicated sshd[30053]: Failed password for root from 217.218.83.23 port 39364 ssh2	2019-11-29 14:43:05
106.12.42.110	attackspambots	Nov 29 07:26:29 root sshd[15870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.42.110 Nov 29 07:26:31 root sshd[15870]: Failed password for invalid user grolimond from 106.12.42.110 port 59206 ssh2 Nov 29 07:30:41 root sshd[15928]: Failed password for mysql from 106.12.42.110 port 37602 ssh2 ...	2019-11-29 14:44:06
190.205.103.211	attackbots	Unauthorized access or intrusion attempt detected from Thor banned IP	2019-11-29 14:07:48
36.92.95.10	attack	Invalid user tantinews from 36.92.95.10 port 60803	2019-11-29 14:20:41
51.15.71.134	attackbots	[portscan] Port scan	2019-11-29 14:16:42
94.21.243.204	attackspambots	Nov 29 07:44:55 MK-Soft-VM5 sshd[1502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.21.243.204 Nov 29 07:44:57 MK-Soft-VM5 sshd[1502]: Failed password for invalid user web from 94.21.243.204 port 52093 ssh2 ...	2019-11-29 14:46:26
211.23.76.156	attackspambots	Connection by 211.23.76.156 on port: 23 got caught by honeypot at 11/29/2019 3:56:57 AM	2019-11-29 14:18:04
49.232.35.211	attackbots	$f2bV_matches	2019-11-29 14:23:01
82.196.4.66	attackbots	2019-11-29T05:59:07.091102abusebot-5.cloudsearch.cf sshd\[30372\]: Invalid user khatereh from 82.196.4.66 port 38948	2019-11-29 14:05:31
91.232.12.86	attackbotsspam	Invalid user ru from 91.232.12.86 port 43667	2019-11-29 14:09:19
115.231.73.154	attack	Nov 29 05:58:52 venus sshd\[12513\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.231.73.154 user=root Nov 29 05:58:54 venus sshd\[12513\]: Failed password for root from 115.231.73.154 port 48098 ssh2 Nov 29 06:02:39 venus sshd\[12560\]: Invalid user sandy from 115.231.73.154 port 38504 ...	2019-11-29 14:03:05
165.227.182.180	attack	165.227.182.180 - - \[29/Nov/2019:05:56:24 +0100\] "POST /wp-login.php HTTP/1.0" 200 6581 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 165.227.182.180 - - \[29/Nov/2019:05:56:26 +0100\] "POST /wp-login.php HTTP/1.0" 200 6394 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 165.227.182.180 - - \[29/Nov/2019:05:56:26 +0100\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-11-29 14:25:00
190.221.81.6	attack	Nov 29 07:22:59 srv-ubuntu-dev3 sshd[24352]: Invalid user halliwell from 190.221.81.6 Nov 29 07:22:59 srv-ubuntu-dev3 sshd[24352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.221.81.6 Nov 29 07:22:59 srv-ubuntu-dev3 sshd[24352]: Invalid user halliwell from 190.221.81.6 Nov 29 07:23:01 srv-ubuntu-dev3 sshd[24352]: Failed password for invalid user halliwell from 190.221.81.6 port 38614 ssh2 Nov 29 07:26:53 srv-ubuntu-dev3 sshd[24613]: Invalid user tomcat from 190.221.81.6 Nov 29 07:26:53 srv-ubuntu-dev3 sshd[24613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.221.81.6 Nov 29 07:26:53 srv-ubuntu-dev3 sshd[24613]: Invalid user tomcat from 190.221.81.6 Nov 29 07:26:54 srv-ubuntu-dev3 sshd[24613]: Failed password for invalid user tomcat from 190.221.81.6 port 53304 ssh2 Nov 29 07:30:42 srv-ubuntu-dev3 sshd[24860]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rh ...	2019-11-29 14:43:36

最近上报的IP列表

136.228.174.236	164.71.148.69	92.222.74.255	44.221.146.252
125.222.2.215	86.105.186.236	49.67.13.95	158.36.94.251
110.43.49.47	89.14.1.129	49.233.216.158	102.190.123.220
2400:6180:0:d0::ba8:2001	45.157.217.108	175.24.51.45	190.148.50.106
95.70.128.21	59.103.96.6	5.53.124.115	74.130.134.18